last executing test programs: 15m4.406823204s ago: executing program 1 (id=2): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800000000000000e7342a46f1beb50ef4979873daa10359553c3ac987ccaddc1f3d4bb2a21d12fd3e02cf0a5652205fd1025930b61eb984bb0db65df445e14e7e60d2b5f4cf292ff0619dd31f534e8d6ccaeff33cf6899ef89380ed1d50b745e9c2235c70264591a44c6c72fba47afd5c3c4096e3e51e94f1c6238ee40bca38dfccf4e6ce018f7dc2d6668a2eac3f4ce320ecb2f997abff529b0a4ae0693a0d20df55302c487b0979c0e5ae"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000008000000000000100800010001000000"], 0x1c}}, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20050800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x40000010) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0), 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000008000005000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000002c0)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg1\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001080)=@bpf_ext={0x1c, 0x29, &(0x7f0000001280)=ANY=[@ANYBLOB="177a2000e0ffffff180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000dd000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000830c00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000a00000085000000a5000000183b000005000053c8dbda2ca67f5c8aa11b64e500000000000002382518120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018220000", @ANYRES32=r2, @ANYBLOB="0000000003000000"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0xec, &(0x7f00000008c0)=""/236, 0x40f00, 0x44, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xb, 0x6, 0x1c}, 0x10, 0x27d28, 0xffffffffffffffff, 0x2, &(0x7f0000000640)=[r2, r2, r2, r2, r2, r2], &(0x7f0000000680)=[{0x4, 0x4, 0x8, 0x7}, {0x2, 0x2, 0xe, 0x2}], 0x10, 0x9}, 0x94) r8 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r9, 0xc0185879, &(0x7f00000003c0)={@desc={0x1, 0x0, @desc2}}) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 15m4.020447015s ago: executing program 1 (id=7): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0x100400, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x4000000000000000, 0xffffffffffffffff, 0x2) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="da", 0x1, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) rmdir(0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = dup(r4) getsockopt$inet_buf(r5, 0x118, 0x25, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000640)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000008, 0x100010, r5, 0x100000000) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000340)=[{r8, 0x14a2}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x8) r9 = fcntl$dupfd(r7, 0x0, r7) write$sndseq(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7, @time={0xfffffffd, 0xfffff8ee}, {0x5, 0xb8}, {0x4, 0x1}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x4, @tick=0x80000001, {0x6, 0x4}, {0x8}, @result={0x200000d, 0x4}}], 0x38) 15m2.232924578s ago: executing program 1 (id=15): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000007c577e1700", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x244}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x190, 0x24, 0x100, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xa}, {0xc, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x158, 0x2, {{0x9, 0x6, 0x1, 0xe, 0x0, 0x7}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_DELAY_DIST={0x67, 0x2, "f7ff3384729dee58f5704274443ad0c300dc851017d8d19eddd71098957b0a6dddb7d7166aaa8db527a736db0b1a4462f1604338357ff509d8db40c0e5d0dbea1ebe8b7ee4fded6f499170929a930c824dd843f58471bc2f15603b55fa64cc0859d339"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xe6}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x9d}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x10000, 0x1, 0x5, 0xb, 0xd}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xfffffffffffffff8}, @TCA_NETEM_RATE64={0xc, 0x8, 0x5ee42cb4b39af5f3}, @TCA_NETEM_DELAY_DIST={0x62, 0x2, "a6a80f173afdc9bffc63df2c8392ae19b50ea6177030992a9a06e848aa03b5e1225f01b22c55769123484877391f469f8f75f4a237339c9dc10f1b294e6747920b8b53251e3c4947ca762c2877d52e43da7fa45957b598e8dc455ac10ee1"}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x1, 0x7}}]}}}, @TCA_RATE={0x6, 0x5, {0xfd, 0x9c}}]}, 0x190}, 0x1, 0x0, 0x0, 0x8085}, 0x20008850) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x494, 0x2c, 0xd27, 0x70bd26, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x464, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x3}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7fffffff}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x1}, @TCA_FLOW_POLICE={0x438, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd692, 0x1, 0x9, 0xd3, 0x1, 0x6, 0xffff757b, 0x69d76847, 0xf, 0x9, 0xd5, 0x5, 0x3, 0xfffffff8, 0x9, 0x6, 0xd, 0x17a2c000, 0x1, 0x0, 0x9, 0x762, 0x5, 0x4, 0x2, 0x0, 0xfffffff9, 0x5, 0x7ff, 0x0, 0x6, 0x4, 0x5, 0x4, 0x0, 0x5, 0x71, 0x7fff, 0x89f1, 0x574, 0x0, 0x34, 0x9, 0x0, 0x3, 0x2, 0x9, 0x89, 0x0, 0x77, 0x4, 0x80000000, 0x50de8f45, 0x0, 0x7, 0x2, 0x64b, 0x6, 0x7, 0x5, 0x1, 0x30, 0x1ff, 0xaa7, 0x4, 0x8, 0x401, 0x8, 0xe02, 0x0, 0x7fff, 0x800, 0x6, 0x0, 0x3, 0x7, 0x400, 0xda, 0x80, 0x4, 0x401, 0x5, 0x1, 0x8, 0x1, 0x6, 0x3, 0x1f70, 0x0, 0x40, 0xd, 0x8000, 0x400, 0x7fffffff, 0x13, 0x8, 0xc, 0x3e, 0x0, 0x9, 0x5, 0x100, 0x6, 0x8, 0x20000000, 0x1000, 0x6, 0x1, 0x64, 0x0, 0x8, 0x8, 0x3, 0x3, 0x2, 0x1, 0x2, 0x5, 0x2, 0x8, 0x8001, 0x3, 0x3, 0x7d2, 0xd9d, 0x37, 0xf, 0xf, 0x0, 0x9, 0x10001, 0x6, 0xff, 0x4248, 0x3, 0x2, 0x6, 0x88c8, 0x6, 0xf88, 0x2, 0x304, 0x73, 0x0, 0x5, 0x5, 0x7ff, 0x91f, 0xcfa, 0x6, 0x1, 0x1, 0x2, 0x6, 0xfffffff9, 0x2, 0x80, 0x4, 0x10000, 0x8, 0x170, 0x2, 0xb0, 0x81, 0x3, 0x3, 0x6, 0x9, 0x6, 0x3, 0x4, 0x2, 0x7, 0x3, 0x0, 0x9, 0x7d, 0x3, 0x2, 0x4, 0x0, 0x3, 0xfff, 0x9, 0x7, 0x10000, 0x8, 0xfffffffe, 0x7fff, 0x9, 0x7f, 0x9, 0x401, 0xb2, 0x4e0b, 0xc8, 0x6, 0x3, 0x3, 0xfe, 0x7, 0x7, 0x100, 0x9, 0x9, 0x6, 0x80000001, 0x7fffffff, 0x7f, 0x5, 0x6, 0x9, 0x3ff, 0x2, 0x1, 0xe, 0x8, 0x7fffffff, 0x8, 0x6, 0x0, 0x2, 0x1000, 0x5, 0x54e, 0x8000, 0xfffffff7, 0x1ff, 0x5, 0x7f, 0x4, 0x293, 0x0, 0x0, 0x9, 0x5f7, 0x5, 0x8, 0x80000000, 0x3, 0x5, 0x9, 0xfffffffd, 0x7ad4, 0x4ea, 0x2, 0x8, 0x2, 0x6, 0x8, 0xa, 0x9, 0x1, 0x9, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xabbb}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0xb613}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0xe}}]}}]}, 0x494}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r11 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGFEATURE(r11, 0xc0404807, &(0x7f00000000c0)={0xfe, "da40e9044a70415fce6641fd75ff409d746f058b7b22543213c93d6ce45aa95e13c9c6410bf4878961f81db5dd236ff681b54866d4ca438a7a151f7adcb1ef9c"}) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60001ee5", @ANYRES16=0x0, @ANYBLOB="040025bd7000fddbdf250400000008000800ac1414bb08000700ac1414aa08000700ac1414210800020003000000080002000300000008000700ffffffff080004000200000014000500fe8000000000000000000000000000aa"], 0x60}, 0x1, 0x0, 0x0, 0x4000800}, 0x8800) ioctl$HIDIOCGRAWPHYS(r11, 0x4004480d, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15m2.232445997s ago: executing program 32 (id=15): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000007c577e1700", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x244}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x190, 0x24, 0x100, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xa}, {0xc, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x158, 0x2, {{0x9, 0x6, 0x1, 0xe, 0x0, 0x7}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_DELAY_DIST={0x67, 0x2, "f7ff3384729dee58f5704274443ad0c300dc851017d8d19eddd71098957b0a6dddb7d7166aaa8db527a736db0b1a4462f1604338357ff509d8db40c0e5d0dbea1ebe8b7ee4fded6f499170929a930c824dd843f58471bc2f15603b55fa64cc0859d339"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xe6}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x9d}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x10000, 0x1, 0x5, 0xb, 0xd}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xfffffffffffffff8}, @TCA_NETEM_RATE64={0xc, 0x8, 0x5ee42cb4b39af5f3}, @TCA_NETEM_DELAY_DIST={0x62, 0x2, "a6a80f173afdc9bffc63df2c8392ae19b50ea6177030992a9a06e848aa03b5e1225f01b22c55769123484877391f469f8f75f4a237339c9dc10f1b294e6747920b8b53251e3c4947ca762c2877d52e43da7fa45957b598e8dc455ac10ee1"}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x1, 0x7}}]}}}, @TCA_RATE={0x6, 0x5, {0xfd, 0x9c}}]}, 0x190}, 0x1, 0x0, 0x0, 0x8085}, 0x20008850) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x494, 0x2c, 0xd27, 0x70bd26, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x464, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x3}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7fffffff}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x1}, @TCA_FLOW_POLICE={0x438, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd692, 0x1, 0x9, 0xd3, 0x1, 0x6, 0xffff757b, 0x69d76847, 0xf, 0x9, 0xd5, 0x5, 0x3, 0xfffffff8, 0x9, 0x6, 0xd, 0x17a2c000, 0x1, 0x0, 0x9, 0x762, 0x5, 0x4, 0x2, 0x0, 0xfffffff9, 0x5, 0x7ff, 0x0, 0x6, 0x4, 0x5, 0x4, 0x0, 0x5, 0x71, 0x7fff, 0x89f1, 0x574, 0x0, 0x34, 0x9, 0x0, 0x3, 0x2, 0x9, 0x89, 0x0, 0x77, 0x4, 0x80000000, 0x50de8f45, 0x0, 0x7, 0x2, 0x64b, 0x6, 0x7, 0x5, 0x1, 0x30, 0x1ff, 0xaa7, 0x4, 0x8, 0x401, 0x8, 0xe02, 0x0, 0x7fff, 0x800, 0x6, 0x0, 0x3, 0x7, 0x400, 0xda, 0x80, 0x4, 0x401, 0x5, 0x1, 0x8, 0x1, 0x6, 0x3, 0x1f70, 0x0, 0x40, 0xd, 0x8000, 0x400, 0x7fffffff, 0x13, 0x8, 0xc, 0x3e, 0x0, 0x9, 0x5, 0x100, 0x6, 0x8, 0x20000000, 0x1000, 0x6, 0x1, 0x64, 0x0, 0x8, 0x8, 0x3, 0x3, 0x2, 0x1, 0x2, 0x5, 0x2, 0x8, 0x8001, 0x3, 0x3, 0x7d2, 0xd9d, 0x37, 0xf, 0xf, 0x0, 0x9, 0x10001, 0x6, 0xff, 0x4248, 0x3, 0x2, 0x6, 0x88c8, 0x6, 0xf88, 0x2, 0x304, 0x73, 0x0, 0x5, 0x5, 0x7ff, 0x91f, 0xcfa, 0x6, 0x1, 0x1, 0x2, 0x6, 0xfffffff9, 0x2, 0x80, 0x4, 0x10000, 0x8, 0x170, 0x2, 0xb0, 0x81, 0x3, 0x3, 0x6, 0x9, 0x6, 0x3, 0x4, 0x2, 0x7, 0x3, 0x0, 0x9, 0x7d, 0x3, 0x2, 0x4, 0x0, 0x3, 0xfff, 0x9, 0x7, 0x10000, 0x8, 0xfffffffe, 0x7fff, 0x9, 0x7f, 0x9, 0x401, 0xb2, 0x4e0b, 0xc8, 0x6, 0x3, 0x3, 0xfe, 0x7, 0x7, 0x100, 0x9, 0x9, 0x6, 0x80000001, 0x7fffffff, 0x7f, 0x5, 0x6, 0x9, 0x3ff, 0x2, 0x1, 0xe, 0x8, 0x7fffffff, 0x8, 0x6, 0x0, 0x2, 0x1000, 0x5, 0x54e, 0x8000, 0xfffffff7, 0x1ff, 0x5, 0x7f, 0x4, 0x293, 0x0, 0x0, 0x9, 0x5f7, 0x5, 0x8, 0x80000000, 0x3, 0x5, 0x9, 0xfffffffd, 0x7ad4, 0x4ea, 0x2, 0x8, 0x2, 0x6, 0x8, 0xa, 0x9, 0x1, 0x9, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xabbb}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0xb613}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0xe}}]}}]}, 0x494}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r10, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r11 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGFEATURE(r11, 0xc0404807, &(0x7f00000000c0)={0xfe, "da40e9044a70415fce6641fd75ff409d746f058b7b22543213c93d6ce45aa95e13c9c6410bf4878961f81db5dd236ff681b54866d4ca438a7a151f7adcb1ef9c"}) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60001ee5", @ANYRES16=0x0, @ANYBLOB="040025bd7000fddbdf250400000008000800ac1414bb08000700ac1414aa08000700ac1414210800020003000000080002000300000008000700ffffffff080004000200000014000500fe8000000000000000000000000000aa"], 0x60}, 0x1, 0x0, 0x0, 0x4000800}, 0x8800) ioctl$HIDIOCGRAWPHYS(r11, 0x4004480d, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m43.838868759s ago: executing program 2 (id=4667): r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES16=r0, @ANYBLOB="6226cede877822e08ce95f97cd132b02354527ff58459001822c96f09dc5abbc6dab98b31d42146dfa0215aea7938d0aea9125447824f04ffa18fa348b1307eeaf08502f1512c1b8db230af3533538a7a727686f4d36582607802704d730a556fdcfd65bf1462c4e4c570dd5acc7750303", @ANYRES32=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @void}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r5}, &(0x7f0000000080), &(0x7f0000000500)=r6}, 0x20) close(r1) 9m43.797691483s ago: executing program 2 (id=4669): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') preadv(r0, &(0x7f00000003c0), 0x0, 0x0, 0x0) writev(r0, &(0x7f00000003c0), 0x100000000000022d) 9m43.797344633s ago: executing program 2 (id=4670): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x20) 9m43.744871407s ago: executing program 2 (id=4671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$eJzs28FrXEUcB/BfkqapqclGrdUWxEEvFeTR5OBFL0FSkC4obSO0gvBqXnTJczfkLYEVsXry6t8hggjeBPGml1z8DwRvuXisID7JrrZd3RVWQjfI53PZH8z7zs7ssAuzzBy+8tn7O9tVtp13Y3ZmJmZ3I9LdFClm4y8fxwsvf//DM9dv3rq63mxuXEvpyvqN1ZdSSsvPfvvWh18891337JtfL3+zEAcrbx/+svbzwfmDC4e/33ivVaVWldqdbsrT7U6nm98ui7TVqnaylN4oi7wqUqtdFXtD7dtlZ3e3l/L21tLi7l5RVSlv99JO0UvdTuru9VL+bt5qpyzL0tJiMLlT96rNz+/WdR1R1/NxOuq6rh+JxTgbj8ZSLEcjVuKxeDyeiHPxZJyPp+Lp+OqnL3tHCQAAAAAAAAAAAAAAAAAAAOD4THr//0L/qWmPGgAAAAAAAAAAAAAAAAAAAP5frt+8dXW92dy4ltKZiPLT/c39zcHroH19O1pRRhGXoxG/Rf/2/8CgvvJac+Ny6luJT8o7f+bv7G/ODedXoxEvjs6vDvJpOL8Qiw/m16IR50bl52NtZP5MXHr+gXwWjfjxnehEGVtxlL3//h+tpvTq682/5S/2nxtv7mEsDwAAAByLLN0zcv+eZePaB/kJ/h8Y2l8fZS+emurUiYiq98FOXpbFnmJkcelkDKNfnD7ODucjYrLUr3VdT/9DmFIx/puyEBH/ueeZiDgZE/xHMe1fJh6G+4s+7ZEAAAAAAAAAAAAwibHHABf+7YTg3ETHCac9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//0AbP3Q==") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) close_range(r2, r4, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r7, &(0x7f0000000140)='./file1\x00', r7, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104) rmdir(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ptrace$peek(0x1, r0, &(0x7f0000000000)) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 9m43.45668943s ago: executing program 2 (id=4675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00"], 0xa8}}, 0x0) 9m43.440020331s ago: executing program 2 (id=4677): r0 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RLERRORu(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="ac795806ab6fa85a2d6c77aee522f880396501eb1e83b31efef0c9099e208ce65bec25cd58daf3d180397490650efd35a1a1b6c9c676926a5a58b2343f59260ff6ca1698885c"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef35"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766ffffff00", @ANYRESHEX=r3, @ANYBLOB=',k']) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e24, 0x0, 0xfffe, 0x0, 0x2, 0x0, 0xa0, 0x8, 0x0, 0xffffffffffffffff}, {0x4, 0xb6e1c69, 0x8000000, 0x0, 0x0, 0x0, 0x100, 0x400}, {0x800, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x1}, {{@in=@private=0xa010102, 0x4d6, 0x32}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x1, 0x1, 0x80}}, 0xe8) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r7 = dup(r6) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, &(0x7f0000000140)={{0xf, 0x7}, {0x8, 0x8}, 0x6}) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "f25840830770543e", "b442a4458aef51f15983bd1ee955a836", "bc18f6af", "58912dcf0a397c36"}, 0x28) 9m27.128804729s ago: executing program 33 (id=4677): r0 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RLERRORu(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="ac795806ab6fa85a2d6c77aee522f880396501eb1e83b31efef0c9099e208ce65bec25cd58daf3d180397490650efd35a1a1b6c9c676926a5a58b2343f59260ff6ca1698885c"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef35"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766ffffff00", @ANYRESHEX=r3, @ANYBLOB=',k']) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e24, 0x0, 0xfffe, 0x0, 0x2, 0x0, 0xa0, 0x8, 0x0, 0xffffffffffffffff}, {0x4, 0xb6e1c69, 0x8000000, 0x0, 0x0, 0x0, 0x100, 0x400}, {0x800, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x1}, {{@in=@private=0xa010102, 0x4d6, 0x32}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x1, 0x1, 0x80}}, 0xe8) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r7 = dup(r6) ioctl$PTP_PEROUT_REQUEST(r7, 0x40383d03, &(0x7f0000000140)={{0xf, 0x7}, {0x8, 0x8}, 0x6}) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "f25840830770543e", "b442a4458aef51f15983bd1ee955a836", "bc18f6af", "58912dcf0a397c36"}, 0x28) 7m10.130032479s ago: executing program 6 (id=12307): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 7m10.080665533s ago: executing program 6 (id=12310): openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x1e, 0x80000, 0x8) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0) 7m9.838126673s ago: executing program 6 (id=12318): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x149) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x5) 7m9.789272387s ago: executing program 6 (id=12322): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000540)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000040)=0x4) ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) fcntl$setpipe(r4, 0x407, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) inotify_init1(0x800) 7m9.260898369s ago: executing program 6 (id=12339): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x149) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x5) 7m9.061818635s ago: executing program 6 (id=12345): openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x1e, 0x80000, 0x8) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0) 7m9.041885417s ago: executing program 34 (id=12345): openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x1e, 0x80000, 0x8) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0) 4m50.217406225s ago: executing program 3 (id=18018): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x37}, 0x2}], 0x1c) 4m50.080221316s ago: executing program 3 (id=18025): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000200)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x6, 0x102}, 0x8) 4m50.000168232s ago: executing program 3 (id=18028): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket(0x10, 0x803, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route(r0, 0x0, 0x0) 4m49.90918291s ago: executing program 3 (id=18030): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m49.89355741s ago: executing program 3 (id=18031): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2cc, &(0x7f0000000100), 0xfd, 0x4a5, &(0x7f0000000e00)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810754, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@usrquota}, {@prjquota}, {@usrquota}, {@resuid={'resuid', 0x3d, 0xee00}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}, {@nodiscard}, {@test_dummy_encryption}]}, 0xff, 0x46e, &(0x7f0000000e40)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 4m49.533132779s ago: executing program 3 (id=18042): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x8d0, &(0x7f0000000140)={[{@fat=@sys_immutable}]}, 0x1, 0x25f, &(0x7f0000000840)="$eJzs3cFqE0EYB/Av2zSJvdizeFjw4qmobxAkghgQInvQk4HqpRVhe1k95TF8Bh/Jx8ipt0i7wbSpllqSTpP9/SDsx/4Z8s1lJ4GZ5OPjL0eHX08+z379iF6WRztiEqcR+5HFTtRa82t2XnfiokkAAJtmNBr3U/fACrWu3irL/ng3IrpXkuLn3TQFAAAAAAAAAADAql3a/9+z/x8AmsD+/+1Xlv3x3vzz22X2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpnM5mD2fXvFL3BwCs3tn6n1n/AaBRfP8HgOa52fqfpW4TAFihd+8/vOlnMRjleS9iOqmKqqivdf7q9XDwLD/XWYyaVlWxO6+Hg+d1ni/ne/PxL/6ad+Lpkzo/y16+HS7l3Thc9+QBAAAAAAAAAAAAAAAAAADgnjjI/9hf3J1WVbFT5wf/yuvqwu8DLJ3fb8ej9p1NAwAAAAAAAAAAAAAAAAAAADbaybfvR+Pj40/lFhadiLgHbWxg8SBuMaoXa26sG7Hut2hW0Wpf8wRI/WQCAAAAAAAAAAAAAAAAAIDmWRz6Td0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKSz+P//mxb/Pyr1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBm+B0AAP//Ai+I5w==") symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) 4m49.493460793s ago: executing program 35 (id=18042): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x8d0, &(0x7f0000000140)={[{@fat=@sys_immutable}]}, 0x1, 0x25f, &(0x7f0000000840)="$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") symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) 4m27.993725361s ago: executing program 8 (id=19166): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=") setxattr$security_evm(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000001240)=@v2={0x5, 0x4, 0x6, 0x20000005, 0x449, "802758549f767917a511fcb85a6811c89a9f938f6cf26e7819264e754f696ccb09fdd5bb1ca3266a6f910bb5b1e593e3a2def1e13049f1986b50e948b41ac142acf5c3cf0b6ff8783fcf95340b1d4c44dec7e1d04b44b97ec847be69f7dcbfd273c4e59043dd12f9c5121bec2bdcb48aca8ba9c7df3307e0214f9f1705db296cd993dbda86d6f628e09b3a5d0c975c139ee587540dd4b1575035121ed3e2c39c70fc0408e942ea37b31cb97bf8bd28fa32cb77d9b500000ffc98766e680b1b343b90ab260069dc31cd3e24dd81db232343f09df2d37c6ce1e958788b8524cae29d2c44f37643b99b874261920bdbf07c5b5657b8c5a074ba16618c6b542dc70f151208e439ac1e0944816c2df39760c8521324da15a53bd1391d39e97bd3540d36edb4caad4f44b7fcff09ecc660d2d07d24a20e6268e4635dc1cd5135626df36a971f736ba3dca2506a836af680f601b6d5fd1c9bf16ab29fcbef46d483440444fcba2caf4193accf1f2d96f5f38b2d9b381af5c9772715e0f0baae7acf39ecb0a8d990e7969f31eada123df3f95cf3d718310780016fa7933e13d2d552991d4d9d36b6c03b46da6511382fa17a4cd78d8d87ac8c8c0f0a94d117350d190463671d2ef879fc9414051f8493e21b3ff548cf58c712dba038151a959601dd5cee5533a488ff8dd78f9f84af12c8027af72bfa71eff13685642be63d70e87b4b263dbb0aa74fa0ca10a5b476d8059fa0740716d12c3bc6092f3a006a0e837e1267acf9c4df38e728a9f632cb2b1e3ff5be15ab9d62aa39d7725304126e906c1b8f9a7a5c189e5ad9e5385827371df09ce5ece4a28c1e19ffa0f63ae831d74a419ae35cc9a8be23e16f989b12b28f5885acb90551335a5c3843fc5d2a93720960ac345696d58ab211a4db493a1c5dfbbfa6edccda5c5bcaf3d2d2eaf76b68a53d9af08daba8d84b26aea926adec729cc26d4c61640c072d93680eb99f4aa27b0cb37312eaa879b3884116d995c3cc429b240f19c89bab52f548f06d6334a199b29761f6b6cff40e75b901f3182cdd0c6189e6efbac2319ce43e939bf775f7da79cc3cde02f7ece13874216f86818004df381fa14deb476eabbba842a667523c2fe661083ff75b05be6a474114e9bcbac24ccc3a23681ef2bc62a0ff0415ee2f5ea255f131566206b0d42b21bdbeaba935c96193af7ef0e291119f03452ef97347c6af0c4df01511f75fa328de35d5b2ba4238eb000000000020000000d4be008a3287a632b153034171e749e93c92ed19a63be57a1df20b5679fc7c7ea165f0c45183c1f47be2e7d52c756257bee36bb746c46cea88f9087b4699c682e2fcf5c5ea57fdffe4efd45da6d039f9fa46461918a6852fca394a7b1b6f06abab91d1799fc5286c5964ae1ce55d2a275841bfc56c56cfe0b9810f067ba47be3c69e32f7251b3a5af071047e01e9cdaa5e67a94500a250f1bfe8a245d835c224fb20ee0bcd46768520593dfe4d2490d956828a59b5b6253f82e9ac78ee0e9e8840ef66532d4a9e25f68bbe2f0ea2"}, 0x452, 0x1) fchmodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4) 4m27.895313099s ago: executing program 8 (id=19171): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000dc0)='\\', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000f00)="5604b1f93280601007f1bfc8446f785300fcfc78c557b8e530dc9f84187a0dd96c1488a0a665ec777782588791c4fd3b0443cd5bde128419bfe468e776011282e789dbfd36ffcbeddbc482d96b9f47e195afe70b764b941e9590c8cfb377d923eaffee045993ff1eb3737b9ec29b8416714cab16f748d946050000002f010000000000000000000000000051ed68f6e8b6d92237c7838a03a25eebb2585ad1449314730ba4f08e91", 0xa8}, {&(0x7f0000001a80)="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", 0x2f6}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="9e816ef4b3bb28f735f8370cb5bbec7b062fdecbd804052ca1dde813e8ca43307d9bbf48ea24c36bb84bf4ec89d234453b01c57c1a3ee05d6b", 0x39}, {&(0x7f0000000040)}, {&(0x7f00000002c0)="9ba5c1ccf6a36a84fe8c0b9c637799ff8429f7265acc76d15175d1c4168fa969a542536a3ed7f7baf33f7788b5496402365515276bb43a27c51b630d7dbc0a35ef2c1ceb9cac1a858cfb2cd296d3c24d36d1c382f354de074d30a339e701189e475d8a826e2688bbaa872e", 0x6b}], 0x3}}], 0x3, 0x0) 4m27.894964159s ago: executing program 8 (id=19173): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private2, 0x9}]}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x19) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x0, 0x1, 0x9, 0xbb, 0x57e0, 0x0, 0x4662, r2}, 0x20) 4m27.873234611s ago: executing program 8 (id=19174): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000200), 0x6, 0x515, &(0x7f0000000c00)="$eJzs3V1PY3kZAPDnlHYGdtGyu16smziL+xLG6BRY9oV4sS6JL1ebGNd7BqEQQqETKLsDmSjzCTRmoibe6JU3Jn4AEzMfwZhMondeeKWZKONceGNqTns6A6XFTqa0M/D7JYfzP/8/Pc/zFFrOGz0BXFiTEfFRRIxExNsRUcz6c9kUB80p/b4Hh7eW0ymJev2TfyaRZH3t63wxe1jqe9+J+EFyMu7O3v7GUqVS3j7evX9tfXNprbxW3pqbm31//oP59+ZneqwkyZ82+lJEfPjNhz/78W++/eEfvvbZ3xb/cfWHaVrXs/FOdfRDs/RCjB5bPj/S35t8o0IAAJ4Hr0TEyxHxRkR8JYoxEqduRgMAAADPofo3xi+3mgAAAMD5lIuI8Uhypex63/HI5Uql5jW8X4gXcpXqTu2rq9XdrZV0LGIiCrnV9Up5JrtWeCIKSbo822g/Xn6nbXkuuwb3TnEsXW6MAQAAAIOx0Lb//7DY3P8HAAAAzpnOJ+NHBp4HAAAAcHZcjA8AAADnn/1/AAAAONe++/HH6VR/cHircR+AlU/3djeqn15bKe9slDZ3l0vL1e0bpbVqda1SLvXwHwGVavXGu7G1e3O6lt+pTe/s7S9uVne3aouN+3ovll8eQE0AAADAcS+9fvcvSUQcfH2sMaUuZWOFoWYGPEOSfFvH9S8PKROgLzoc0h879QGTu2eXDDBQ7X/TgYvDPj6QtHe0bRiMdttU+GN7x5X/G8s2BwAADMfUF53/h4sqN+wEgKH5yYmeS0PJAxi8no/FT55tHsDgFdzmDy68E+f/24x2Gzhx/r+bev2JEgIAAPpuvDk7iOxc4HjkcqXSo9OCyep6pTwTEZ+PiD8XC5fT5dkh5gsAAAAAAAAAAAAAAAAAAAAAAAAAz6N6PYk6AAAAcK5F5P6eZPf/miq+Nd5+fOBS8p9iZHcF/uyXn/z85lKttj2b9v/rUX/tF1n/O8M4ggEAAAAXUeHU0dZ+ems/HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD66cHhreXWNMi49xdiLCY6xc/HaGM+GoWIeOHfSeSPPC6JiJE+xD+4HRGvdoqfpGnFRJZFe/xcRIwNOf6LfYgPF9ndhYj4qNPrLxeTjXnn118+m57W/YXGi7xj/Nb730iX97/P9RjjtXu/m+4a/3bEa/mT8ccjeRQ/6RL/zR7jX//+/n63sfqvI6Y6/v1JmrNc9o21zRvTO3v719Y3l9bKa+WtubnZ9+c/mH9vfmZ6db1Szr52jPHTL/3+4E7X+psBjsZv1TnRzPBH3ep/q8f6/3vv5uErzWbhZPyIq292/vm/2ph3fv7T34m3s6cnHZ9qtQ+a7aOu/PZPV7rllsZf6fL8N3/+xfrj+Plj9V/trfyjNf+qt4cAAGdpZ29/Y6lSKW8PoPHGu/1bYdJopFtBA0p+2I3WwY5nJZ/R4US/HMOt/VtPvZ7W5vDTrOevfasr3WfoPDTENyUAAOBMPN7oH3YmAAAAAAAAAAAAAAAAAAAAcHE1/v9/5Ak/CPD1J/uksfaYB8MpFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgVP8LAAD//9WHwV0=") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x202, &(0x7f0000000040)={&(0x7f0000000d00)="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", 0xfffffffffffffeb0}) 4m27.550060736s ago: executing program 8 (id=19192): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f00000000c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3da, &(0x7f00000004c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) prlimit64(0x0, 0xe, 0x0, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7a680000) 4m27.022708369s ago: executing program 8 (id=19195): iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3, 0x0, 0x4}, 0x18) r4 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r4, 0x1) r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r5, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 4m27.001156011s ago: executing program 36 (id=19195): iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3, 0x0, 0x4}, 0x18) r4 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r4, 0x1) r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r5, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 3.084873823s ago: executing program 4 (id=26197): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3", 0xbe}, {&(0x7f00000002c0)="04811ff500139d", 0x7}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="c54bf6a98ab7385352e2250e609e265e9af572d90dcb8dab076f8e096f4d7c9747683b850472ff12104f6a8cf2dd2e436dfd1deb710e256c8304506b", 0x3c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000bc0)="fdb51366d8bf47b29e84e4c5da69f3197f223e2abe7db8591aadf399965ae1aea9ad66d31dbafedecb1cafd340d0ba505909e06af82cda530ec09bf835753b2c792759fa099e09ef63bd71c34f2e49c3fab65d21fb51b1cade4ff440438db6f27c1f9741d57d1e99bbd03ff936355711c7be1d9089631b1da303e8139b2d3a7a", 0x80}, {&(0x7f0000000c80)="86efbada0169801185c95c9137e13e596029939a0abf2b4cb9494296e73a8b723e4a497a6fe00adb4d1c8086a810874c8557755432a57bd469754571388c562808b415bc5f331157b5a828e9a50524515ac81ed9db7059c03e54bc7c33a433007edb98083048a86133c7bb86d4bd54a252da0c6503842b878bf0e268584a159e0744a4084eda141e5d63cbb0fd1845e75cd9c70e0ba8d0ab22af9d154181201660a4af893011549120a0af7cae8a213065677a7f2313040e6e5daf70f2d88d3928053797844ecec3fe15fd5b083a6fa03afbaa645238e5c1566bcccb9e5df3c6840ff74f05ff5b6b1b5e48d5e73a66e99f2a58c93fb56c6c53", 0xf9}, {&(0x7f0000000d80)="a3644a56384067083b752902b2bf24b801532f1099c6436814c7431327b28ec8e11a11327c8a2a328a5e9302adec71f041bab0bd582a271a70e301fe4caa2a22f4a40c735f751d87b6c2ebbb2d27b20d80104ab6e238bd928ec24eea5a76209b1356ff7bfb9c439ec807a94c9b653ba5cb49cae0729d06964bf69b5c3a0e36ebfd5bb0dfc8d277b333fa420d2791e84aa6070ac5fb9aa97580d09d", 0x9b}, {&(0x7f0000000e80)="7ca83bbb9c65ddc0eb6e967139f9816813c7aaa41650de7f30e2c0943a61359cbd5caff98c1f347aa3efc3e475770f7fd42325e54c518c5ddef1a6f9b3652e88d55c27a103e9392a70e4", 0x4a}], 0x4}}], 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.032738947s ago: executing program 4 (id=26199): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x6, 0x4, 0x0, 0x0, 0xc08}}, 0x120) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0xfffffffc, 0x3, 0x3}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0xfe}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast2, @in6=@private0, 0x0, 0xa}}]}, 0xcc}}, 0x0) 3.005195599s ago: executing program 4 (id=26200): syz_io_uring_complete(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={0x0, 0x6}, &(0x7f0000000440)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1200004, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX, @ANYRES64=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x52) fcntl$setlease(r5, 0x400, 0x1) 2.478092051s ago: executing program 7 (id=26209): sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x40000) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r3 = gettid() move_pages(r3, 0x8, &(0x7f0000000040)=[&(0x7f0000934000/0x2000)=nil, &(0x7f0000163000/0x3000)=nil, &(0x7f000028b000/0x3000)=nil, &(0x7f000093b000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000165000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f00000000c0)=[0x2, 0x10100], &(0x7f0000000100)=[0x0], 0x4) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r4 = open_tree(r2, 0x0, 0x81800) open_tree(r4, &(0x7f0000003d80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x80801) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x35, 0x2, @thr={&(0x7f0000000400)="85d231ec553d0b310653535a502bd73f12a2e544f8e38062ef506764766df92fa69daf0a340cc0e142f94d1cb6452ae6a24e295bd1e910b9ef68cf4e95135719391c5978ac3c34c239b90345778d81c708b392c6355bdbbcbf442159db0f6926bfbf436f1a121b89271032801fb586db6fe3630afdc5a0c96bd20b7941527e0b3b2db37e2c0de3870f3a00cea91100db54590ee93e4c33f4", &(0x7f00000004c0)="d9c08904fa4c76b8bed16e93f35c5b438a628bc76685e4b4df768e74230db119ed028770fbb34258ba6ec7db1c6b7ce5a952e4c67dd8914e7ff6062701eedb8a50d66540c121cb69e2c2763ebc"}}, &(0x7f0000bbdffc)) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r6, 0x0, 0x100000000}, 0x18) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x4007) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x22081) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e20, @broadcast}}}, 0xffffffffffffff22) socket$netlink(0x10, 0x3, 0x0) 2.014372338s ago: executing program 4 (id=26216): r0 = socket(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 1.61520557s ago: executing program 7 (id=26218): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000540)='system_u:object_r:tape_device_t:s0\x00', 0x23) 1.565521765s ago: executing program 4 (id=26220): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000005c0)='objagg_destroy\x00', r2, 0x0, 0x3}, 0xfffffffffffffeca) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, "0040001e1d113c812e5d6000"}) r4 = syz_open_pts(r3, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=f$7rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) ppoll(&(0x7f0000000000)=[{r3, 0x4}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000180)={0xd, 0x8, 0xfffffffc, 0xb6b, 0x4, "aa00003986b9ee6bd231334c1a280d7ea400"}) r7 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="0000000000004a641c0012000c000100626f6e6400"], 0x3c}}, 0x0) socket(0x1, 0x803, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000140)='./file0\x00', 0x1, &(0x7f0000000300)=ANY=[], 0x0, 0x673, &(0x7f0000000b40)="$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") connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'veth1_to_bridge\x00'}}, 0x1e) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0xc000) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80204d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x44, 0x8, 0x0, 0x0}}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYRESOCT=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.520785448s ago: executing program 7 (id=26221): io_setup(0x7, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x400000}]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9, 0x0, 0x1ffffffffffffffd}, 0x18) r10 = add_key$keyring(&(0x7f0000000500), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r11, 0x0, 0x1, 0x4) vmsplice(r11, &(0x7f0000000880)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da02e0", 0x3}, {&(0x7f00000002c0)='@', 0x1}, {&(0x7f0000000440)="15", 0x1}, {&(0x7f0000003040)="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", 0xfbe}, {&(0x7f0000000480)="37c2", 0x2}], 0x7, 0x0) ioctl$sock_inet_udp_SIOCINQ(r11, 0x541b, 0x0) write(r6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r4, &(0x7f00000001c0)='m', 0x1, 0x1}]) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.520247268s ago: executing program 5 (id=26222): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x8}]}]}, 0xfc}}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x6, 0x4, 0x0, 0x0, 0xc08}}, 0x120) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0xfffffffc, 0x3, 0x3}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0xfe}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast2, @in6=@private0, 0x0, 0xa}}]}, 0xcc}}, 0x0) 1.506612849s ago: executing program 5 (id=26223): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3", 0xbe}, {&(0x7f00000002c0)="04811ff500139d", 0x7}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="c54bf6a98ab7385352e2250e609e265e9af572d90dcb8dab076f8e096f4d7c9747683b850472ff12104f6a8cf2dd2e436dfd1deb710e256c8304506b", 0x3c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000bc0)="fdb51366d8bf47b29e84e4c5da69f3197f223e2abe7db8591aadf399965ae1aea9ad66d31dbafedecb1cafd340d0ba505909e06af82cda530ec09bf835753b2c792759fa099e09ef63bd71c34f2e49c3fab65d21fb51b1cade4ff440438db6f27c1f9741d57d1e99bbd03ff936355711c7be1d9089631b1da303e8139b2d3a7ac9ef868f", 0x84}, {&(0x7f0000000c80)="86efbada0169801185c95c9137e13e596029939a0abf2b4cb9494296e73a8b723e4a497a6fe00adb4d1c8086a810874c8557755432a57bd469754571388c562808b415bc5f331157b5a828e9a50524515ac81ed9db7059c03e54bc7c33a433007edb98083048a86133c7bb86d4bd54a252da0c6503842b878bf0e268584a159e0744a4084eda141e5d63cbb0fd1845e75cd9c70e0ba8d0ab22af9d154181201660a4af893011549120a0af7cae8a213065677a7f2313040e6e5daf70f2d88d3928053797844ecec3fe15fd5b083a6fa03afbaa645238e5c1566bcccb9e5df3c6840ff74f05ff5b6b1b5e48d5e73a66e99f2a58c93fb56c6c53", 0xf9}, {&(0x7f0000000d80)="a3644a56384067083b752902b2bf24b801532f1099c6436814c7431327b28ec8e11a11327c8a2a328a5e9302adec71f041bab0bd582a271a70e301fe4caa2a22f4a40c735f751d87b6c2ebbb2d27b20d80104ab6e238bd928ec24eea5a76209b1356ff7bfb9c439ec807a94c9b653ba5cb49cae0729d06964bf69b5c3a0e36ebfd5bb0dfc8d277b333fa420d2791e84aa6070ac5fb9aa97580d09d", 0x9b}, {&(0x7f0000000e80)="7ca83bbb9c65ddc0eb6e967139f9816813c7aaa41650de7f30e2c0943a61359cbd5caff98c1f347aa3efc3e475770f7fd42325e54c518c5ddef1a6f9b3652e88d55c27a103e9392a70e4", 0x4a}], 0x4}}], 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.476397642s ago: executing program 5 (id=26224): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) unshare(0x20060400) chroot(&(0x7f0000000000)='./file0/../file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1.437722855s ago: executing program 5 (id=26225): syz_io_uring_complete(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={0x0, 0x6}, &(0x7f0000000440)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1200004, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$eJzs3T9sG2UbAPDnznHTP/m+9JO+T/pAHSpAKlJVJ+kfKEztiqhUqQMSC0SOG1Vx4ipOoIkike4VogMC1KVsMDCCGBgQCyMrC4gZqaIRSE0HMHJ8TtPULk6I4xL/ftLZ73t39vO+d35e+053cgB962j9IY14KiIuJhHDG5YNRLbwaGO91ZWl4v2VpWIStdqlX5JIIuLeylKxuX6SPR+KiOWI+H9EfJOPOJ6uv+W+ZqG6sDg1Xi6XZrP6yNz01ZHqwuKJK9Pjk6XJ0sypF186c/b0mbGTYxube7+2sZbfWl9v/Hjz3RvfvXL75qefHVkuvj+exLkYypZt7MdOamyTfJzbNP90N4L1UNLrBrAtuSzP66n0vxiOXJb1rdQ2Dg6Du9I8oItqgxE1oE8l8h/6VPN3QP34tznt5u+PO+cbByD1uKsrS8V3ohl/oHFuIvavHZsc/DV56Mikfrx5eDcbyp60fD0iRgcGHv38J9nnb/tGd6KBdNXX5xs76tH9n66PP9Fi/Blqnjv9m5rj32o2/q22iJ9rM/5d7DDG76//9FHb+NcH4+mW8ZP1+EmL+GlEvNlh/FuvfXm23bLaxxHHonX8puTx54dHLl8pl0Ybjy1jfHXsyMvt+x9xsE38xjnb/WtfMxv7vy9rU9ph/7/49vNnlh8T//lnH7//W23/AxHxXofx/3Pvk1fbLbtzPblb/xWw1f2fRD5udxj/hXNHf8iKzhoCAAAAAAAAAMAOSteuZUvSwno5TQuFxj28/42DablSnTt+uTI/M9G45u1w5NPmlVbDjXpSr49l1+M26yc31U/lsoC5A2v1QrFSnuhx3wEAAAAAAAAAAAAAAAAAAOBJcWjT/f+/5dbu/9/8d9XAXtX+L7+BvU7+Q/96OP+TnrUD2H2+/6Fv1eQ/9C/5D/1L/kP/kv/Qv+Q/9C/5D/1L/gMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChPtXurywV6/WJgYX5qcpbJyZK1anC9HyxUKzMXi1MViqT5VKhWJn+q/dLKpWrozEzf21krlSdG6kuLL4xXZmfaf6naCnf9R4BAAAAAAAAAAAAAAAAAADAP8/Q2pSkhYh8o56mhULEvyLicBLJ5Svl0mhE/Dsivs/lB+v1sV43GgAAAAAAAAAAAAAAAAAAAPaY6sLi1Hi5XJrtXmEgC9XFEJ0XBrayckQs72wz6u+45Vflsw3Y4023Nwq5J+Nz+OQXejgoAQAAAAAAAAAAAAAAAABAn3pw02+nr/ijuw0CAAAAAAAAAAAAAAAAAACAvpT+nEREfTo2/NzQ5qX7ktXc2nNEvH3r0gfXxufmZsfq8++uz5/7MJt/shftBzrVzNM0Iup5DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxQXVicGi+XS7PbLAx2sE6v+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwHX8GAAD//xLkz18=") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX, @ANYRES64=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x52) fcntl$setlease(r5, 0x400, 0x1) 1.086446353s ago: executing program 4 (id=26227): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_usbip_server_init(0x5) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) getpgid(0x0) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008804}, 0x40000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000280)={0x6, {{0x2, 0x4e24, @local}}, 0x0, 0x9, [{{0x2, 0x4e20, @empty}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}}, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}}, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @private=0xa010100}}]}, 0x510) 1.047785186s ago: executing program 7 (id=26229): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES64, @ANYBLOB="000000f3ffffffffffffff000000000000000000", @ANYRESDEC, @ANYRESHEX, @ANYRES8], 0x48) r1 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r1, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) lseek(r1, 0x0, 0x4) sendfile(r1, r1, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r2 = open(&(0x7f0000000000)='./file0\x00', 0x328640, 0x78e22799f4a46edc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0xff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) munlockall() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000040)={0x0, 0x0}}, 0x10) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={r6, 0xfffffff8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800e800000000000000000000110000", @ANYRES32=r7, @ANYRESHEX=r7], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xdf28}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_io_uring_setup(0x341c, &(0x7f0000000640)={0x0, 0x40ec25, 0x8, 0x1, 0x309}, &(0x7f0000000dc0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x181341, 0x0) r11 = gettid() ioctl$TIOCCONS(r10, 0x541d) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) 926.885206ms ago: executing program 7 (id=26230): r0 = socket(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 820.915774ms ago: executing program 9 (id=26233): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 696.769304ms ago: executing program 0 (id=26236): r0 = socket$packet(0x11, 0x3, 0x300) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r0, &(0x7f0000001840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001880)=0x14) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x40080, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001a80)={0xffffffffffffffff, 0x20, &(0x7f0000001a40)={&(0x7f0000001e40)=""/4096, 0x1000, 0x0, &(0x7f0000001980)=""/151, 0x97}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x9, 0x13, &(0x7f0000001700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x3}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @generic={0x7f, 0x9, 0x6, 0x8, 0x4}, @alu={0x4, 0x1, 0x4, 0x8, 0xb, 0xffffffffffffffe0}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f00000017c0)='GPL\x00', 0xfffffff7, 0x21, &(0x7f0000001800)=""/33, 0x40f00, 0x25, '\x00', r3, @fallback=0x2d, r4, 0x8, &(0x7f0000001900)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001940)={0x3, 0x5, 0x1c, 0x491d}, 0x10, r5, 0xffffffffffffffff, 0x6, &(0x7f0000001ac0)=[r1, r1, r2, r1, r0, r1, r1, r1, r1, r1], &(0x7f0000001b00)=[{0x5, 0x4, 0x0, 0x4}, {0x4, 0x5, 0x9, 0x8}, {0x1, 0x2, 0xc, 0xa}, {0x0, 0x5, 0x2, 0xa}, {0x3, 0x4, 0x0, 0xc}, {0x3, 0x1, 0x9, 0x5}], 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) r7 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000080)="441f0801", 0x4) 683.265626ms ago: executing program 0 (id=26237): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_LABELS_MASK={0x10, 0x17, [0x0, 0x0, 0x3]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x764000}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}]}]}, 0x5c}}, 0x20008008) socket$inet6(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x7, &(0x7f00000002c0)=ANY=[@ANYRES8=r3, @ANYBLOB="55061bc66d551c48f787df2889a19f301231e65ae0f6150c020036b0af845c7c67f6b824a4d5ef4bc595b7b5e493237b18a0c4d39d4471de7644d072e94b65", @ANYBLOB="0000000000000000b70200000200000085000000860000009519beb78321a78eb29eb24f62b678dcfba6d99e9eaddf967e79f23af16136ae3df44a5ba68bbaa12446dfd8f902abaca173c6fccfdb793f3d063e1853aecfbdb4964fd24aaf46f64ff868d8d37fbce2b0532f1a7dc2ccbaee6e803d0826bf2f4c7a1fbaccea60aeb1e755ad4f19f593866cd0afb9004eac39b4e2a841d1baa306d7e095018ab47f3414efabe33a509e2396b69ca7348c9ac11f5c011f3f80265fd0e416ee2d154c15b3202c83ccfd5e7940a2c95a2401e4cd965c574ca78104241dd7f3e361c88e4dcf055fe56374b72123aad47979"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) pipe(0x0) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x401) ptrace(0x10, r1) 660.603428ms ago: executing program 7 (id=26238): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="07aecfa608018aea52b2c12400000700fe000008", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x5204332a29c5e573, 0x100443, 0x5, 0x6, 0x2, 0x4, 0x3, 0x0, 0x3, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x60, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x100004, 0x0, 0x7, 0x3}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) sendfile(r1, r3, 0x0, 0x8000002b) 577.449544ms ago: executing program 0 (id=26239): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) unshare(0x20060400) chroot(&(0x7f0000000000)='./file0/../file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 567.463045ms ago: executing program 9 (id=26240): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_LABELS_MASK={0x4}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x764000}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}]}]}, 0x50}}, 0x20008008) socket$inet6(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x7, &(0x7f00000002c0)=ANY=[@ANYRES8=r3, @ANYBLOB="55061bc66d551c48f787df2889a19f301231e65ae0f6150c020036b0af845c7c67f6b824a4d5ef4bc595b7b5e493237b18a0c4d39d4471de7644d072e94b65", @ANYBLOB="0000000000000000b70200000200000085000000860000009519beb78321a78eb29eb24f62b678dcfba6d99e9eaddf967e79f23af16136ae3df44a5ba68bbaa12446dfd8f902abaca173c6fccfdb793f3d063e1853aecfbdb4964fd24aaf46f64ff868d8d37fbce2b0532f1a7dc2ccbaee6e803d0826bf2f4c7a1fbaccea60aeb1e755ad4f19f593866cd0afb9004eac39b4e2a841d1baa306d7e095018ab47f3414efabe33a509e2396b69ca7348c9ac11f5c011f3f80265fd0e416ee2d154c15b3202c83ccfd5e7940a2c95a2401e4cd965c574ca78104241dd7f3e361c88e4dcf055fe56374b72123aad47979"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) pipe(0x0) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x401) ptrace(0x10, r1) 522.131719ms ago: executing program 0 (id=26241): io_setup(0x7, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x400000}]) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000938500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0x1ffffffffffffffd}, 0x18) r9 = add_key$keyring(&(0x7f0000000500), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r10, 0x0, 0x1, 0x4) ioctl$sock_inet_udp_SIOCINQ(r10, 0x541b, 0x0) write(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r3, &(0x7f00000001c0)='m', 0x1, 0x1}]) 468.990773ms ago: executing program 5 (id=26242): io_setup(0x7, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x400000}]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000938500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0x1ffffffffffffffd}, 0x18) r9 = add_key$keyring(&(0x7f0000000500), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r10, 0x0, 0x1, 0x4) vmsplice(r10, &(0x7f0000000880)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da02e0", 0x3}, {&(0x7f00000002c0)='@', 0x1}, {&(0x7f0000000440)="15", 0x1}, {&(0x7f0000003040)="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", 0xfc1}, {&(0x7f0000000480)="37c2", 0x2}], 0x7, 0x0) ioctl$sock_inet_udp_SIOCINQ(r10, 0x541b, 0x0) write(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r4, &(0x7f00000001c0)='m', 0x1, 0x1}]) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 396.413768ms ago: executing program 9 (id=26243): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000540)='system_u:object_r:tape_device_t:s0\x00', 0x23) 360.903182ms ago: executing program 9 (id=26244): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000180)={0xb7, 0x9, 0xfffffffa, 0x7, 0x1, "67095f2539b105cf110000000000f6ff00", 0x5, 0x6}) semop(0xffffffffffffffff, &(0x7f0000000040)=[{0x1, 0x3ff}, {0xf9689289b72427cf, 0xfff, 0x1800}, {0x4, 0x12}], 0x61) write(r1, &(0x7f0000000140)="7be32c0a3fef93b5a7b0e99e1522b47963703551b482f7e43f2f78b5a24dfe951aa1a51097b76b19b8eaa0ec91cba490414d549340c5e93de8780d", 0x3b) 302.733796ms ago: executing program 9 (id=26245): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) unshare(0x20060400) chroot(&(0x7f0000000000)='./file0/../file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0, 0x0, 0x4}, 0x18) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 301.939336ms ago: executing program 9 (id=26246): syz_io_uring_setup(0x31c5, 0x0, &(0x7f00000001c0), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2c, r2, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtaction={0x90, 0x30, 0x1, 0x70bd2b, 0x25dfdbf8, {}, [{0x7c, 0x1, [@m_bpf={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x1, 0x7, 0x4, 0x6}, {0x30, 0x98, 0x81, 0xfffffff9}, {0xc, 0x90, 0xa, 0x5}, {0xe54, 0x6a, 0x1, 0xfffffff6}, {0xff01, 0x3, 0x81, 0x4}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 262.52954ms ago: executing program 0 (id=26247): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000080), 0x8) (fail_nth: 1) 1.008521ms ago: executing program 0 (id=26248): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x8, 0xbf, 0x58f, 0x5, {{0x7, 0x4, 0x3, 0x5, 0x1c, 0x66, 0x0, 0xf1, 0x2f, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x19}, {[@ssrr={0x89, 0x7, 0x7f, [@dev={0xac, 0x14, 0x14, 0x23}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)) socket$netlink(0x10, 0x3, 0x18) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) (async) sched_setaffinity(r5, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0xee01}}, './file0\x00'}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x20040010) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={'\x00', 0x7ac, 0x5, 0x9, 0x6, 0x338}) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private2, @in6=@loopback}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000b80)='ext4_da_update_reserve_space\x00', r6, 0x0, 0x9}, 0x18) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r11 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r11, 0x1, 0x0) 0s ago: executing program 5 (id=26249): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_LABELS_MASK={0x10, 0x17, [0x0, 0x0, 0x3]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x764000}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}]}]}, 0x5c}}, 0x20008008) socket$inet6(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x7, &(0x7f00000002c0)=ANY=[@ANYRES8=r3, @ANYBLOB="55061bc66d551c48f787df2889a19f301231e65ae0f6150c020036b0af845c7c67f6b824a4d5ef4bc595b7b5e493237b18a0c4d39d4471de7644d072e94b65", @ANYBLOB="0000000000000000b70200000200000085000000860000009519beb78321a78eb29eb24f62b678dcfba6d99e9eaddf967e79f23af16136ae3df44a5ba68bbaa12446dfd8f902abaca173c6fccfdb793f3d063e1853aecfbdb4964fd24aaf46f64ff868d8d37fbce2b0532f1a7dc2ccbaee6e803d0826bf2f4c7a1fbaccea60aeb1e755ad4f19f593866cd0afb9004eac39b4e2a841d1baa306d7e095018ab47f3414efabe33a509e2396b69ca7348c9ac11f5c011f3f80265fd0e416ee2d154c15b3202c83ccfd5e7940a2c95a2401e4cd965c574ca78104241dd7f3e361c88e4dcf055fe56374b72123aad47979"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) pipe(0x0) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x401) ptrace(0x10, r1) kernel console output (not intermixed with test programs): "syz.0.25179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef4b6ebe9 code=0x7ffc0000 [ 865.638508][ T29] audit: type=1326 audit(802.018:90852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23925 comm="syz.0.25179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef4b6ebe9 code=0x7ffc0000 [ 865.661674][ T29] audit: type=1326 audit(802.018:90853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23925 comm="syz.0.25179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f4ef4b6ebe9 code=0x7ffc0000 [ 865.684730][ T29] audit: type=1326 audit(802.018:90854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23925 comm="syz.0.25179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef4b6ebe9 code=0x7ffc0000 [ 865.850651][T23964] loop0: detected capacity change from 0 to 1024 [ 865.867581][T23965] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.893388][T23964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 865.910719][T23965] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.965248][T23965] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.019396][T23965] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.081522][T22935] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.105003][T22935] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.113405][T23979] sch_fq: defrate 0 ignored. [ 866.132446][T15813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 866.135157][T22935] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.159321][T22935] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.212135][T23983] xfrm0 speed is unknown, defaulting to 1000 [ 866.298453][T23987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23987 comm=syz.4.25201 [ 866.565748][T23992] xfrm0 speed is unknown, defaulting to 1000 [ 866.827713][T24003] netlink: '¬í': attribute type 1 has an invalid length. [ 866.883698][T24013] sch_fq: defrate 0 ignored. [ 867.000303][T24035] xfrm0 speed is unknown, defaulting to 1000 [ 867.042199][T24042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24042 comm=syz.0.25220 [ 867.190904][T24056] sch_fq: defrate 0 ignored. [ 867.253114][T24058] netlink: '¬í': attribute type 1 has an invalid length. [ 867.302401][T24063] xfrm0 speed is unknown, defaulting to 1000 [ 867.472241][T24080] __nla_validate_parse: 18 callbacks suppressed [ 867.472258][T24080] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25235'. [ 867.499580][T24088] sch_fq: defrate 0 ignored. [ 867.528168][T24092] netlink: 24 bytes leftover after parsing attributes in process `syz.5.25240'. [ 867.709423][T24103] netlink: '¬í': attribute type 1 has an invalid length. [ 867.778771][T24107] xfrm0 speed is unknown, defaulting to 1000 [ 867.972750][T24121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24121 comm=syz.7.25248 [ 868.134814][T24124] netlink: 40 bytes leftover after parsing attributes in process `syz.9.25249'. [ 868.197360][T24132] netlink: 24 bytes leftover after parsing attributes in process `syz.7.25252'. [ 868.441961][T24154] netlink: 16 bytes leftover after parsing attributes in process `syz.4.25259'. [ 868.501916][T24160] loop0: detected capacity change from 0 to 1024 [ 868.505316][T24162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24162 comm=syz.4.25261 [ 868.533804][T24160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 868.592441][T24167] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.611043][T15813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.628144][T24169] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25263'. [ 868.644017][T24167] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.691156][T24176] sch_fq: defrate 0 ignored. [ 868.727435][T24167] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.742398][T24182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25262'. [ 868.751550][T24182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25262'. [ 868.764953][T24181] netlink: '¬í': attribute type 1 has an invalid length. [ 868.803682][T24167] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.862030][T22935] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.872842][T22935] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.887554][T24189] loop0: detected capacity change from 0 to 1024 [ 868.891595][T13629] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.901197][T24189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 868.905922][T13629] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.946531][T24193] netlink: 16 bytes leftover after parsing attributes in process `syz.4.25271'. [ 868.994490][T15813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.015022][T24195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25272'. [ 869.053112][T24200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24200 comm=syz.4.25273 [ 869.596481][T24212] xfrm0 speed is unknown, defaulting to 1000 [ 869.643530][T24227] netlink: '¬í': attribute type 1 has an invalid length. [ 869.702274][T24230] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.730679][T24212] chnl_net:caif_netlink_parms(): no params data found [ 869.770480][T24230] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.803796][T24212] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.810934][T24212] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.818260][T24212] bridge_slave_0: entered allmulticast mode [ 869.832055][T24212] bridge_slave_0: entered promiscuous mode [ 869.840067][T24230] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.855310][T24212] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.862472][T24212] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.869858][T24212] bridge_slave_1: entered allmulticast mode [ 869.870367][T24212] bridge_slave_1: entered promiscuous mode [ 869.898830][T24212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.909995][T24212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.927452][T24230] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.961883][T24212] team0: Port device team_slave_0 added [ 869.974908][T24212] team0: Port device team_slave_1 added [ 870.016662][T24212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.023832][T24212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.049893][T24212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.091752][T24212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.098733][T24212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.124694][T24212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.226276][T24212] hsr_slave_0: entered promiscuous mode [ 870.235349][T24212] hsr_slave_1: entered promiscuous mode [ 870.248627][T24212] debugfs: 'hsr0' already exists in 'hsr' [ 870.254469][T24212] Cannot create hsr debugfs directory [ 870.260029][T22935] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.276554][T22935] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.312326][T22935] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.340182][T22935] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.511064][T24212] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.580755][T24212] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.646234][T24212] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.711787][T24212] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.749010][T24268] loop0: detected capacity change from 0 to 1024 [ 870.802056][T24268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 870.995822][T15813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.205297][T24282] netlink: '¬í': attribute type 1 has an invalid length. [ 871.263679][T24282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 871.288860][T24284] bond1: (slave veth29): Enslaving as an active interface with a down link [ 871.402454][T24288] sch_fq: defrate 0 ignored. [ 871.727346][ T29] kauditd_printk_skb: 630 callbacks suppressed [ 871.727415][ T29] audit: type=1326 audit(807.778:91485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24292 comm="syz.5.25302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 871.756889][ T29] audit: type=1326 audit(807.778:91486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24292 comm="syz.5.25302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 871.780051][ T29] audit: type=1326 audit(807.778:91487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24292 comm="syz.5.25302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 871.803126][ T29] audit: type=1326 audit(807.778:91488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24292 comm="syz.5.25302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 871.826168][ T29] audit: type=1326 audit(807.778:91489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24292 comm="syz.5.25302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 871.849259][ T29] audit: type=1326 audit(807.778:91490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24292 comm="syz.5.25302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 871.872386][ T29] audit: type=1326 audit(807.778:91491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24292 comm="syz.5.25302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 871.895698][ T29] audit: type=1326 audit(807.787:91492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24292 comm="syz.5.25302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 871.918841][ T29] audit: type=1326 audit(807.787:91493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24292 comm="syz.5.25302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 871.942115][ T29] audit: type=1326 audit(807.796:91494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24294 comm="syz.5.25302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa9f55f14a5 code=0x7ffc0000 [ 872.097868][T24307] netlink: '¬í': attribute type 1 has an invalid length. [ 872.165567][T24314] sch_fq: defrate 0 ignored. [ 872.199787][T24319] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 872.201377][T24321] netlink: '¬í': attribute type 1 has an invalid length. [ 872.209722][T24319] netdevsim netdevsim9 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 872.234903][T24321] 8021q: adding VLAN 0 to HW filter on device bond4 [ 872.253928][T24321] bond4: (slave veth27): Enslaving as an active interface with a down link [ 872.303079][T24319] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 872.313035][T24319] netdevsim netdevsim9 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 872.476316][T24319] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 872.486237][T24319] netdevsim netdevsim9 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 872.803439][T24342] loop0: detected capacity change from 0 to 1024 [ 872.845885][T24342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 872.991540][T24319] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 873.001577][T24319] netdevsim netdevsim9 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 873.162414][T13632] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 873.170820][T13632] netdevsim netdevsim9 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 873.282301][T13632] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 873.290898][T13632] netdevsim netdevsim9 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 873.347665][T24347] sch_fq: defrate 0 ignored. [ 873.354660][T13632] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 873.363013][T13632] netdevsim netdevsim9 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 873.419791][T13632] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 873.428256][T13632] netdevsim netdevsim9 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 873.445725][T24351] netlink: '¬í': attribute type 1 has an invalid length. [ 873.509978][T15813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.749843][T24361] netlink: '¬í': attribute type 1 has an invalid length. [ 873.764852][T24361] 8021q: adding VLAN 0 to HW filter on device bond5 [ 873.791793][T24361] bond5: (slave veth29): Enslaving as an active interface with a down link [ 873.862057][T24379] loop0: detected capacity change from 0 to 1024 [ 873.877283][T24379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 873.892769][T24385] netlink: '¬í': attribute type 1 has an invalid length. [ 873.948618][T15813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.069912][T24399] loop0: detected capacity change from 0 to 1024 [ 874.080827][T24399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 874.271269][T15813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.976310][T24212] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 874.989352][T24212] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 874.998391][T24212] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 875.065094][T13632] bond1 (unregistering): (slave geneve2): Releasing active interface [ 875.244569][T24420] netlink: 'syz.0.25342': attribute type 1 has an invalid length. [ 875.285063][T13632] bond0 (unregistering): Released all slaves [ 875.302622][T24422] __nla_validate_parse: 15 callbacks suppressed [ 875.302641][T24422] netlink: 8 bytes leftover after parsing attributes in process `syz.9.25343'. [ 875.317847][T24422] netlink: 4 bytes leftover after parsing attributes in process `syz.9.25343'. [ 875.337758][T13632] bond1 (unregistering): Released all slaves [ 875.356160][T13632] bond2 (unregistering): Released all slaves [ 875.378424][T13632] bond3 (unregistering): Released all slaves [ 875.396566][T24212] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 875.532991][T13632] hsr_slave_0: left promiscuous mode [ 875.538945][T13632] hsr_slave_1: left promiscuous mode [ 875.551937][T13632] veth1_macvtap: left promiscuous mode [ 875.558403][T13632] veth0_macvtap: left promiscuous mode [ 875.564909][T13632] veth1_vlan: left allmulticast mode [ 875.570394][T13632] veth1_vlan: left promiscuous mode [ 875.575915][T13632] veth0_vlan: left promiscuous mode [ 875.679237][T24447] netlink: 8 bytes leftover after parsing attributes in process `syz.9.25344'. [ 875.688367][T24447] netlink: 8 bytes leftover after parsing attributes in process `syz.9.25344'. [ 875.710314][T24413] xfrm0 speed is unknown, defaulting to 1000 [ 875.720698][T24437] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 875.730710][T24437] netdevsim netdevsim9 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 875.763782][T24419] xfrm0 speed is unknown, defaulting to 1000 [ 875.791819][T24437] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 875.801832][T24437] netdevsim netdevsim9 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 875.836603][T24212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.857613][T24212] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.866107][T24437] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 875.876116][T24437] netdevsim netdevsim9 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 875.913673][T22935] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.920748][T22935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.944655][T22935] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.951862][T22935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.970236][T24437] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 875.980247][T24437] netdevsim netdevsim9 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 876.047654][T24460] netlink: 8 bytes leftover after parsing attributes in process `syz.7.25353'. [ 876.056904][T24460] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25353'. [ 876.117404][T24212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.171019][T13632] bridge_slave_1: left allmulticast mode [ 876.176707][T13632] bridge_slave_1: left promiscuous mode [ 876.182573][T13632] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.197391][T13632] bridge_slave_0: left allmulticast mode [ 876.203137][T13632] bridge_slave_0: left promiscuous mode [ 876.208793][T13632] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.520327][T13632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 876.612739][T13632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 876.639089][T24480] loop0: detected capacity change from 0 to 1024 [ 876.661193][T13632] bond0 (unregistering): Released all slaves [ 876.704231][T24480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 876.732153][T13632] bond1 (unregistering): (slave veth15): Releasing active interface [ 876.807193][T13632] bond1 (unregistering): Released all slaves [ 876.886195][T13632] bond2 (unregistering): (slave veth17): Releasing active interface [ 877.065905][T15813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 877.084001][T13632] bond2 (unregistering): Released all slaves [ 877.199778][T13632] tipc: Left network mode [ 877.226325][T13632] hsr_slave_0: left promiscuous mode [ 877.239336][T24493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25358'. [ 877.259519][T13632] hsr_slave_1: left promiscuous mode [ 877.280317][T13632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.287817][T13632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.323691][T13632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.331166][T13632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.360368][T13632] veth1_macvtap: left promiscuous mode [ 877.369493][T13632] veth0_macvtap: left promiscuous mode [ 877.386888][T13632] veth1_vlan: left promiscuous mode [ 877.400610][T13632] veth0_vlan: left promiscuous mode [ 877.580668][T13632] team0 (unregistering): Port device team_slave_1 removed [ 877.592507][T13632] team0 (unregistering): Port device team_slave_0 removed [ 877.620549][T13632] team0 (unregistering): Port device dummy0 removed [ 877.708596][T24212] veth0_vlan: entered promiscuous mode [ 877.717490][T24212] veth1_vlan: entered promiscuous mode [ 877.738868][T24212] veth0_macvtap: entered promiscuous mode [ 877.747718][T24212] veth1_macvtap: entered promiscuous mode [ 877.758936][T24212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.776448][T24212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.787348][T22935] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.796755][T22935] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.811836][T22935] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.823479][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 877.823494][ T29] audit: type=1326 audit(813.473:91679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24507 comm="syz.5.25364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 877.824764][T22935] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.829733][ T29] audit: type=1326 audit(813.473:91680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24507 comm="syz.5.25364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 877.886176][ T29] audit: type=1326 audit(813.500:91681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24507 comm="syz.5.25364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 877.909735][ T29] audit: type=1326 audit(813.500:91682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24507 comm="syz.5.25364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 877.933031][ T29] audit: type=1326 audit(813.500:91683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24507 comm="syz.5.25364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 877.956335][ T29] audit: type=1326 audit(813.500:91684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24507 comm="syz.5.25364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 877.979379][ T29] audit: type=1326 audit(813.500:91685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24507 comm="syz.5.25364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 878.002466][ T29] audit: type=1326 audit(813.500:91686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24507 comm="syz.5.25364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 878.025701][ T29] audit: type=1326 audit(813.500:91687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24507 comm="syz.5.25364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 878.048740][ T29] audit: type=1326 audit(813.500:91688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24507 comm="syz.5.25364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 878.123234][T24524] random: crng reseeded on system resumption [ 878.224654][T24532] netlink: 8 bytes leftover after parsing attributes in process `syz.7.25369'. [ 878.233790][T24532] netlink: 8 bytes leftover after parsing attributes in process `syz.7.25369'. [ 878.268444][T24536] netlink: 8 bytes leftover after parsing attributes in process `syz.7.25371'. [ 879.721117][T24582] random: crng reseeded on system resumption [ 879.765706][T24586] netlink: '¬í': attribute type 1 has an invalid length. [ 879.793318][T24588] xfrm0 speed is unknown, defaulting to 1000 [ 880.074824][T13631] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 880.083256][T13631] netdevsim netdevsim9 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 880.151288][T13631] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 880.159964][T13631] netdevsim netdevsim9 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 880.198641][T13632] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 880.207089][T13632] netdevsim netdevsim9 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 880.250187][T13632] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 880.258646][T13632] netdevsim netdevsim9 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 880.298652][T24611] loop0: detected capacity change from 0 to 512 [ 880.316229][T24611] EXT4-fs: Ignoring removed mblk_io_submit option [ 880.339348][T24611] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 880.381661][T24611] EXT4-fs (loop0): 1 truncate cleaned up [ 880.388220][T24611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 880.415657][T15813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.613763][T24643] netlink: '¬í': attribute type 1 has an invalid length. [ 880.936917][T24654] loop0: detected capacity change from 0 to 512 [ 880.994502][T24654] EXT4-fs: Ignoring removed mblk_io_submit option [ 881.052349][T24654] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 881.179267][T24654] EXT4-fs (loop0): 1 truncate cleaned up [ 881.243635][T24654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 881.381301][T15813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 881.430995][T24669] __nla_validate_parse: 3 callbacks suppressed [ 881.431009][T24669] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25418'. [ 881.453435][T24672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25416'. [ 882.245383][T13632] bridge_slave_1: left allmulticast mode [ 882.251179][T13632] bridge_slave_1: left promiscuous mode [ 882.256879][T13632] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.292588][T13632] bridge_slave_0: left allmulticast mode [ 882.298338][T13632] bridge_slave_0: left promiscuous mode [ 882.304099][T13632] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.406681][T24720] loop0: detected capacity change from 0 to 1024 [ 882.449370][T24720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 882.591456][T15813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.696778][T24741] netlink: '¬í': attribute type 1 has an invalid length. [ 882.781049][T24749] netlink: '¬í': attribute type 1 has an invalid length. [ 882.845623][T13632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 882.855632][T13632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 882.865535][T13632] bond0 (unregistering): Released all slaves [ 882.873586][T13632] bond1 (unregistering): Released all slaves [ 882.882275][T13632] bond2 (unregistering): Released all slaves [ 882.890889][T13632] bond3 (unregistering): Released all slaves [ 882.899533][T13632] bond4 (unregistering): Released all slaves [ 882.907978][T13632] bond5 (unregistering): Released all slaves [ 882.916801][T13632] bond6 (unregistering): Released all slaves [ 882.925171][T13632] bond7 (unregistering): Released all slaves [ 882.934919][T13632] bond8 (unregistering): Released all slaves [ 882.943458][T13632] bond9 (unregistering): Released all slaves [ 883.024018][T24754] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25444'. [ 883.046452][T13632] tipc: Left network mode [ 883.059285][T13632] hsr_slave_0: left promiscuous mode [ 883.066026][T13632] hsr_slave_1: left promiscuous mode [ 883.072084][T13632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 883.079504][T13632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 883.087153][T13632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 883.094704][T13632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.109586][T13632] veth1_macvtap: left promiscuous mode [ 883.112096][T24760] netlink: 24 bytes leftover after parsing attributes in process `syz.7.25446'. [ 883.115550][T13632] veth0_macvtap: left promiscuous mode [ 883.130230][T13632] veth0_vlan: left promiscuous mode [ 883.172033][T24762] random: crng reseeded on system resumption [ 883.276551][T24776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25453'. [ 883.285545][T24776] netlink: 4 bytes leftover after parsing attributes in process `syz.5.25453'. [ 883.314936][ T29] kauditd_printk_skb: 538 callbacks suppressed [ 883.314952][ T29] audit: type=1326 audit(818.531:92227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24780 comm="syz.9.25455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 883.378410][T24745] xfrm0 speed is unknown, defaulting to 1000 [ 883.381109][T24786] netlink: '¬í': attribute type 1 has an invalid length. [ 883.405682][ T29] audit: type=1326 audit(818.568:92228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24780 comm="syz.9.25455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 883.428879][ T29] audit: type=1326 audit(818.568:92229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24780 comm="syz.9.25455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 883.452227][ T29] audit: type=1326 audit(818.568:92230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24780 comm="syz.9.25455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 883.475393][ T29] audit: type=1326 audit(818.568:92231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24780 comm="syz.9.25455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 883.492435][T24745] chnl_net:caif_netlink_parms(): no params data found [ 883.498501][ T29] audit: type=1326 audit(818.568:92232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24780 comm="syz.9.25455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 883.528618][ T29] audit: type=1326 audit(818.568:92233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24780 comm="syz.9.25455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 883.552499][ T29] audit: type=1326 audit(818.568:92234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24780 comm="syz.9.25455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 883.575709][ T29] audit: type=1326 audit(818.568:92235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24780 comm="syz.9.25455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 883.599082][ T29] audit: type=1326 audit(818.568:92236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24780 comm="syz.9.25455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 883.629880][T24797] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.687290][T24810] netlink: 8 bytes leftover after parsing attributes in process `syz.7.25459'. [ 883.696468][T24810] netlink: 8 bytes leftover after parsing attributes in process `syz.7.25459'. [ 883.718988][T24745] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.726621][T24745] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.749120][T24814] random: crng reseeded on system resumption [ 883.755533][T24745] bridge_slave_0: entered allmulticast mode [ 883.765308][T24745] bridge_slave_0: entered promiscuous mode [ 883.777768][T24797] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.793424][T24745] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.800566][T24745] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.824844][T24745] bridge_slave_1: entered allmulticast mode [ 883.841194][T24745] bridge_slave_1: entered promiscuous mode [ 883.854312][T24824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.25469'. [ 883.858569][T24822] netlink: '¬í': attribute type 1 has an invalid length. [ 883.885242][T24797] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.900870][T24822] 8021q: adding VLAN 0 to HW filter on device bond4 [ 883.910869][T24745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.929601][T24822] bond4: (slave veth27): Enslaving as an active interface with a down link [ 883.940437][T24797] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.953037][T24745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.980017][T24745] team0: Port device team_slave_0 added [ 883.987255][T24745] team0: Port device team_slave_1 added [ 883.987453][T24828] netlink: '¬í': attribute type 1 has an invalid length. [ 884.016294][T24745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.023339][T24745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.049302][T24745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.061022][T24745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.068148][T24745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.094572][T24745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.106639][T13632] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.126479][T13624] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.160903][T24745] hsr_slave_0: entered promiscuous mode [ 884.167173][T24745] hsr_slave_1: entered promiscuous mode [ 884.173182][T24745] debugfs: 'hsr0' already exists in 'hsr' [ 884.178966][T24745] Cannot create hsr debugfs directory [ 884.191365][T13632] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.202086][T13627] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.220111][T13627] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.236526][T13627] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.265036][T13632] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.332413][T13632] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.347568][T24842] netlink: '¬í': attribute type 1 has an invalid length. [ 884.373195][T24842] 8021q: adding VLAN 0 to HW filter on device bond6 [ 884.394932][T24842] bond6: (slave veth33): Enslaving as an active interface with a down link [ 884.433243][T13632] bridge_slave_1: left allmulticast mode [ 884.439320][T13632] bridge_slave_1: left promiscuous mode [ 884.445254][T13632] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.453319][T13632] bridge_slave_0: left allmulticast mode [ 884.459470][T13632] bridge_slave_0: left promiscuous mode [ 884.465131][T13632] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.540505][T24861] netlink: 24 bytes leftover after parsing attributes in process `syz.7.25481'. [ 884.589897][T13632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 884.601004][T13632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 884.610974][T13632] bond0 (unregistering): Released all slaves [ 884.620083][T13632] bond1 (unregistering): (slave veth29): Releasing active interface [ 884.629232][T13632] bond1 (unregistering): Released all slaves [ 884.648701][T24868] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.670030][T13632] tipc: Left network mode [ 884.727236][T13632] hsr_slave_0: left promiscuous mode [ 884.743153][T13632] hsr_slave_1: left promiscuous mode [ 884.754938][T13632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 884.762631][T13632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 884.785144][T13632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 884.793095][T13632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 884.805820][T13632] veth1_macvtap: left promiscuous mode [ 884.840737][T13632] veth0_macvtap: left promiscuous mode [ 884.846439][T13632] veth1_vlan: left promiscuous mode [ 884.852014][T13632] veth0_vlan: left promiscuous mode [ 885.136641][T13632] team0 (unregistering): Port device team_slave_1 removed [ 885.201924][T13632] team0 (unregistering): Port device team_slave_0 removed [ 885.211603][T24888] netlink: '¬í': attribute type 1 has an invalid length. [ 885.270836][T13632] team0 (unregistering): Port device dummy0 removed [ 885.295658][T24868] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.321541][T24888] 8021q: adding VLAN 0 to HW filter on device bond3 [ 885.392835][T24892] bond3: (slave veth21): Enslaving as an active interface with a down link [ 885.408800][T24868] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.606338][T24868] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.642704][T24745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 885.662798][T24745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 885.689276][T24745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 885.722314][T13627] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.734543][T24745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 885.758001][T13627] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.792320][T13627] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.849361][T13627] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.936590][T24745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.995139][T24745] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.059384][T13632] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.066562][T13632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.131088][T13632] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.138298][T13632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.388342][T24745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 886.651812][T24745] veth0_vlan: entered promiscuous mode [ 887.239699][T24981] netlink: '¬í': attribute type 1 has an invalid length. [ 887.483430][T24981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 887.510467][T24986] bond1: (slave veth7): Enslaving as an active interface with a down link [ 887.538846][T24745] veth1_vlan: entered promiscuous mode [ 887.574785][T24745] veth0_macvtap: entered promiscuous mode [ 887.640560][T24745] veth1_macvtap: entered promiscuous mode [ 887.649630][T24996] netlink: '¬í': attribute type 1 has an invalid length. [ 887.673634][T24996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 887.700693][T24998] __nla_validate_parse: 4 callbacks suppressed [ 887.700708][T24998] netlink: 20 bytes leftover after parsing attributes in process `syz.7.25515'. [ 887.736248][T24996] bond2: (slave veth9): Enslaving as an active interface with a down link [ 887.748955][T24745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 887.833446][T24745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 887.868993][T13627] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.922015][T13627] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.957213][T13627] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.001168][T25010] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.036464][T13627] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.082130][T25017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25521'. [ 888.103901][T25010] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.130127][T25018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25520'. [ 888.139365][T25018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25520'. [ 888.219838][T25010] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.242355][T25021] netlink: '¬í': attribute type 1 has an invalid length. [ 888.287306][T25010] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.663603][T25056] netlink: '¬í': attribute type 1 has an invalid length. [ 888.773726][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 888.773738][ T29] audit: type=1326 audit(823.570:92473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25062 comm="syz.9.25539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 888.822493][ T29] audit: type=1326 audit(823.607:92474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25062 comm="syz.9.25539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 888.845822][ T29] audit: type=1326 audit(823.607:92475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25062 comm="syz.9.25539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 888.868943][ T29] audit: type=1326 audit(823.616:92476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25062 comm="syz.9.25539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 888.892026][ T29] audit: type=1326 audit(823.616:92477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25062 comm="syz.9.25539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 888.915384][ T29] audit: type=1326 audit(823.616:92478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25062 comm="syz.9.25539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 888.938598][ T29] audit: type=1326 audit(823.616:92479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25062 comm="syz.9.25539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 888.961727][ T29] audit: type=1326 audit(823.616:92480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25062 comm="syz.9.25539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 888.984817][ T29] audit: type=1326 audit(823.616:92481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25062 comm="syz.9.25539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 889.008121][ T29] audit: type=1326 audit(823.616:92482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25062 comm="syz.9.25539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 889.178371][T25086] netlink: 20 bytes leftover after parsing attributes in process `syz.9.25544'. [ 889.225151][T25083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25547'. [ 889.358720][T25095] loop0: detected capacity change from 0 to 1024 [ 889.390726][T25095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 889.496126][T24745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.552801][T25107] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25551'. [ 889.588566][T25114] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25557'. [ 889.839808][T13625] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.880755][T13625] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.899514][T13625] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.964906][T13625] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.041521][T25149] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25568'. [ 890.118691][T25156] netlink: 56 bytes leftover after parsing attributes in process `syz.9.25571'. [ 892.673785][T25172] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.726327][T25172] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.781059][T25187] netlink: '¬í': attribute type 1 has an invalid length. [ 892.833405][T25172] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.909506][T25172] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.139925][T25210] __nla_validate_parse: 6 callbacks suppressed [ 893.139940][T25210] netlink: 24 bytes leftover after parsing attributes in process `syz.9.25590'. [ 893.222422][T25215] netlink: 8 bytes leftover after parsing attributes in process `syz.9.25591'. [ 893.224053][T25216] netlink: 24 bytes leftover after parsing attributes in process `syz.5.25592'. [ 893.231421][T25215] netlink: 4 bytes leftover after parsing attributes in process `syz.9.25591'. [ 893.345819][T25226] netlink: '¬í': attribute type 1 has an invalid length. [ 893.365497][T25226] 8021q: adding VLAN 0 to HW filter on device bond7 [ 893.372365][T25232] loop0: detected capacity change from 0 to 1024 [ 893.391294][T25226] bond7: (slave veth39): Enslaving as an active interface with a down link [ 893.406598][T25232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 893.476675][T24745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 893.609313][T25250] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25604'. [ 893.750181][T25261] netlink: 24 bytes leftover after parsing attributes in process `syz.7.25608'. [ 894.197315][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 894.197327][ T29] audit: type=1326 audit(828.582:92805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25269 comm="syz.5.25612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 894.302775][ T29] audit: type=1326 audit(828.674:92806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.0.25613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93acd1ebe9 code=0x7ffc0000 [ 894.326026][ T29] audit: type=1326 audit(828.674:92807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.0.25613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93acd1ebe9 code=0x7ffc0000 [ 894.349081][ T29] audit: type=1326 audit(828.674:92808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.0.25613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f93acd1ebe9 code=0x7ffc0000 [ 894.372162][ T29] audit: type=1326 audit(828.674:92809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.0.25613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93acd1ebe9 code=0x7ffc0000 [ 894.395631][ T29] audit: type=1326 audit(828.674:92810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.0.25613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93acd1ebe9 code=0x7ffc0000 [ 894.419108][ T29] audit: type=1326 audit(828.674:92811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.0.25613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f93acd1ebe9 code=0x7ffc0000 [ 894.442119][ T29] audit: type=1326 audit(828.674:92812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.0.25613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93acd1ebe9 code=0x7ffc0000 [ 894.465362][ T29] audit: type=1326 audit(828.674:92813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.0.25613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93acd1ebe9 code=0x7ffc0000 [ 894.488437][ T29] audit: type=1326 audit(828.674:92814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25273 comm="syz.0.25613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f93acd1ebe9 code=0x7ffc0000 [ 894.526209][T25291] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25618'. [ 894.585162][T25298] netlink: '¬í': attribute type 1 has an invalid length. [ 894.613365][T25298] 8021q: adding VLAN 0 to HW filter on device bond4 [ 894.648862][T25298] bond4: (slave veth27): Enslaving as an active interface with a down link [ 894.667611][T25307] netlink: '¬í': attribute type 1 has an invalid length. [ 894.689366][T25307] 8021q: adding VLAN 0 to HW filter on device bond8 [ 894.720459][T25307] bond8: (slave veth41): Enslaving as an active interface with a down link [ 894.755849][T25317] netlink: 24 bytes leftover after parsing attributes in process `syz.7.25629'. [ 894.758985][T25322] netlink: '¬í': attribute type 1 has an invalid length. [ 894.790216][T25322] 8021q: adding VLAN 0 to HW filter on device bond5 [ 894.832052][T25322] bond5: (slave veth31): Enslaving as an active interface with a down link [ 894.904520][T25343] netlink: '¬í': attribute type 1 has an invalid length. [ 894.918239][T25343] 8021q: adding VLAN 0 to HW filter on device bond6 [ 894.957958][T25343] bond6: (slave veth33): Enslaving as an active interface with a down link [ 894.970443][T25346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25346 comm=syz.5.25640 [ 894.997900][T25350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25642'. [ 895.101970][T25360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25646'. [ 895.284926][T25368] loop0: detected capacity change from 0 to 1024 [ 895.327764][T25368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 895.374753][T24745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.487998][T25389] loop0: detected capacity change from 0 to 1024 [ 895.498861][T25389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 895.572696][T24745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.873055][T25404] netlink: '¬í': attribute type 1 has an invalid length. [ 895.949128][T25408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25408 comm=syz.7.25663 [ 896.222729][T25432] loop0: detected capacity change from 0 to 1024 [ 896.262417][T25432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 896.386098][T24745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.775271][T13624] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.826944][T13624] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.892352][T13624] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.959326][T13624] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.879376][T25479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25479 comm=syz.4.25687 [ 897.919901][T25482] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.963066][T25485] random: crng reseeded on system resumption [ 898.014536][T25482] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.088204][T25482] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.164856][T25482] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.195567][T25504] netlink: '¬í': attribute type 1 has an invalid length. [ 898.214561][T25504] 8021q: adding VLAN 0 to HW filter on device bond9 [ 898.262706][T13624] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.426662][T25504] bond9: (slave veth43): Enslaving as an active interface with a down link [ 898.436030][T13624] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.760821][T25521] __nla_validate_parse: 5 callbacks suppressed [ 898.760911][T25521] netlink: 8 bytes leftover after parsing attributes in process `syz.7.25705'. [ 898.776166][T25521] netlink: 8 bytes leftover after parsing attributes in process `syz.7.25705'. [ 898.950199][T25526] netlink: '¬í': attribute type 1 has an invalid length. [ 899.000314][T25530] netlink: '¬í': attribute type 1 has an invalid length. [ 899.029235][T25526] 8021q: adding VLAN 0 to HW filter on device bond10 [ 899.053877][T25531] bond10: (slave veth45): Enslaving as an active interface with a down link [ 899.094386][T25530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 899.210641][T25533] bond1: (slave veth7): Enslaving as an active interface with a down link [ 899.431911][T13624] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.440305][T13624] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.974616][ T29] kauditd_printk_skb: 398 callbacks suppressed [ 899.974712][ T29] audit: type=1326 audit(833.917:93213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25552 comm="syz.7.25714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac2aaebe9 code=0x7ffc0000 [ 900.004197][ T29] audit: type=1326 audit(833.917:93214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25552 comm="syz.7.25714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac2aaebe9 code=0x7ffc0000 [ 900.070365][T25559] netlink: 8 bytes leftover after parsing attributes in process `syz.9.25715'. [ 900.079369][T25559] netlink: 28 bytes leftover after parsing attributes in process `syz.9.25715'. [ 900.099280][ T29] audit: type=1326 audit(833.917:93215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25549 comm="syz.4.25713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e49ebebe9 code=0x7ffc0000 [ 900.122490][ T29] audit: type=1326 audit(833.917:93216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25549 comm="syz.4.25713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e49ebebe9 code=0x7ffc0000 [ 900.145717][ T29] audit: type=1326 audit(833.963:93217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25552 comm="syz.7.25714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f4ac2aaebe9 code=0x7ffc0000 [ 900.168993][ T29] audit: type=1326 audit(833.963:93218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25552 comm="syz.7.25714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac2aaebe9 code=0x7ffc0000 [ 900.192381][ T29] audit: type=1326 audit(833.963:93219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25552 comm="syz.7.25714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac2aaebe9 code=0x7ffc0000 [ 900.215730][ T29] audit: type=1326 audit(833.991:93220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25549 comm="syz.4.25713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e49ebebe9 code=0x7ffc0000 [ 900.261525][ T29] audit: type=1326 audit(834.175:93221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.9.25718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 900.285250][ T29] audit: type=1326 audit(834.175:93222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.9.25718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 900.305363][T25568] loop0: detected capacity change from 0 to 512 [ 900.315556][T25568] EXT4-fs: Ignoring removed mblk_io_submit option [ 900.323542][T25568] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 900.454774][T25568] EXT4-fs (loop0): 1 truncate cleaned up [ 900.461300][T25568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 900.505550][T24745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 901.616024][T25618] netlink: '¬í': attribute type 1 has an invalid length. [ 901.676051][T25618] 8021q: adding VLAN 0 to HW filter on device bond2 [ 901.718423][T25623] bond2: (slave veth9): Enslaving as an active interface with a down link [ 902.282827][T25664] netlink: 8 bytes leftover after parsing attributes in process `syz.7.25745'. [ 902.291881][T25664] netlink: 8 bytes leftover after parsing attributes in process `syz.7.25745'. [ 902.413043][T25673] netlink: '¬í': attribute type 1 has an invalid length. [ 903.047390][T25716] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.209597][T25725] netlink: '¬í': attribute type 1 has an invalid length. [ 903.220605][T25723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25766'. [ 903.229676][T25723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25766'. [ 903.306448][T25729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25764'. [ 903.315643][T25729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25764'. [ 903.600988][T25725] 8021q: adding VLAN 0 to HW filter on device bond3 [ 903.636029][T25716] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.712401][T25716] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.973702][T25716] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.618337][T25747] netlink: '¬í': attribute type 1 has an invalid length. [ 904.802247][T25764] loop0: detected capacity change from 0 to 1024 [ 904.830131][T25764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 904.936661][T24745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.607319][T22935] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.648667][T22935] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.852761][T22935] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.872041][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 905.872055][ T29] audit: type=1326 audit(839.353:93565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25779 comm="syz.5.25783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 905.901521][ T29] audit: type=1326 audit(839.353:93566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25779 comm="syz.5.25783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 905.924651][ T29] audit: type=1326 audit(839.353:93567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25779 comm="syz.5.25783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 905.947717][ T29] audit: type=1326 audit(839.353:93568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25779 comm="syz.5.25783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 905.970895][ T29] audit: type=1326 audit(839.353:93569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25779 comm="syz.5.25783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 906.001499][T22935] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.050998][ T29] audit: type=1326 audit(839.473:93570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25779 comm="syz.5.25783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 906.074211][ T29] audit: type=1326 audit(839.473:93571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25779 comm="syz.5.25783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 906.097316][ T29] audit: type=1326 audit(839.473:93572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25779 comm="syz.5.25783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 906.120625][ T29] audit: type=1326 audit(839.492:93573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25779 comm="syz.5.25783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 906.143772][ T29] audit: type=1326 audit(839.492:93574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25779 comm="syz.5.25783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f55bebe9 code=0x7ffc0000 [ 906.221761][T25800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25800 comm=syz.7.25785 [ 906.253209][T25802] __nla_validate_parse: 2 callbacks suppressed [ 906.253227][T25802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25780'. [ 906.268587][T25802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25780'. [ 907.031097][T25840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25840 comm=syz.5.25795 [ 907.343323][T25849] netlink: 8 bytes leftover after parsing attributes in process `syz.7.25796'. [ 907.352584][T25849] netlink: 8 bytes leftover after parsing attributes in process `syz.7.25796'. [ 907.650395][T25855] netlink: 16 bytes leftover after parsing attributes in process `syz.4.25799'. [ 907.659531][T25855] netlink: 16 bytes leftover after parsing attributes in process `syz.4.25799'. [ 907.668597][T25855] netlink: 16 bytes leftover after parsing attributes in process `syz.4.25799'. [ 908.212226][T25875] netlink: '¬í': attribute type 1 has an invalid length. [ 908.227752][T25875] 8021q: adding VLAN 0 to HW filter on device bond4 [ 908.295641][T25882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25882 comm=syz.0.25810 [ 908.612929][T25909] netlink: 40 bytes leftover after parsing attributes in process `syz.5.25819'. [ 908.637610][T25912] netlink: '¬í': attribute type 1 has an invalid length. [ 908.650981][T25912] 8021q: adding VLAN 0 to HW filter on device bond11 [ 908.673564][T25918] proc: Unknown parameter 'Ç' [ 908.675568][T25916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25916 comm=syz.0.25821 [ 908.781994][T25934] netlink: '¬í': attribute type 1 has an invalid length. [ 908.795794][T25939] FAULT_INJECTION: forcing a failure. [ 908.795794][T25939] name failslab, interval 1, probability 0, space 0, times 0 [ 908.809011][T25939] CPU: 1 UID: 0 PID: 25939 Comm: syz.7.25832 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 908.809123][T25939] Tainted: [W]=WARN [ 908.809130][T25939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 908.809187][T25939] Call Trace: [ 908.809195][T25939] [ 908.809203][T25939] __dump_stack+0x1d/0x30 [ 908.809227][T25939] dump_stack_lvl+0xe8/0x140 [ 908.809243][T25939] dump_stack+0x15/0x1b [ 908.809256][T25939] should_fail_ex+0x265/0x280 [ 908.809318][T25939] should_failslab+0x8c/0xb0 [ 908.809365][T25939] kmem_cache_alloc_noprof+0x50/0x310 [ 908.809390][T25939] ? audit_log_start+0x365/0x6c0 [ 908.809454][T25939] audit_log_start+0x365/0x6c0 [ 908.809477][T25939] audit_seccomp+0x48/0x100 [ 908.809497][T25939] ? __seccomp_filter+0x68c/0x10d0 [ 908.809553][T25939] __seccomp_filter+0x69d/0x10d0 [ 908.809572][T25939] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 908.809667][T25939] ? vfs_write+0x7e8/0x960 [ 908.809698][T25939] __secure_computing+0x82/0x150 [ 908.809715][T25939] syscall_trace_enter+0xcf/0x1e0 [ 908.809804][T25939] do_syscall_64+0xac/0x200 [ 908.809895][T25939] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 908.809977][T25939] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 908.810000][T25939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.810017][T25939] RIP: 0033:0x7f4ac2aaebe9 [ 908.810032][T25939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 908.810091][T25939] RSP: 002b:00007f4ac1517038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c2 [ 908.810108][T25939] RAX: ffffffffffffffda RBX: 00007f4ac2cd5fa0 RCX: 00007f4ac2aaebe9 [ 908.810120][T25939] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000146000 [ 908.810130][T25939] RBP: 00007f4ac1517090 R08: 0000000000000000 R09: 0000000000000000 [ 908.810140][T25939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.810151][T25939] R13: 00007f4ac2cd6038 R14: 00007f4ac2cd5fa0 R15: 00007ffe7bfb62c8 [ 908.810166][T25939] [ 909.056273][T25945] netlink: '¬í': attribute type 1 has an invalid length. [ 909.071753][T25949] xfrm0 speed is unknown, defaulting to 1000 [ 909.321285][T25978] netlink: '¬í': attribute type 1 has an invalid length. [ 909.988280][T26006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25857'. [ 909.997336][T26006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25857'. [ 910.056589][T26008] loop0: detected capacity change from 0 to 512 [ 910.126657][T26008] ext4: Bad value for 'init_itable' [ 910.376551][T26013] loop0: detected capacity change from 0 to 1024 [ 910.444032][T26013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 910.748167][T24745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.194843][T26085] loop0: detected capacity change from 0 to 512 [ 911.227453][T26085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 911.258009][T26085] xfrm0 speed is unknown, defaulting to 1000 [ 911.292686][T26089] hub 9-0:1.0: USB hub found [ 911.297530][T26089] hub 9-0:1.0: 8 ports detected [ 911.465094][T26090] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.493483][T26097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26097 comm=syz.7.25888 [ 911.551298][T26099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26099 comm=syz.7.25889 [ 911.710534][T26107] __nla_validate_parse: 5 callbacks suppressed [ 911.710550][T26107] netlink: 40 bytes leftover after parsing attributes in process `syz.0.25891'. [ 911.755520][T26110] netlink: 40 bytes leftover after parsing attributes in process `syz.7.25893'. [ 911.775155][ T29] kauditd_printk_skb: 500 callbacks suppressed [ 911.775175][ T29] audit: type=1326 audit(844.808:94073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26109 comm="syz.4.25894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e49ebebe9 code=0x7ffc0000 [ 911.808608][T26114] FAULT_INJECTION: forcing a failure. [ 911.808608][T26114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 911.821859][T26114] CPU: 0 UID: 0 PID: 26114 Comm: syz.5.25896 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 911.821890][T26114] Tainted: [W]=WARN [ 911.821898][T26114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 911.821947][T26114] Call Trace: [ 911.821954][T26114] [ 911.821961][T26114] __dump_stack+0x1d/0x30 [ 911.821980][T26114] dump_stack_lvl+0xe8/0x140 [ 911.822058][T26114] dump_stack+0x15/0x1b [ 911.822074][T26114] should_fail_ex+0x265/0x280 [ 911.822094][T26114] should_fail+0xb/0x20 [ 911.822108][T26114] should_fail_usercopy+0x1a/0x20 [ 911.822198][T26114] _copy_from_user+0x1c/0xb0 [ 911.822226][T26114] do_sock_getsockopt+0xf1/0x240 [ 911.822250][T26114] __x64_sys_getsockopt+0x11e/0x1a0 [ 911.822273][T26114] x64_sys_call+0x2bc6/0x2ff0 [ 911.822292][T26114] do_syscall_64+0xd2/0x200 [ 911.822378][T26114] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 911.822436][T26114] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 911.822516][T26114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.822536][T26114] RIP: 0033:0x7fa9f55bebe9 [ 911.822552][T26114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 911.822644][T26114] RSP: 002b:00007fa9f4027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 911.822665][T26114] RAX: ffffffffffffffda RBX: 00007fa9f57e5fa0 RCX: 00007fa9f55bebe9 [ 911.822678][T26114] RDX: 0000000000000084 RSI: 0000000000000084 RDI: 0000000000000003 [ 911.822691][T26114] RBP: 00007fa9f4027090 R08: 0000200000000500 R09: 0000000000000000 [ 911.822705][T26114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.822718][T26114] R13: 00007fa9f57e6038 R14: 00007fa9f57e5fa0 R15: 00007ffc9a307418 [ 911.822737][T26114] [ 911.823513][ T29] audit: type=1326 audit(844.836:94074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26109 comm="syz.4.25894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e49ebebe9 code=0x7ffc0000 [ 911.974514][T26128] netlink: 8 bytes leftover after parsing attributes in process `syz.7.25898'. [ 911.980814][ T29] audit: type=1326 audit(844.836:94075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26109 comm="syz.4.25894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e49ebebe9 code=0x7ffc0000 [ 911.988839][T26128] netlink: 8 bytes leftover after parsing attributes in process `syz.7.25898'. [ 911.996878][ T29] audit: type=1326 audit(844.836:94076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26109 comm="syz.4.25894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e49ebebe9 code=0x7ffc0000 [ 911.996903][ T29] audit: type=1326 audit(844.845:94077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26109 comm="syz.4.25894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e49ebebe9 code=0x7ffc0000 [ 911.996923][ T29] audit: type=1326 audit(844.845:94078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26109 comm="syz.4.25894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e49ebebe9 code=0x7ffc0000 [ 912.135477][ T29] audit: type=1326 audit(844.845:94079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26109 comm="syz.4.25894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e49ebebe9 code=0x7ffc0000 [ 912.231025][ T29] audit: type=1326 audit(845.039:94080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26109 comm="syz.4.25894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e49ebebe9 code=0x7ffc0000 [ 912.254228][ T29] audit: type=1326 audit(845.039:94081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26109 comm="syz.4.25894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e49ebebe9 code=0x7ffc0000 [ 912.277542][ T29] audit: type=1326 audit(845.039:94082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26109 comm="syz.4.25894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e49ebebe9 code=0x7ffc0000 [ 912.279543][T26135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26135 comm=syz.9.25902 [ 912.438674][T26141] netlink: 40 bytes leftover after parsing attributes in process `syz.4.25906'. [ 912.465485][T26148] netlink: 24 bytes leftover after parsing attributes in process `syz.5.25909'. [ 912.658930][T26163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25913'. [ 912.667974][T26163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25913'. [ 912.702173][T26164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25912'. [ 912.711299][T26164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25912'. [ 912.934559][T26177] loop0: detected capacity change from 0 to 1024 [ 912.964187][T26177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 913.031245][T24745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.090165][T26187] loop0: detected capacity change from 0 to 512 [ 913.111882][T26187] EXT4-fs (loop0): orphan cleanup on readonly fs [ 913.118976][T26187] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.25920: bad orphan inode 13 [ 913.132837][T26187] ext4_test_bit(bit=12, block=18) = 1 [ 913.138286][T26187] is_bad_inode(inode)=0 [ 913.142757][T26187] NEXT_ORPHAN(inode)=2130706432 [ 913.144099][T26198] FAULT_INJECTION: forcing a failure. [ 913.144099][T26198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 913.147769][T26187] max_ino=32 [ 913.147777][T26187] i_nlink=1 [ 913.151634][T26187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 913.160828][T26198] CPU: 0 UID: 0 PID: 26198 Comm: syz.4.25925 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 913.160938][T26198] Tainted: [W]=WARN [ 913.160945][T26198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 913.160956][T26198] Call Trace: [ 913.161032][T26198] [ 913.161042][T26198] __dump_stack+0x1d/0x30 [ 913.161063][T26198] dump_stack_lvl+0xe8/0x140 [ 913.161083][T26198] dump_stack+0x15/0x1b [ 913.161098][T26198] should_fail_ex+0x265/0x280 [ 913.161119][T26198] should_fail+0xb/0x20 [ 913.161194][T26198] should_fail_usercopy+0x1a/0x20 [ 913.161214][T26198] _copy_from_user+0x1c/0xb0 [ 913.161240][T26198] ___sys_sendmsg+0xc1/0x1d0 [ 913.161281][T26198] __x64_sys_sendmsg+0xd4/0x160 [ 913.161306][T26198] x64_sys_call+0x191e/0x2ff0 [ 913.161325][T26198] do_syscall_64+0xd2/0x200 [ 913.161350][T26198] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 913.161372][T26198] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 913.161450][T26198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.161582][T26198] RIP: 0033:0x7f1e49ebebe9 [ 913.161598][T26198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 913.161614][T26198] RSP: 002b:00007f1e4891f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 913.161632][T26198] RAX: ffffffffffffffda RBX: 00007f1e4a0e5fa0 RCX: 00007f1e49ebebe9 [ 913.161670][T26198] RDX: 0000000004004014 RSI: 00002000000005c0 RDI: 0000000000000003 [ 913.161681][T26198] RBP: 00007f1e4891f090 R08: 0000000000000000 R09: 0000000000000000 [ 913.161693][T26198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.161704][T26198] R13: 00007f1e4a0e6038 R14: 00007f1e4a0e5fa0 R15: 00007ffd63a62a38 [ 913.161723][T26198] [ 913.418983][T26187] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 913.455898][T26187] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 913.487167][T24745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.894325][T26244] FAULT_INJECTION: forcing a failure. [ 913.894325][T26244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 913.907641][T26244] CPU: 0 UID: 0 PID: 26244 Comm: syz.5.25942 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 913.907674][T26244] Tainted: [W]=WARN [ 913.907680][T26244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 913.907692][T26244] Call Trace: [ 913.907698][T26244] [ 913.907750][T26244] __dump_stack+0x1d/0x30 [ 913.907770][T26244] dump_stack_lvl+0xe8/0x140 [ 913.907785][T26244] dump_stack+0x15/0x1b [ 913.907798][T26244] should_fail_ex+0x265/0x280 [ 913.907820][T26244] should_fail+0xb/0x20 [ 913.907837][T26244] should_fail_usercopy+0x1a/0x20 [ 913.907861][T26244] _copy_from_user+0x1c/0xb0 [ 913.907883][T26244] ___sys_sendmsg+0xc1/0x1d0 [ 913.907988][T26244] __x64_sys_sendmsg+0xd4/0x160 [ 913.908010][T26244] x64_sys_call+0x191e/0x2ff0 [ 913.908027][T26244] do_syscall_64+0xd2/0x200 [ 913.908182][T26244] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 913.908205][T26244] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 913.908228][T26244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.908257][T26244] RIP: 0033:0x7fa9f55bebe9 [ 913.908272][T26244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 913.908353][T26244] RSP: 002b:00007fa9f4027038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 913.908371][T26244] RAX: ffffffffffffffda RBX: 00007fa9f57e5fa0 RCX: 00007fa9f55bebe9 [ 913.908391][T26244] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 913.908404][T26244] RBP: 00007fa9f4027090 R08: 0000000000000000 R09: 0000000000000000 [ 913.908416][T26244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.908435][T26244] R13: 00007fa9f57e6038 R14: 00007fa9f57e5fa0 R15: 00007ffc9a307418 [ 913.908451][T26244] [ 914.586747][T26282] FAULT_INJECTION: forcing a failure. [ 914.586747][T26282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.599941][T26282] CPU: 1 UID: 0 PID: 26282 Comm: syz.5.25956 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 914.599972][T26282] Tainted: [W]=WARN [ 914.599978][T26282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 914.600069][T26282] Call Trace: [ 914.600077][T26282] [ 914.600085][T26282] __dump_stack+0x1d/0x30 [ 914.600109][T26282] dump_stack_lvl+0xe8/0x140 [ 914.600127][T26282] dump_stack+0x15/0x1b [ 914.600143][T26282] should_fail_ex+0x265/0x280 [ 914.600165][T26282] should_fail+0xb/0x20 [ 914.600225][T26282] should_fail_usercopy+0x1a/0x20 [ 914.600243][T26282] _copy_from_user+0x1c/0xb0 [ 914.600266][T26282] ___sys_sendmsg+0xc1/0x1d0 [ 914.600309][T26282] __x64_sys_sendmsg+0xd4/0x160 [ 914.600373][T26282] x64_sys_call+0x191e/0x2ff0 [ 914.600390][T26282] do_syscall_64+0xd2/0x200 [ 914.600417][T26282] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 914.600507][T26282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.600528][T26282] RIP: 0033:0x7fa9f55bebe9 [ 914.600542][T26282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 914.600558][T26282] RSP: 002b:00007fa9f4027038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 914.600578][T26282] RAX: ffffffffffffffda RBX: 00007fa9f57e5fa0 RCX: 00007fa9f55bebe9 [ 914.600589][T26282] RDX: 0000000000088801 RSI: 0000200000000240 RDI: 0000000000000003 [ 914.600599][T26282] RBP: 00007fa9f4027090 R08: 0000000000000000 R09: 0000000000000000 [ 914.600614][T26282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.600753][T26282] R13: 00007fa9f57e6038 R14: 00007fa9f57e5fa0 R15: 00007ffc9a307418 [ 914.600797][T26282] [ 915.031147][T26296] xfrm0 speed is unknown, defaulting to 1000 [ 915.193665][T26304] 9pnet_fd: Insufficient options for proto=fd [ 915.212200][T26314] loop0: detected capacity change from 0 to 1024 [ 915.239192][T26314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 915.319466][T24745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.351438][T26331] loop0: detected capacity change from 0 to 512 [ 915.369624][T26331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 915.604764][T26345] FAULT_INJECTION: forcing a failure. [ 915.604764][T26345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 915.617944][T26345] CPU: 0 UID: 0 PID: 26345 Comm: syz.5.25976 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 915.618052][T26345] Tainted: [W]=WARN [ 915.618057][T26345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 915.618074][T26345] Call Trace: [ 915.618079][T26345] [ 915.618087][T26345] __dump_stack+0x1d/0x30 [ 915.618109][T26345] dump_stack_lvl+0xe8/0x140 [ 915.618178][T26345] dump_stack+0x15/0x1b [ 915.618193][T26345] should_fail_ex+0x265/0x280 [ 915.618254][T26345] should_fail+0xb/0x20 [ 915.618332][T26345] should_fail_usercopy+0x1a/0x20 [ 915.618351][T26345] _copy_from_user+0x1c/0xb0 [ 915.618376][T26345] ___sys_sendmsg+0xc1/0x1d0 [ 915.618428][T26345] __sys_sendmmsg+0x178/0x300 [ 915.618455][T26345] __x64_sys_sendmmsg+0x57/0x70 [ 915.618484][T26345] x64_sys_call+0x1c4a/0x2ff0 [ 915.618502][T26345] do_syscall_64+0xd2/0x200 [ 915.618526][T26345] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 915.618546][T26345] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 915.618568][T26345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.618586][T26345] RIP: 0033:0x7fa9f55bebe9 [ 915.618601][T26345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 915.618617][T26345] RSP: 002b:00007fa9f4027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 915.618635][T26345] RAX: ffffffffffffffda RBX: 00007fa9f57e5fa0 RCX: 00007fa9f55bebe9 [ 915.618646][T26345] RDX: 0000000000000001 RSI: 0000200000004580 RDI: 0000000000000003 [ 915.618713][T26345] RBP: 00007fa9f4027090 R08: 0000000000000000 R09: 0000000000000000 [ 915.618723][T26345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.618734][T26345] R13: 00007fa9f57e6038 R14: 00007fa9f57e5fa0 R15: 00007ffc9a307418 [ 915.618751][T26345] [ 915.837423][T26354] FAULT_INJECTION: forcing a failure. [ 915.837423][T26354] name failslab, interval 1, probability 0, space 0, times 0 [ 915.850207][T26354] CPU: 0 UID: 0 PID: 26354 Comm: syz.9.25980 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 915.850297][T26354] Tainted: [W]=WARN [ 915.850303][T26354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 915.850314][T26354] Call Trace: [ 915.850320][T26354] [ 915.850327][T26354] __dump_stack+0x1d/0x30 [ 915.850348][T26354] dump_stack_lvl+0xe8/0x140 [ 915.850366][T26354] dump_stack+0x15/0x1b [ 915.850450][T26354] should_fail_ex+0x265/0x280 [ 915.850470][T26354] should_failslab+0x8c/0xb0 [ 915.850491][T26354] kmem_cache_alloc_noprof+0x50/0x310 [ 915.850575][T26354] ? audit_log_start+0x365/0x6c0 [ 915.850601][T26354] audit_log_start+0x365/0x6c0 [ 915.850627][T26354] audit_seccomp+0x48/0x100 [ 915.850722][T26354] ? __seccomp_filter+0x68c/0x10d0 [ 915.850741][T26354] __seccomp_filter+0x69d/0x10d0 [ 915.850807][T26354] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 915.850829][T26354] ? vfs_write+0x7e8/0x960 [ 915.850853][T26354] __secure_computing+0x82/0x150 [ 915.850941][T26354] syscall_trace_enter+0xcf/0x1e0 [ 915.850963][T26354] do_syscall_64+0xac/0x200 [ 915.850987][T26354] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 915.851005][T26354] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 915.851034][T26354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.851078][T26354] RIP: 0033:0x7f4fce85ebe9 [ 915.851092][T26354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 915.851107][T26354] RSP: 002b:00007f4fcd2c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 915.851124][T26354] RAX: ffffffffffffffda RBX: 00007f4fcea85fa0 RCX: 00007f4fce85ebe9 [ 915.851136][T26354] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 915.851147][T26354] RBP: 00007f4fcd2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 915.851173][T26354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.851184][T26354] R13: 00007f4fcea86038 R14: 00007f4fcea85fa0 R15: 00007ffd537c5ed8 [ 915.851201][T26354] [ 916.311603][T24745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.521380][T26419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26419 comm=syz.0.26003 [ 916.677255][T26423] loop0: detected capacity change from 0 to 1024 [ 916.727727][T26423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 916.820254][T24745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.845122][T26429] xfrm0 speed is unknown, defaulting to 1000 [ 916.910994][T13632] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.929770][T26429] chnl_net:caif_netlink_parms(): no params data found [ 916.945010][T13632] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.007694][T13632] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.022805][T26429] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.030112][T26429] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.041318][T26429] bridge_slave_0: entered allmulticast mode [ 917.051918][T26429] bridge_slave_0: entered promiscuous mode [ 917.063280][T26429] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.070381][T26429] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.078388][T26429] bridge_slave_1: entered allmulticast mode [ 917.085133][T26429] bridge_slave_1: entered promiscuous mode [ 917.093202][T13632] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.142679][T26467] __nla_validate_parse: 20 callbacks suppressed [ 917.142694][T26467] netlink: 24 bytes leftover after parsing attributes in process `syz.9.26013'. [ 917.143487][T26429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.185767][T26429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.195813][T26473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26473 comm=syz.7.26015 [ 917.224803][T26429] team0: Port device team_slave_0 added [ 917.247766][T26429] team0: Port device team_slave_1 added [ 917.260619][ T29] kauditd_printk_skb: 569 callbacks suppressed [ 917.260634][ T29] audit: type=1326 audit(849.866:94650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26474 comm="syz.9.26016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 917.294363][ T29] audit: type=1326 audit(849.866:94651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26474 comm="syz.9.26016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 917.317714][ T29] audit: type=1326 audit(849.866:94652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26474 comm="syz.9.26016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 917.340747][ T29] audit: type=1326 audit(849.866:94653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26477 comm="syz.9.26016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4fce8914a5 code=0x7ffc0000 [ 917.363902][ T29] audit: type=1326 audit(849.866:94654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26474 comm="syz.9.26016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 917.386953][ T29] audit: type=1326 audit(849.866:94655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26474 comm="syz.9.26016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 917.410100][ T29] audit: type=1326 audit(849.866:94656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26474 comm="syz.9.26016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 917.433239][ T29] audit: type=1326 audit(849.866:94657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26474 comm="syz.9.26016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 917.456383][ T29] audit: type=1326 audit(849.866:94658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26474 comm="syz.9.26016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 917.479419][ T29] audit: type=1326 audit(849.866:94659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26474 comm="syz.9.26016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fce85ebe9 code=0x7ffc0000 [ 917.536263][T26429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.543227][T26429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.569714][T26429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.591853][T26486] loop0: detected capacity change from 0 to 1024 [ 917.601045][T26429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.608017][T26429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.634710][T26429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.666579][T26486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 917.710370][T26429] hsr_slave_0: entered promiscuous mode [ 917.723062][T26429] hsr_slave_1: entered promiscuous mode [ 917.747471][T26429] debugfs: 'hsr0' already exists in 'hsr' [ 917.753300][T26429] Cannot create hsr debugfs directory [ 917.771400][T24745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 917.785775][T13632] bridge_slave_1: left allmulticast mode [ 917.791502][T13632] bridge_slave_1: left promiscuous mode [ 917.797313][T13632] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.808640][T13632] bridge_slave_0: left allmulticast mode [ 917.814318][T13632] bridge_slave_0: left promiscuous mode [ 917.820079][T13632] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.946062][T26514] netlink: 24 bytes leftover after parsing attributes in process `syz.0.26025'. [ 917.970485][T13632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 917.994115][T13632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 918.021229][T13632] bond0 (unregistering): Released all slaves [ 918.043065][T13632] bond1 (unregistering): (slave veth3): Releasing active interface [ 918.055721][T13632] bond1 (unregistering): Released all slaves [ 918.067829][T13632] bond2 (unregistering): (slave veth13): Releasing active interface [ 918.087102][T13632] bond2 (unregistering): Released all slaves [ 918.104408][T13632] bond3 (unregistering): (slave veth15): Releasing active interface [ 918.114218][T13632] bond3 (unregistering): Released all slaves [ 918.129055][T13632] bond4 (unregistering): (slave veth27): Releasing active interface [ 918.138789][T13632] bond4 (unregistering): Released all slaves [ 918.149084][T13632] bond5 (unregistering): (slave veth29): Releasing active interface [ 918.159496][T26522] netlink: 8 bytes leftover after parsing attributes in process `syz.9.26026'. [ 918.168546][T26522] netlink: 8 bytes leftover after parsing attributes in process `syz.9.26026'. [ 918.178503][T13632] bond5 (unregistering): Released all slaves [ 918.190963][T13632] bond6 (unregistering): (slave veth33): Releasing active interface [ 918.200712][T13632] bond6 (unregistering): Released all slaves [ 918.210595][T13632] bond7 (unregistering): (slave veth39): Releasing active interface [ 918.221181][T13632] bond7 (unregistering): Released all slaves [ 918.231218][T13632] bond8 (unregistering): (slave veth41): Releasing active interface [ 918.240615][T13632] bond8 (unregistering): Released all slaves [ 918.249398][T13632] bond9 (unregistering): (slave veth43): Releasing active interface [ 918.259017][T13632] bond9 (unregistering): Released all slaves [ 918.268158][T13632] bond10 (unregistering): (slave veth45): Releasing active interface [ 918.277474][T13632] bond10 (unregistering): Released all slaves [ 918.286218][T13632] bond11 (unregistering): Released all slaves [ 918.347296][T26526] SELinux: policydb version 1152997684 does not match my version range 15-35 [ 918.367638][T26526] SELinux: failed to load policy [ 918.377225][T13632] tipc: Left network mode [ 918.398268][T13632] hsr_slave_0: left promiscuous mode [ 918.404556][T13632] hsr_slave_1: left promiscuous mode [ 918.410504][T13632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 918.417926][T13632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 918.427339][T26526] hub 2-0:1.0: USB hub found [ 918.432009][T26526] hub 2-0:1.0: 8 ports detected [ 918.437897][T13632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 918.445310][T13632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 918.465720][T13632] veth1_macvtap: left promiscuous mode [ 918.471798][T13632] veth0_macvtap: left promiscuous mode [ 918.477678][T13632] veth1_vlan: left promiscuous mode [ 918.482963][T13632] veth0_vlan: left promiscuous mode [ 918.600587][T13632] team0 (unregistering): Port device team_slave_1 removed [ 918.612737][T13632] team0 (unregistering): Port device team_slave_0 removed [ 918.639152][T13632] team0 (unregistering): Port device dummy0 removed [ 918.924463][T26429] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 918.934413][T26429] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 918.943393][T26429] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 918.951783][T26429] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 919.004408][T26429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.029713][T26429] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.044377][T13631] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.051452][T13631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.073858][T13631] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.081054][T13631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.129191][T26564] netlink: 24 bytes leftover after parsing attributes in process `syz.7.26037'. [ 919.158874][T26429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.420911][ T3398] 0: reclassify loop, rule prio 0, protocol 800 [ 919.430275][T26429] veth0_vlan: entered promiscuous mode [ 919.451425][T26429] veth1_vlan: entered promiscuous mode [ 919.498255][T26429] veth0_macvtap: entered promiscuous mode [ 919.516249][T26429] veth1_macvtap: entered promiscuous mode [ 919.544733][T26429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 919.560859][T26429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 919.573526][T13632] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.583133][T13632] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.592278][T13632] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.610487][T13632] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.729147][T26613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26613 comm=syz.7.26045 [ 919.780851][T26611] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 920.199104][T26650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26650 comm=syz.9.26062 [ 920.237611][T26654] FAULT_INJECTION: forcing a failure. [ 920.237611][T26654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.251132][T26654] CPU: 1 UID: 0 PID: 26654 Comm: syz.5.26064 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 920.251167][T26654] Tainted: [W]=WARN [ 920.251173][T26654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 920.251186][T26654] Call Trace: [ 920.251192][T26654] [ 920.251199][T26654] __dump_stack+0x1d/0x30 [ 920.251220][T26654] dump_stack_lvl+0xe8/0x140 [ 920.251344][T26654] dump_stack+0x15/0x1b [ 920.251361][T26654] should_fail_ex+0x265/0x280 [ 920.251383][T26654] should_fail+0xb/0x20 [ 920.251397][T26654] should_fail_usercopy+0x1a/0x20 [ 920.251415][T26654] _copy_from_user+0x1c/0xb0 [ 920.251504][T26654] ___sys_sendmsg+0xc1/0x1d0 [ 920.251537][T26654] __x64_sys_sendmsg+0xd4/0x160 [ 920.251563][T26654] x64_sys_call+0x191e/0x2ff0 [ 920.251582][T26654] do_syscall_64+0xd2/0x200 [ 920.251622][T26654] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 920.251650][T26654] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 920.251673][T26654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.251817][T26654] RIP: 0033:0x7f82344febe9 [ 920.251832][T26654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.251848][T26654] RSP: 002b:00007f8232f5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 920.251868][T26654] RAX: ffffffffffffffda RBX: 00007f8234725fa0 RCX: 00007f82344febe9 [ 920.251880][T26654] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 920.251890][T26654] RBP: 00007f8232f5f090 R08: 0000000000000000 R09: 0000000000000000 [ 920.251900][T26654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.251911][T26654] R13: 00007f8234726038 R14: 00007f8234725fa0 R15: 00007fff6b7079e8 [ 920.251989][T26654] [ 920.436189][T13625] 0: reclassify loop, rule prio 0, protocol 800 [ 920.468117][T26662] netlink: 40 bytes leftover after parsing attributes in process `syz.9.26067'. [ 920.471570][T26666] netlink: 24 bytes leftover after parsing attributes in process `syz.4.26069'. [ 920.547095][T22935] 0: reclassify loop, rule prio 0, protocol 800 [ 920.790863][T26693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26693 comm=syz.7.26078 [ 921.470221][T26720] netlink: 'syz.4.26088': attribute type 21 has an invalid length. [ 921.479200][T26720] netlink: 132 bytes leftover after parsing attributes in process `syz.4.26088'. [ 921.545705][T26725] FAULT_INJECTION: forcing a failure. [ 921.545705][T26725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 921.558931][T26725] CPU: 1 UID: 0 PID: 26725 Comm: syz.4.26090 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 921.558979][T26725] Tainted: [W]=WARN [ 921.558986][T26725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 921.558997][T26725] Call Trace: [ 921.559005][T26725] [ 921.559013][T26725] __dump_stack+0x1d/0x30 [ 921.559035][T26725] dump_stack_lvl+0xe8/0x140 [ 921.559052][T26725] dump_stack+0x15/0x1b [ 921.559114][T26725] should_fail_ex+0x265/0x280 [ 921.559163][T26725] should_fail+0xb/0x20 [ 921.559190][T26725] should_fail_usercopy+0x1a/0x20 [ 921.559210][T26725] _copy_to_user+0x20/0xa0 [ 921.559275][T26725] simple_read_from_buffer+0xb5/0x130 [ 921.559297][T26725] proc_fail_nth_read+0x10e/0x150 [ 921.559321][T26725] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 921.559381][T26725] vfs_read+0x1a8/0x770 [ 921.559421][T26725] ? __rcu_read_unlock+0x4f/0x70 [ 921.559448][T26725] ? __fget_files+0x184/0x1c0 [ 921.559520][T26725] ksys_read+0xda/0x1a0 [ 921.559537][T26725] __x64_sys_read+0x40/0x50 [ 921.559556][T26725] x64_sys_call+0x27bc/0x2ff0 [ 921.559574][T26725] do_syscall_64+0xd2/0x200 [ 921.559647][T26725] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 921.559697][T26725] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 921.559796][T26725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.559814][T26725] RIP: 0033:0x7f1e49ebd5fc [ 921.559829][T26725] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 921.559843][T26725] RSP: 002b:00007f1e4891f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 921.559863][T26725] RAX: ffffffffffffffda RBX: 00007f1e4a0e5fa0 RCX: 00007f1e49ebd5fc [ 921.559877][T26725] RDX: 000000000000000f RSI: 00007f1e4891f0a0 RDI: 0000000000000007 [ 921.559888][T26725] RBP: 00007f1e4891f090 R08: 0000000000000000 R09: 0000000000000000 [ 921.559943][T26725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.559957][T26725] R13: 00007f1e4a0e6038 R14: 00007f1e4a0e5fa0 R15: 00007ffd63a62a38 [ 921.559977][T26725] [ 921.913455][T26731] netlink: 'syz.7.26092': attribute type 2 has an invalid length. [ 922.834693][T26798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.26114'. [ 922.910677][T26802] netlink: 24 bytes leftover after parsing attributes in process `syz.7.26116'. [ 923.092454][ T29] kauditd_printk_skb: 326 callbacks suppressed [ 923.092467][ T29] audit: type=1326 audit(855.257:94986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26810 comm="syz.4.26120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e49ebebe9 code=0x7ffc0000 [ 923.122460][ T29] audit: type=1326 audit(855.257:94987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26810 comm="syz.4.26120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e49ebebe9 code=0x7ffc0000 [ 923.152004][ T29] audit: type=1326 audit(855.303:94988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26810 comm="syz.4.26120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e49ebebe9 code=0x7ffc0000 [ 923.175271][ T29] audit: type=1326 audit(855.303:94989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26810 comm="syz.4.26120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e49ebebe9 code=0x7ffc0000 [ 923.198622][ T29] audit: type=1326 audit(855.303:94990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26810 comm="syz.4.26120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1e49ebebe9 code=0x7ffc0000 [ 923.221821][ T29] audit: type=1326 audit(855.303:94991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26810 comm="syz.4.26120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e49ebebe9 code=0x7ffc0000 [ 923.245262][ T29] audit: type=1326 audit(855.303:94992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26810 comm="syz.4.26120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e49ebebe9 code=0x7ffc0000 [ 923.268609][ T29] audit: type=1326 audit(855.303:94993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26810 comm="syz.4.26120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e49ebebe9 code=0x7ffc0000 [ 923.292059][ T29] audit: type=1326 audit(855.303:94994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26810 comm="syz.4.26120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e49ebebe9 code=0x7ffc0000 [ 923.315355][ T29] audit: type=1326 audit(855.303:94995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26810 comm="syz.4.26120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e49ebebe9 code=0x7ffc0000 [ 923.523777][T26840] FAULT_INJECTION: forcing a failure. [ 923.523777][T26840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 923.537073][T26840] CPU: 0 UID: 0 PID: 26840 Comm: syz.9.26129 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 923.537107][T26840] Tainted: [W]=WARN [ 923.537114][T26840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 923.537126][T26840] Call Trace: [ 923.537185][T26840] [ 923.537193][T26840] __dump_stack+0x1d/0x30 [ 923.537261][T26840] dump_stack_lvl+0xe8/0x140 [ 923.537277][T26840] dump_stack+0x15/0x1b [ 923.537294][T26840] should_fail_ex+0x265/0x280 [ 923.537316][T26840] should_fail+0xb/0x20 [ 923.537334][T26840] should_fail_usercopy+0x1a/0x20 [ 923.537399][T26840] _copy_from_user+0x1c/0xb0 [ 923.537454][T26840] ___sys_sendmsg+0xc1/0x1d0 [ 923.537485][T26840] __x64_sys_sendmsg+0xd4/0x160 [ 923.537509][T26840] x64_sys_call+0x191e/0x2ff0 [ 923.537530][T26840] do_syscall_64+0xd2/0x200 [ 923.537614][T26840] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 923.537633][T26840] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 923.537727][T26840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.537746][T26840] RIP: 0033:0x7f4fce85ebe9 [ 923.537762][T26840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 923.537779][T26840] RSP: 002b:00007f4fcd2c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 923.537796][T26840] RAX: ffffffffffffffda RBX: 00007f4fcea85fa0 RCX: 00007f4fce85ebe9 [ 923.537807][T26840] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 923.537817][T26840] RBP: 00007f4fcd2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 923.537850][T26840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.537863][T26840] R13: 00007f4fcea86038 R14: 00007f4fcea85fa0 R15: 00007ffd537c5ed8 [ 923.537883][T26840] [ 924.189456][T26864] xfrm0 speed is unknown, defaulting to 1000 [ 924.212791][T13628] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.303543][T13628] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.332572][T26864] chnl_net:caif_netlink_parms(): no params data found [ 924.402479][T13628] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.467475][T26864] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.474705][T26864] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.508209][T26864] bridge_slave_0: entered allmulticast mode [ 924.515556][T26864] bridge_slave_0: entered promiscuous mode [ 924.526369][T13628] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.554743][T26864] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.561828][T26864] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.580251][T26864] bridge_slave_1: entered allmulticast mode [ 924.587303][T26864] bridge_slave_1: entered promiscuous mode [ 924.624414][T26864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.647977][T26864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.681912][T13628] bridge_slave_1: left allmulticast mode [ 924.687626][T13628] bridge_slave_1: left promiscuous mode [ 924.693434][T13628] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.704541][T13628] bridge_slave_0: left allmulticast mode [ 924.710477][T13628] bridge_slave_0: left promiscuous mode [ 924.716134][T13628] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.839697][T13628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.852525][T13628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.863363][T13628] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 924.873959][T13628] bond0 (unregistering): Released all slaves [ 924.883566][T13628] bond1 (unregistering): (slave veth7): Releasing active interface [ 924.893198][T13628] bond1 (unregistering): Released all slaves [ 924.902133][T13628] bond2 (unregistering): (slave veth9): Releasing active interface [ 924.911225][T13628] bond2 (unregistering): Released all slaves [ 924.920661][T13628] bond3 (unregistering): (slave veth21): Releasing active interface [ 924.930157][T13628] bond3 (unregistering): Released all slaves [ 924.939067][T13628] bond4 (unregistering): (slave veth27): Releasing active interface [ 924.948400][T13628] bond4 (unregistering): Released all slaves [ 924.966658][T26864] team0: Port device team_slave_0 added [ 924.974664][T26864] team0: Port device team_slave_1 added [ 924.997379][T26912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.26150'. [ 925.010978][T13628] hsr_slave_0: left promiscuous mode [ 925.016685][T13628] hsr_slave_1: left promiscuous mode [ 925.022513][T13628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 925.029881][T13628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 925.037676][T13628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 925.045151][T13628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 925.055716][T13628] veth1_macvtap: left promiscuous mode [ 925.061277][T13628] veth0_macvtap: left promiscuous mode [ 925.066917][T13628] veth1_vlan: left promiscuous mode [ 925.166636][T13628] team0 (unregistering): Port device team_slave_1 removed [ 925.176538][T13628] team0 (unregistering): Port device team_slave_0 removed [ 925.205651][T26864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.212641][T26864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.238748][T26864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.263471][T26864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.270807][T26864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.296986][T26864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.328639][T26864] hsr_slave_0: entered promiscuous mode [ 925.335296][T26864] hsr_slave_1: entered promiscuous mode [ 925.341458][T26864] debugfs: 'hsr0' already exists in 'hsr' [ 925.347286][T26864] Cannot create hsr debugfs directory [ 925.375234][T26923] program syz.9.26153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 925.423852][T26925] $Hÿ: renamed from bond0 (while UP) [ 925.430938][T26925] $Hÿ: entered promiscuous mode [ 925.436058][T26925] bond_slave_0: entered promiscuous mode [ 925.441787][T26925] bond_slave_1: entered promiscuous mode [ 925.794362][T26864] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 925.803521][T26864] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 925.812331][T26864] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 925.821807][T26864] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 925.870018][T26864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.884795][T26864] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.895295][T13625] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.902378][T13625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.926561][T13625] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.933663][T13625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.004624][T26864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 926.107806][T26864] veth0_vlan: entered promiscuous mode [ 926.120870][T26864] veth1_vlan: entered promiscuous mode [ 926.140367][T26864] veth0_macvtap: entered promiscuous mode [ 926.148231][T26864] veth1_macvtap: entered promiscuous mode [ 926.162443][T26864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.174352][T26864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.186752][T13632] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.196212][T13632] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.220240][T13632] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.229680][T13632] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.578671][T26996] netlink: 'syz.5.26171': attribute type 1 has an invalid length. [ 927.059078][T27011] xfrm0 speed is unknown, defaulting to 1000 [ 927.228917][T27064] netlink: 24 bytes leftover after parsing attributes in process `syz.7.26186'. [ 927.284641][T27011] chnl_net:caif_netlink_parms(): no params data found [ 927.429476][T27011] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.436674][T27011] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.477677][T27011] bridge_slave_0: entered allmulticast mode [ 927.484587][T27011] bridge_slave_0: entered promiscuous mode [ 927.491816][T27011] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.499051][T27011] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.523490][T27011] bridge_slave_1: entered allmulticast mode [ 927.530338][T27011] bridge_slave_1: entered promiscuous mode [ 927.608843][T27011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.636395][T27011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.680691][T27011] team0: Port device team_slave_0 added [ 927.692249][T27011] team0: Port device team_slave_1 added [ 927.754848][T27011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.761953][T27011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.788124][T27011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.804659][T27011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.811793][T27011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.837761][T27011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.964798][T27011] hsr_slave_0: entered promiscuous mode [ 927.981466][T27011] hsr_slave_1: entered promiscuous mode [ 927.987512][T27011] debugfs: 'hsr0' already exists in 'hsr' [ 927.993317][T27011] Cannot create hsr debugfs directory [ 928.133458][T27011] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 928.143418][T27011] netdevsim netdevsim9 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 928.219004][T27011] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 928.229012][T27011] netdevsim netdevsim9 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 928.316223][T27011] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 928.326149][T27011] netdevsim netdevsim9 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 928.356692][T27412] netlink: 24 bytes leftover after parsing attributes in process `syz.5.26206'. [ 928.381410][T27011] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 928.391496][T27011] netdevsim netdevsim9 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 928.412865][T27435] syz_tun: entered allmulticast mode [ 928.462071][T27011] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 928.471352][T27011] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 928.481306][T27011] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 928.491743][T27011] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 928.542008][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 928.542080][ T29] audit: type=1326 audit(860.278:95242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27432 comm="syz.5.26210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82344febe9 code=0x7ffc0000 [ 928.559843][T27011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.586950][ T29] audit: type=1326 audit(860.278:95243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27432 comm="syz.5.26210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82344febe9 code=0x7ffc0000 [ 928.622979][T27433] syz_tun: left allmulticast mode [ 928.630034][T27011] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.641059][T13631] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.648138][T13631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 928.675945][T13632] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.683042][T13632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.779063][T27011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.812948][ T29] audit: type=1400 audit(860.536:95244): avc: denied { name_bind } for pid=27472 comm="syz.5.26215" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 928.836675][ T29] audit: type=1400 audit(860.555:95245): avc: denied { getopt } for pid=27472 comm="syz.5.26215" laddr=::1 lport=50619 faddr=::1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 929.350121][T27011] veth0_vlan: entered promiscuous mode [ 929.370927][T27011] veth1_vlan: entered promiscuous mode [ 929.400504][T27011] veth0_macvtap: entered promiscuous mode [ 929.411954][T27504] 9pnet: Could not find request transport: f$7rfdno=0xffffffffffffffff [ 929.415629][T27011] veth1_macvtap: entered promiscuous mode [ 929.438584][T27011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 929.451389][T27011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 929.464075][T22935] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.473110][T22935] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.489068][T27512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26220'. [ 929.498484][T22935] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.516661][T13632] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.542032][ T29] audit: type=1326 audit(861.201:95246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27495 comm="syz.7.26221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6a33ebe9 code=0x7ffc0000 [ 929.565240][ T29] audit: type=1326 audit(861.201:95247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27495 comm="syz.7.26221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6a33ebe9 code=0x7ffc0000 [ 929.683279][ T29] audit: type=1326 audit(861.275:95248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27495 comm="syz.7.26221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7f6a2dade9 code=0x7ffc0000 [ 929.706521][ T29] audit: type=1326 audit(861.275:95249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27495 comm="syz.7.26221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f7f6a33ebe9 code=0x7ffc0000 [ 929.729570][ T29] audit: type=1326 audit(861.275:95250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27495 comm="syz.7.26221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6a33ebe9 code=0x7ffc0000 [ 929.752778][ T29] audit: type=1326 audit(861.275:95251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27495 comm="syz.7.26221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6a33ebe9 code=0x7ffc0000 [ 929.798407][T27554] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 929.804950][T27554] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 929.812688][T27554] vhci_hcd vhci_hcd.0: Device attached [ 930.101821][ T9] usb 10-1: SetAddress Request (10) to port 0 [ 930.115137][ T9] usb 10-1: new SuperSpeed USB device number 10 using vhci_hcd [ 930.627942][T27666] FAULT_INJECTION: forcing a failure. [ 930.627942][T27666] name failslab, interval 1, probability 0, space 0, times 0 [ 930.640670][T27666] CPU: 0 UID: 0 PID: 27666 Comm: syz.0.26247 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 930.640699][T27666] Tainted: [W]=WARN [ 930.640705][T27666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 930.640715][T27666] Call Trace: [ 930.640721][T27666] [ 930.640799][T27666] __dump_stack+0x1d/0x30 [ 930.640816][T27666] dump_stack_lvl+0xe8/0x140 [ 930.640834][T27666] dump_stack+0x15/0x1b [ 930.640850][T27666] should_fail_ex+0x265/0x280 [ 930.640870][T27666] should_failslab+0x8c/0xb0 [ 930.640944][T27666] __kvmalloc_node_noprof+0x123/0x4e0 [ 930.640971][T27666] ? seq_read_iter+0x13e/0x940 [ 930.641001][T27666] seq_read_iter+0x13e/0x940 [ 930.641026][T27666] ? kstrtoull+0x111/0x140 [ 930.641077][T27666] seq_read+0x270/0x2b0 [ 930.641164][T27666] ? __pfx_seq_read+0x10/0x10 [ 930.641193][T27666] vfs_read+0x1a8/0x770 [ 930.641212][T27666] ? __rcu_read_unlock+0x4f/0x70 [ 930.641229][T27666] ? __fget_files+0x184/0x1c0 [ 930.641328][T27666] ksys_read+0xda/0x1a0 [ 930.641424][T27666] __x64_sys_read+0x40/0x50 [ 930.641516][T27666] x64_sys_call+0x27bc/0x2ff0 [ 930.641532][T27666] do_syscall_64+0xd2/0x200 [ 930.641553][T27666] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 930.641594][T27666] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 930.641618][T27666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.641639][T27666] RIP: 0033:0x7f93acd1ebe9 [ 930.641655][T27666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 930.641707][T27666] RSP: 002b:00007f93ab77f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 930.641723][T27666] RAX: ffffffffffffffda RBX: 00007f93acf45fa0 RCX: 00007f93acd1ebe9 [ 930.641735][T27666] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000005 [ 930.641748][T27666] RBP: 00007f93ab77f090 R08: 0000000000000000 R09: 0000000000000000 [ 930.641760][T27666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.641773][T27666] R13: 00007f93acf46038 R14: 00007f93acf45fa0 R15: 00007ffc59bbc4e8 [ 930.641790][T27666] [ 930.921762][T27684] loop0: detected capacity change from 0 to 512 [ 930.929121][T13628] ================================================================== [ 930.937187][T13628] BUG: KCSAN: data-race in alloc_pid / copy_process [ 930.943760][T13628] [ 930.946062][T13628] read-write to 0xffffffff8685fc48 of 4 bytes by task 13632 on cpu 0: [ 930.954187][T13628] alloc_pid+0x539/0x720 [ 930.958409][T13628] copy_process+0xe25/0x2000 [ 930.962984][T13628] kernel_clone+0x16c/0x5c0 [ 930.967471][T13628] user_mode_thread+0x7d/0xb0 [ 930.972130][T13628] call_usermodehelper_exec_work+0x7a/0x160 [ 930.978029][T13628] process_scheduled_works+0x4ce/0x9d0 [ 930.983483][T13628] worker_thread+0x582/0x770 [ 930.988059][T13628] kthread+0x486/0x510 [ 930.992107][T13628] ret_from_fork+0xda/0x150 [ 930.996592][T13628] ret_from_fork_asm+0x1a/0x30 [ 931.001420][T13628] [ 931.003725][T13628] read to 0xffffffff8685fc48 of 4 bytes by task 13628 on cpu 1: [ 931.011333][T13628] copy_process+0x14a6/0x2000 [ 931.015994][T13628] kernel_clone+0x16c/0x5c0 [ 931.020481][T13628] user_mode_thread+0x7d/0xb0 [ 931.025140][T13628] call_usermodehelper_exec_work+0x41/0x160 [ 931.031018][T13628] process_scheduled_works+0x4ce/0x9d0 [ 931.036459][T13628] worker_thread+0x582/0x770 [ 931.041032][T13628] kthread+0x486/0x510 [ 931.045080][T13628] ret_from_fork+0xda/0x150 [ 931.049562][T13628] ret_from_fork_asm+0x1a/0x30 [ 931.054391][T13628] [ 931.056692][T13628] value changed: 0x8000018f -> 0x80000190 [ 931.062383][T13628] [ 931.064692][T13628] Reported by Kernel Concurrency Sanitizer on: [ 931.070820][T13628] CPU: 1 UID: 0 PID: 13628 Comm: kworker/u8:27 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 931.082435][T13628] Tainted: [W]=WARN [ 931.086216][T13628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 931.096253][T13628] Workqueue: events_unbound call_usermodehelper_exec_work [ 931.103362][T13628] ================================================================== [ 931.112073][T27684] ext3: Unknown parameter 'dont_hash' [ 933.054421][T27555] vhci_hcd: connection reset by peer [ 933.060164][T13628] vhci_hcd: stop threads [ 933.064498][T13628] vhci_hcd: release socket [ 933.068907][T13628] vhci_hcd: disconnect device [ 935.628114][ T9] usb 10-1: device descriptor read/8, error -110 [ 935.746408][ T9] usb 10-1: new SuperSpeed USB device number 10 using vhci_hcd [ 935.768135][ T9] usb 10-1: enqueue for inactive port 0 [ 935.773837][ T9] usb 10-1: enqueue for inactive port 0 [ 935.779472][ T9] usb 10-1: enqueue for inactive port 0 [ 936.895253][ T9] usb usb10-port1: attempt power cycle [ 938.888440][ T9] usb usb10-port1: unable to enumerate USB device