last executing test programs: 25.42217034s ago: executing program 1 (id=200): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x142) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) 25.250655276s ago: executing program 1 (id=205): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001bc0)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r7, 0x0, 0x7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r3, 0x25, 0x2, @void}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r10, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r9, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r11, &(0x7f00000004c0)=ANY=[], 0xfdef) 25.232270448s ago: executing program 1 (id=207): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563955f723a77645f657865635f742073797374656d5f753ab2797374656d"], 0x56) 25.187322772s ago: executing program 1 (id=208): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setregid(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[], 0x6, 0x2c0, &(0x7f0000000440)="$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") r3 = open(&(0x7f0000000140)='./file2\x00', 0x147842, 0x126) preadv2(r3, &(0x7f0000000900)=[{0x0, 0x3000}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x1) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYRES32=r2, @ANYRES32=r7, @ANYRES64=r2], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='sys_enter\x00', r8, 0x0, 0x9}, 0x18) fchdir(r0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x2}, 0x18) sendmmsg$inet(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="04", 0x1}], 0x1, &(0x7f0000000540)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x20040017) close(r4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x2, &(0x7f0000000240)=0x1000, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet6_tcp_int(r10, 0x6, 0x2, 0x0, &(0x7f0000000540)) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r11}, 0x10) 24.991028942s ago: executing program 1 (id=211): socket$nl_route(0x10, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14, 0x0, 0x8c9c960eb4d726b9, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0xc62b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x1}, {0x63, 0x2}, @period={0x58, 0x0, 0x0, 0x3, 0x80, {0x1, 0x8001, 0xf, 0x1}, 0x0, 0x0}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc474, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r6 = epoll_create(0xaf2) epoll_pwait2(r6, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0xe000200f}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d61637365630000140002800500080000000000050007000000000008000500", @ANYRES32=r9], 0x4c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000005200380228bd70000500df250000000087caff21389cdff60d3717853eeb135f0b0553435bce5e852cacc735a62224a3fe02e1893fc56011022cbd5d67a88f7a2cdf382cc20a17f9e3732a6ebdb5cf67c8679518beb4c26d37496f"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r11, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) 24.426609578s ago: executing program 1 (id=218): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563955f723a77645f657865635f742073797374656d5f753ab2797374656d5f72ffffffffff"], 0x56) 24.328339527s ago: executing program 32 (id=218): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563955f723a77645f657865635f742073797374656d5f753ab2797374656d5f72ffffffffff"], 0x56) 24.316664868s ago: executing program 4 (id=221): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="14000000f403010000000000000000000500000a14"], 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2, 0x5, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x1, 0x0, 0x1}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) sendto$packet(r0, &(0x7f00000002c0)="44c394f305916c4516999da286dd", 0xe, 0x0, &(0x7f0000000340)={0x11, 0x9, 0x0, 0x1, 0x0, 0x6, @random="fb76f11b713b"}, 0x14) r8 = fspick(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f0000000500)='GPL\x00', 0x0, r5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r9, 0x0, 0x0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 24.085049611s ago: executing program 4 (id=226): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$kcm(0x29, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000140)="54c1", 0x2, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='user.incfs.metadata\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x9010, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r0, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) read$usbmon(0xffffffffffffffff, &(0x7f0000000300)=""/240, 0xf0) io_uring_enter(r1, 0x3514, 0x173d, 0x42, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r6}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) 23.823229987s ago: executing program 4 (id=232): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5a6, 0x2}, 0x10}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x6aac42, 0x1bd) fsopen(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) cachestat(r1, &(0x7f00000001c0)={0x1, 0x8000000000000001}, 0xfffffffffffffffd, 0x0) 23.784266251s ago: executing program 4 (id=233): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=@newtaction={0xe68, 0x30, 0x1, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x8}, [{}, {0x0, 0x4, 0x80000000, 0x0, 0x3}, {}, {0x1, 0x0, 0x0, 0x7fff, 0x0, 0xfffffffd}, {}, {0x0, 0xfffffffc, 0xfffffffd}, {}, {0x0, 0xfffffffd}, {0x7, 0x0, 0x0, 0x8}, {0x0, 0x10, 0x0, 0x25}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x8}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0xa902}, {0x3}, {}, {0x0, 0x400, 0x1}, {}, {}, {}, {0xeffffffd, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x9, 0x2, 0xa46}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x6, 0x0, 0xfffffffe}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1c69, 0x100}, {0x0, 0x0, 0x10000}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x9, 0x0, 0xffffffff, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5155}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x6, 0x3, 0x2}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff2ff1}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5a9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x80}, {0xfffffffd}, {0x0, 0xfe}, {0x4, 0x0, 0x0, 0xfffffffe}, {}, {0x400, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7ff}, {0x0, 0x0, 0x1000000}, {0x0, 0x0, 0x0, 0x1, 0x8000}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x1}, {0x400, 0x0, 0x0, 0x4, 0x0, 0x2400000}, {0x0, 0xfffffffe, 0x0, 0xb5}, {0x0, 0x2}, {0x0, 0x0, 0x81, 0x0, 0xfffffe00, 0x6a76d8f4}, {}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x100000, 0x0, 0x8}, {0x9}, {0x9}, {0x0, 0x7fffffff}, {0x3}, {0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {}, {0x400}, {0x0, 0xfffffffd}, {0x0, 0xffffffff}, {0x0, 0x0, 0xabd}, {0x0, 0x0, 0x1}, {0x0, 0xdd86}, {0xfffffffd}, {0x0, 0x0, 0x100}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xf8, 0x80000000}, {0x0, 0x0, 0x1}, {0x40000, 0x0, 0x0, 0x0, 0x0, 0x451d}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x40000}, {0x4}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffe00}, {0x0, 0x80000}, {0x122}, {0x0, 0x8}, {0x80000000, 0x3, 0x6a}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x212, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4000000}, {0x200}], [{}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {0x3}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {0x4}, {}, {}, {}, {0x2}, {0x4}, {0x3}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x5, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0xe}, {}, {0x0, 0x1}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xe68}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r3], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r4}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000006b0000006b000000080000000f0000000000000803000000000000000100000d000000000000000001000000051000000000000700000000050000000200008f0300000005000000090000020400000004000000060000001eb4000055adec14be287b2edd46df80000000000000000300000000020000000200000007000000d920a61c0cadf0bd84c20f8b38cf6a306600878cc9cf4da36538402f46b9fca132f8690447183be3dc9c25ac"], &(0x7f0000000580)=""/141, 0x8c, 0x8d, 0x0, 0x200, 0x10000, @value=r5}, 0x28) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x1, 0xc1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000825bd70002530248a5bcd347f000000000b000000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x40040) write$binfmt_script(r6, &(0x7f0000002f80)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) openat$cgroup_ro(r6, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x2007, &(0x7f0000000980)=0x0) io_destroy(r9) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) 23.643368635s ago: executing program 4 (id=236): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x4, 0x5, 0x3) socket$packet(0x11, 0xa, 0x300) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0xbf, @mcast2, 0x57}}, 0x3b3bd362, 0x3, 0x401, 0x2, 0xb09}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r2, 0x7}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x20, 0x2, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c0003"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='\x00', r0, 0x4000, r4}, 0x18) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000180)={r2}, &(0x7f00000001c0)=0x8) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 22.860709422s ago: executing program 4 (id=241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x1) 22.860215222s ago: executing program 33 (id=241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x1) 5.222031835s ago: executing program 2 (id=461): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22"], 0xfdef) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu<\"0\"}!') 5.100726926s ago: executing program 2 (id=466): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x1, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0xffffffff, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000f4d6031f7cfa8e7aa000000000000000000711233000000008306558063c5befda0371116d58146f2f64bdc7f1303ec4fdc33f8018cf5952f6a7a0b52201a2e5d52c76f9a2a553227acc2de27edb0b552f7de6bfcb023cc0484117ff6d6c60935e8638125fd03a88953b9de9a065dbe617b47dcc7b66e424c71ccaf7361c008227bf67fd29e3ae11996c953919d84f1f9d6f3ec915d02566d6442659cf137ec3fff0700"/187], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) connect$vsock_stream(r0, &(0x7f0000000240)={0x28, 0x0, 0x2711}, 0x10) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0xa141, 0x40) 4.126847552s ago: executing program 2 (id=487): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000900)={0x20, 0x3, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 4.004080034s ago: executing program 2 (id=490): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, 0x0, 0x404c080) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000801e720000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000300)=r5}, 0x20) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r6, &(0x7f0000000000)="aa", 0x1, 0x30000001, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x40003}, 0x1c) fdatasync(r6) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYRES16=r6], 0x48) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000300000000000c00e6000ce54f4b04a3585500000000000400"/49], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES16=r8, @ANYRESHEX=r7, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000280)=0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000600)='rxrpc_rx_rwind_change\x00', r9}, 0x18) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r10, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{0x4, 0x5}, &(0x7f0000000080)=0x10, 0x0, 0x5, 0x8000, 0x3, 0x1, 0x8, 0xfffffffffffffffd}}], 0x58, 0x20040000}, 0x0) sendmmsg$inet6(r7, &(0x7f0000001f80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000240)}}], 0x1, 0x4000001) r11 = gettid() r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r12, &(0x7f0000000380)={0xc, 0x1, 0xfa00, {0x0}}, 0x27) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) 3.181489096s ago: executing program 2 (id=496): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c4, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2707}, {0x6, 0x11, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x80}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xc2}, {0x6, 0x11, 0x1000}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4011}, 0x22048011) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r2, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xff}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_AF={0x5, 0x2, 0x58233fb5fb08730a}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x54}}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x74, r3, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_BSS_BASIC_RATES={0x1f, 0x24, [{0x6c, 0x1}, {0x1, 0x1}, {}, {0x6c}, {0x5}, {0x4d}, {0x18}, {0x6c, 0x1}, {0x0, 0x1}, {0x36}, {0x2, 0x1}, {0x1b, 0x1}, {0x30, 0x1}, {0x48, 0x1}, {0x18}, {0x9}, {0x79}, {0x9}, {0x36}, {0x1, 0x1}, {0x4, 0x1}, {0x24}, {0x9}, {0x18, 0x1}, {0x24, 0x1}, {0x4, 0x1}, {0x12, 0x1}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0xc, 0x0, 0x1, 0x0, {0xdc, 0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0x2}, 0x800, 0x80000000, 0xea}}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001440)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001400)={&(0x7f00000006c0)={0xd30, r3, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xb5a0000, 0x65}}}}, [@NL80211_ATTR_TX_RATES={0x1c4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0xb, 0x18, 0xc, 0x5, 0x16, 0x3, 0x2]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x24, 0x28, 0x12, 0x0, 0x1b, 0x1, 0x30, 0x12, 0x3, 0x9, 0x36, 0xc, 0x9, 0x12, 0x30, 0x6c, 0x36, 0x1b, 0x12, 0xc, 0x13, 0x48, 0x24, 0x1b, 0xb, 0x3, 0x6d, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x101, 0x2, 0x8001, 0x9, 0x3ff, 0x71d, 0x1]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x6, 0x2}, {0x0, 0x7}, {0x6, 0x8}, {0x0, 0x3}, {0x1, 0x9}, {0x7}, {0x7, 0x5}, {0x7, 0x4}, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x3}, {0x3, 0x6}, {0x3, 0x9}, {0x0, 0x4}, {0x1, 0x4}, {0x5, 0x6}, {0x5}, {0x5, 0x4}, {0x3, 0x2}, {0x7, 0xa}, {0x1, 0x1}, {0x1, 0x7}, {0x7, 0x8}, {0x5}, {0x7, 0x3}, {0x1}, {0x4}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x6}, {0x1, 0x8}, {0x0, 0x6}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0x7}, {0x6, 0x3}, {0x5, 0x1}, {0x1, 0x6}, {0x5, 0x3}, {0x5, 0x7}, {0x1}, {0x3, 0x3}, {0x2, 0x4}, {0x5, 0x1}, {0x4, 0x8}, {0x5, 0x9}, {0x5, 0x2}, {0x4, 0x2}, {0x4, 0x2}, {0x3, 0x4}, {0x5, 0x1}, {0x7, 0x4}]}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0x24, 0x0, 0xc, 0x48, 0x6c, 0x36, 0x18, 0x6c, 0x16, 0x4, 0x60, 0x9, 0x6, 0x5, 0x60, 0x1a, 0xc, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x81, 0xffff, 0x4e, 0x8, 0x7, 0x1, 0x4]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0x24, 0xc, 0x12, 0x6c, 0x1b, 0x48, 0x4, 0xc, 0x1, 0x7, 0x60, 0x16, 0x36, 0x4, 0x18, 0x36, 0x5, 0xc, 0x12, 0x1b, 0xc, 0x12, 0xb, 0x4, 0xc, 0x6c, 0x5, 0xb, 0x18]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x6, 0x4, 0x0, 0x4, 0x3, 0x7]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0x3, 0x61, 0x1b, 0x4, 0x48]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x4, 0x6}, {0x1}, {0x5, 0x8}, {0x5, 0x1}, {0x3, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x60, 0x5, 0x30, 0x1b, 0x30, 0x3, 0x12, 0x12, 0x6c, 0x24, 0x48, 0x1, 0x6, 0x6, 0x1, 0x4, 0x9, 0x48, 0x2, 0x5, 0x48, 0x1, 0x1, 0xc, 0x16, 0x1, 0x2]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x6, 0x4}, {0x7}, {0x4, 0xa}, {0x7, 0x7}, {0x0, 0x4}, {0x3, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1b, 0x1b, 0x1b, 0x36, 0x6, 0x16, 0x1b, 0x30, 0x12, 0x36, 0x24, 0x2, 0x2, 0xc, 0x12, 0x5, 0xa, 0x48, 0x36, 0x3, 0xb, 0xc, 0x30, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x7, 0x409, 0x4, 0x2f5, 0x7, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0x190, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe4f, 0x4, 0x95, 0xaa2f, 0x0, 0x4, 0x9, 0x4]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x16, 0x30, 0x48, 0x60, 0xc, 0x3, 0x6c, 0x6c, 0x60, 0xb, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xf, 0x8, 0x1000, 0x8, 0x621, 0x2, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x1, 0x0, 0xc0c, 0x1, 0x81, 0xc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xc4, 0x6, 0x4, 0x8b6a, 0x8, 0xd38d, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x4, 0x18, 0x60, 0x1, 0x4, 0x6, 0x9, 0xb, 0xb, 0x48, 0x3, 0x6c, 0xb, 0x12, 0x9, 0x5, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x5, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x0, 0xa}, {0x0, 0x9}, {0x3, 0x4}, {0x1, 0x4}, {0x4, 0x5}, {0x4}, {0x7, 0xa}, {0x2, 0x7}, {0x4, 0x1}, {0x6, 0x7}, {0x3, 0x4}, {0x5}, {0x3, 0x3}, {0x7, 0x7}, {0x1, 0xa}, {0x4, 0xa}, {0x1, 0x5}, {0x0, 0x5}, {0x4, 0x7}, {0x7, 0x4}, {0x1}, {0x6, 0x1}, {0x0, 0x6}, {0x2, 0xa}, {0x1, 0x7}, {0x7, 0x9}, {0x1, 0x4}, {0x0, 0x3}, {0x5, 0x8}, {0x1}, {0x0, 0x4}, {0x7, 0x2}, {0x2, 0x7}, {0x0, 0x4}, {}, {0x1, 0x8}, {0x1, 0x5}, {0x1}, {0x2, 0x7}, {0x6, 0x7}, {0x4, 0x9}, {0x6}, {0x1, 0x4}, {0x4, 0x9}, {0x0, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x5, 0xa}, {0x4, 0x5}, {0x0, 0x3}, {0x1, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x4, 0x3}, {0x0, 0x8}, {}, {0x0, 0xa}, {0x0, 0x1}, {0x4, 0x2}, {0x2, 0x2}, {0x1, 0xa}, {0x4, 0x5}, {0x5, 0x3}, {0x1, 0x9}, {0x7, 0x9}, {0x7, 0xa}, {0x6}, {0x4, 0x8}]}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x6}, {0x1, 0x9}, {0x0, 0x9}, {0x6, 0xa}, {0x0, 0x4}, {0x7, 0x4}, {0x7, 0x3}, {0x3, 0x9}, {0x1, 0x5}, {0x1, 0x5}, {0x3}, {0x0, 0x8}, {0x1, 0xa}, {0x2, 0xa}, {0x6, 0x1}, {0x5, 0x9}, {0x1, 0x7}, {0x7, 0x9}, {0x2, 0x7}, {0x6, 0xa}, {0x3, 0x5}, {0x2, 0x8}, {0x3}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x5}, {0x7}, {0x4}, {0x2, 0x3}, {0x0, 0x6}, {0x7, 0xa}, {0x4, 0x1}, {0x6, 0xa}, {0x1, 0x1}, {0x0, 0x9}, {0x0, 0x2}, {0x7, 0x8}, {0x2, 0x6}, {0x1}, {0x3, 0x4}, {0x6}, {0x0, 0x6}, {0x1, 0x6}, {0x1, 0x7}, {0x3, 0xa}, {0x4, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x14, 0x8, 0x0, 0x2, 0x8, 0x4, 0x100]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x4, 0x7}, {0x3, 0x8}, {0x1, 0x3}, {0x3, 0x7}, {0x4, 0xa}, {0x6, 0x4}, {0x0, 0x4}, {0x4, 0x6}, {0x0, 0x3}, {0x2, 0x3}, {0x3, 0x9}, {0x1, 0x2}, {0x2, 0x3}, {0x7, 0x5}, {0x4, 0x2}, {0x0, 0x3}, {0x4, 0x7}, {}, {0x1, 0x9}, {0x3, 0x7}, {0x3, 0x2}, {0x6, 0x3}, {0x5, 0x8}, {0x3, 0xa}]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x1, 0xc, 0x25, 0x4, 0x4, 0x0, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x30, 0x5, 0x0, 0x7, 0x100, 0x7ff, 0xbbe, 0x7fff]}}]}]}, @NL80211_ATTR_TX_RATES={0x200, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xc354, 0x0, 0x0, 0x7, 0x7ff, 0x1, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x24, 0xffff, 0x81, 0x1, 0x0, 0x0, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x5, 0x52, 0x4, 0x11c, 0x6, 0x8, 0xfffd]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0x24, 0x60, 0x30, 0x18, 0x30, 0x48, 0x24, 0x36, 0x3f, 0x1, 0x1b, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x48, 0x30, 0x16, 0xb, 0x3, 0x1, 0x4, 0x4, 0x36, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff26, 0x3, 0x9, 0x83a2, 0xe9, 0x1b, 0xffff, 0x6]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x16, 0x30, 0x6, 0x60, 0x30, 0x9, 0x48, 0x36, 0x60, 0x48, 0xc, 0x6, 0x5, 0x12, 0x2, 0x6c, 0x1b]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x18, 0x2, 0x9, 0xc, 0x30, 0x59, 0x36, 0x3, 0x1b, 0x6c, 0x1b, 0x5, 0x18, 0x549637ab4b5436a4, 0xc]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x1, 0x8}, {0x2, 0x7}, {0x4, 0x2}, {0x5}, {0x5, 0x9}, {0x0, 0x3}, {0x6, 0x3}, {0x5, 0x9}, {0x6, 0x3}, {0x4, 0x9}, {0x5, 0x9}, {0x5, 0x7}, {0x5}, {0x2, 0x4}, {0x6, 0x6}, {0x2, 0x2}, {0x0, 0x7}, {0x2, 0x4}, {}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x1374, 0x800, 0x9, 0xa, 0x0, 0xe0]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x27a, 0xff01, 0x4, 0x8001, 0x2, 0x5, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x24, 0xc, 0x5, 0x36, 0x3, 0x60, 0x1, 0x30, 0x48, 0x5, 0x2, 0xb, 0x2, 0x1b, 0x30, 0x2, 0x48, 0x5, 0x16, 0x1, 0xc, 0x6, 0x36, 0x2, 0x6c, 0x30, 0x60, 0x16]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x4, 0x2}, {0x0, 0x3}, {0x7, 0x2}, {0x2, 0x7}, {0x1}, {0x1, 0xa}, {0x7, 0x6}, {0x1, 0x7}, {0x7, 0x5}, {0x5}, {0x5, 0x2}, {0x7, 0xa}, {0x6, 0x1}, {0x5, 0x4}, {0x0, 0x9}, {0x7, 0x9}, {0x7, 0x5}, {0x2, 0x1}, {0x4, 0x4}, {0x1, 0x2}, {}, {0x3, 0x7}, {0x5, 0x4}, {0x7, 0x8}, {0x5, 0x3}, {0x2, 0x6}, {0x2, 0x4}, {0x1}, {0x1, 0x6}, {0x5, 0x2}, {0x7, 0x9}, {0x4, 0x3}, {0x1, 0xa}, {0x7, 0x7}, {0x3, 0x7}, {0x2, 0x3}, {0x1, 0x3}, {0x1, 0x9}, {0x2, 0x3}, {0x1, 0x6}, {0x2, 0xa}, {0x0, 0x7}, {0x3, 0x4}, {0x0, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x3, 0x5}, {0x0, 0x6}, {0x2, 0x4}, {0x2, 0x8}, {0x3, 0x4}, {0x7, 0x8}, {0x0, 0xa}, {0x3, 0x7}, {0x6, 0x9}, {0x3, 0x6}, {0x4, 0x8}, {0x0, 0xa}, {}, {0x6, 0x7}, {0x3, 0x6}, {0x5, 0x1}, {0x1, 0x2}, {0x2, 0x6}, {0x0, 0x2}, {0x5, 0xa}, {0x1, 0x3}]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfd55, 0xf76, 0x10, 0x2, 0x4, 0xe, 0xa7b8, 0x120b]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x4, 0x9, 0x60, 0xb, 0x1, 0x36, 0x48, 0x24, 0x1, 0x48, 0x2, 0x16, 0x16, 0xc, 0xc, 0x36, 0x6, 0x30, 0x2a]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x1e4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x30, 0xc, 0x58]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x41e, 0x1, 0x2, 0x5d, 0x4, 0x8, 0xa]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x1, 0x7}, {0x1, 0x4}, {0x1, 0x4}, {0x2}, {0x4, 0x3}, {0x4, 0x4}, {0x6, 0x5}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0x6}, {0x4, 0x7}, {0x1, 0x6}, {0x2, 0x1}, {0x7, 0x9}, {0x4, 0x4}, {0x1}, {0x5, 0x2}, {0x4}, {0x2, 0x7}, {0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x81, 0xb267, 0xfff6, 0x2, 0xc, 0x2, 0x8000]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x3, 0x8}, {0x2, 0x7}, {0x4, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x3, 0x9}, {0x1, 0x8}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x5}, {0x1, 0x3}, {0x0, 0x5}, {0x1, 0x9}, {0x3, 0x7}, {0x3}, {0x7, 0x2}, {}, {0x7, 0x3}, {0x3, 0x9}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x6}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0x8}, {0x6, 0x6}, {0x6, 0x6}, {0x5, 0x6}, {0x7, 0x8}, {0x2, 0x9}, {0x6, 0x1}, {0x0, 0xa}, {0x1, 0x5}, {0x0, 0x9}, {0x4}, {0x5, 0x5}, {0x6}, {0x1, 0x9}, {0x1, 0x7}, {0x3, 0x2}, {0x1, 0x4}, {0x1, 0x6}, {}, {0x1, 0x2}, {}, {0x7, 0x4}, {0x2, 0x3}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x5, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x7, 0x3}, {0x5, 0x4}, {0x3, 0x2}, {0x6, 0x9}, {0x7, 0x2}, {0x0, 0x5}, {0x1, 0x4}, {0x4, 0xa}, {0x3, 0x4}, {0x1, 0xa}, {0x4, 0x6}, {0x6, 0x4}, {0x5}, {0x7, 0x5}, {0x1, 0x4}, {0x0, 0x5}, {0x7, 0x3}, {0x7, 0x5}, {0x0, 0x7}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x1, 0x800, 0x0, 0x8, 0x5, 0x5, 0x9]}}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0xb, 0x1, 0x1b, 0xc, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0x8001, 0x10, 0x8, 0x5, 0x8, 0x1, 0x3ff]}}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7ff, 0x8, 0x8, 0x2, 0x33b, 0x5, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x555, 0xfff9, 0xff9b, 0x2, 0x1]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x3}, {0x4, 0xa}, {0x5, 0x5}, {0x1, 0x8}, {0x1, 0x3}, {0x6, 0x6}, {0x3, 0x4}, {0x0, 0x3}, {0x5, 0x9}, {0x1, 0x3}, {0x1}, {0x1, 0x8}, {0x2, 0x8}, {0x1, 0x8}, {0x0, 0x1}, {0x1}, {0x7, 0x3}, {0x2}, {0x6}, {0x4, 0x4}, {0x1, 0x9}, {0x7, 0x9}, {0x3, 0x8}, {0x0, 0x7}, {0x2, 0xa}, {0x3, 0x6}, {0x1, 0x9}, {}, {0x1, 0x3}, {}, {0x2, 0x5}, {0x7, 0x1}, {0x5, 0x3}, {0x1, 0x8}, {0x7, 0x7}, {0x5, 0x9}, {0x6, 0x7}, {0x7, 0x8}, {0x5, 0x6}, {0x3, 0x9}, {0x4, 0x4}, {0x2, 0x7}, {0x5}, {0x6, 0x2}, {}, {0x1, 0x8}, {0x7, 0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x18, 0x48, 0x36, 0x1b, 0x9, 0x9, 0x30, 0x5]}]}]}, @NL80211_ATTR_TX_RATES={0x158, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x80, 0xe600, 0x8, 0x979, 0x3, 0x9]}}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x0, 0x8000, 0x2, 0x5, 0xb041, 0x100, 0x3]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x7, 0x6}, {0x6, 0x4}, {0x0, 0x5}, {0x6, 0x4}, {0x4, 0x8}, {0x5, 0x1}, {0x3, 0x4}, {0x7, 0x7}, {0x1, 0x3}, {0x0, 0x4}, {0x5, 0x9}, {0x0, 0x7}, {0x4, 0x3}, {0x5, 0x8}, {0x0, 0xa}, {0x1}, {0x1, 0x9}, {0x2}, {0x7, 0x9}, {0x4, 0x8}, {0x4, 0x9}, {0x2, 0xa}, {0x6, 0x7}, {0x1, 0x1}, {0x6, 0x5}, {0x4, 0x6}, {0x0, 0x2}, {0x0, 0xa}, {0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffbc, 0x3, 0x6, 0x2, 0x101, 0x8, 0x8, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7d0f, 0x9, 0x401, 0x8001, 0x3, 0x6, 0xdbc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1b, 0x3, 0xb, 0x6c, 0x9, 0x4, 0x3b33e75222a72910, 0x30, 0x3, 0x2, 0x48, 0x60, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x29, 0x706d, 0x5, 0x9, 0x4, 0x9, 0xa53, 0x8]}}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x7fff, 0x823b, 0xff25, 0x1, 0x2, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x60, 0x30]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x6, 0x7}, {0x6, 0x5}, {0x2, 0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x6, 0x6}, {0x4, 0x6}, {0x1, 0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x9}, {0x5, 0x2}, {0x4, 0x5}, {0x6, 0x1}, {0x0, 0xd}, {0x5, 0xa}, {0x3, 0x3}, {0x6, 0x5}, {0x1, 0x8}, {0x1, 0xa}, {0x1, 0x3}, {0x7, 0x3}, {0x3, 0x5}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x9}, {0x1, 0x5}, {0x4, 0x3}, {0x0, 0x9}, {0x7, 0x9}, {0x3}, {0x2, 0x7}, {0x1}, {0x1, 0x6}, {0x2, 0x6}, {0x6, 0x6}, {0x6, 0x4}, {0x1, 0x4}, {0x4}, {0x0, 0xa}, {0x4, 0x2}, {0x5, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x24c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x3, 0x2, 0x18, 0x65, 0x4, 0x48, 0xb, 0x6c, 0xb, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x0, 0x5}, {0x5, 0x4}, {0x7, 0x4}]}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x7, 0x5054, 0x7f, 0x0, 0xb, 0xfff]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x61, 0x2, 0x5, 0x1, 0x48, 0x36, 0xb, 0x24, 0x2, 0x4a]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x7, 0x4, 0xcf3, 0x396, 0x4, 0x60, 0x133f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1f, 0x12, 0x36, 0x18, 0x5, 0xc, 0x5]}]}, @NL80211_BAND_6GHZ={0xf4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0x3}, {}, {0x1, 0x7}, {0x0, 0x8}, {0x5, 0x1}, {0x4, 0x7}, {0x3, 0x8}, {0x5, 0x9}, {0x7, 0xa}, {0x0, 0x6}, {0x4, 0x8}, {0x3, 0x2}, {0x7, 0x1}, {0x3, 0x6}, {0x4, 0x3}, {0x2, 0x1}, {0x3, 0x2}, {0x2, 0x3}, {0x4}, {0x7, 0x9}, {0x3, 0x3}, {0x0, 0xa}, {0x5, 0x1}, {0x7, 0x2}, {0x5}, {0x2}, {0x0, 0x2}, {0x6, 0x7}, {0x0, 0xa}, {0x0, 0x8}, {0x5, 0x7}, {0x6, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x5, 0x9}, {0x0, 0x4}, {0x2, 0x1}, {0x2}, {0x7, 0xa}, {0x1, 0x5}, {0x1, 0x7}, {}, {0x0, 0x7}, {0x2, 0x9}, {0x2, 0xa}, {0x1, 0x8}, {0x1, 0x5}, {0x4, 0x6}, {0x3}, {0x6}, {0x4, 0x3}, {0x6, 0x3}, {0x3, 0x8}, {0x2, 0x2}, {0x4, 0x5}, {0x6, 0x7}, {}, {0x1, 0x3}, {0x4, 0x6}, {0x2, 0x5}, {0x3, 0x3}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x4, 0x5}, {0x0, 0x4}, {0x7, 0x7}, {0x1, 0x1}, {0x6, 0x3}, {0x4, 0x6}, {0x1, 0x2}, {0x2, 0x7}, {0x0, 0x9}, {0x7, 0x1}, {0x3, 0x5}, {0x0, 0x1}, {0x6, 0x5}, {0x5, 0x5}, {0x0, 0xa}, {0x6, 0x4}, {0x6, 0x6}, {0x3, 0x8}, {0x5, 0x1}, {0x6, 0x4}, {0x6, 0x6}, {0x0, 0x8}, {}, {0x6}, {0x3, 0x8}, {0x1, 0x9}, {0x7, 0x2}, {0x7, 0x7}, {0x0, 0x8}, {0x7, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x5, 0x5}, {0x6, 0x5}, {0x1, 0x3}, {0x6, 0x6}, {0x0, 0x2}, {0x3, 0x8}, {0x2, 0x8}, {0x3, 0x8}, {0x1, 0x3}, {}, {0x1, 0x4}, {0x7, 0x2}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x60, 0x48, 0x36, 0x60, 0x60, 0xb, 0x18, 0x36, 0x16, 0x2, 0x60, 0x6, 0x4, 0x48, 0x60, 0x3, 0xc, 0x1, 0x30, 0xc, 0x3, 0x19, 0x1, 0x62, 0x1b, 0x2, 0x18, 0x1, 0x2, 0xb, 0x1b]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x18, 0x16, 0x9, 0x18, 0x48, 0x5, 0x36, 0x16, 0x60, 0x2, 0x16, 0x9, 0x6, 0x9, 0x3, 0x16, 0x60, 0x30, 0x5, 0x16, 0x2, 0x12]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x7}, {0x7, 0x4}, {}, {0x5, 0x8}, {0x4, 0xa}, {0x3, 0x4}, {0x0, 0x2}, {0x4, 0x3}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0x7}, {0x5, 0xa}, {0x0, 0x8}, {0x0, 0x2}, {0x6, 0xa}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x6, 0x5}, {0x6, 0x2}, {0x6, 0x3}, {0x3, 0x9}, {0x2, 0x7}, {0x6, 0x1}, {0x0, 0x3}, {0x7, 0x2}, {0x5, 0x6}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0x1}, {0x0, 0x8}, {0x0, 0x2}, {0x0, 0x8}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0x6}, {0x0, 0x7}, {0x1}, {0x2, 0x5}, {0x1, 0x6}, {0x3, 0x8}, {0x5, 0x8}, {0x1, 0x8}, {0x0, 0x7}, {0x6, 0x7}]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x1}, {0x7, 0x2}, {0x5, 0x4}, {0x7, 0x9}, {0x4, 0x3}, {0x4, 0x4}, {0x7, 0xa}, {0x5}, {0x0, 0x6}, {}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x5}, {0x4}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1a, 0xdc, 0x8000, 0x3c3, 0x8, 0x4, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7ff, 0x0, 0x7, 0x2, 0x9, 0x12, 0x9]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x174, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x81, 0x3ff, 0x1000, 0x8, 0x6, 0x5]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x3, 0x48, 0x6c, 0x5, 0x3, 0x9, 0x30, 0xb, 0xc, 0x3, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xb2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x4, 0x8, 0x3b38, 0x401, 0x2, 0x1000]}}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x80, 0xf6bb, 0x33, 0x3, 0x8, 0xd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x1b, 0x60, 0x8fc1bd0af00e47ed, 0x5, 0x60, 0x6c, 0x16, 0x2, 0x4, 0x0, 0x12, 0x4f, 0x30, 0x12, 0x4, 0x24, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x1, 0xfffb, 0x4, 0x3, 0x7fff, 0xfff7]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x8}, {0x6, 0x3}, {0x4, 0x4}, {0x7, 0x2}, {0x1, 0x2}, {0x6, 0x7}, {0x3, 0x5}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x0, 0x1}, {0x1, 0x3}, {0x7, 0x3}, {0x1, 0x5}, {0x2, 0x4}, {0x1, 0x8}, {0x5, 0x7}, {0x1, 0x7}, {0x0, 0x7}, {0x5, 0x9}, {0x4, 0x2}, {0x7, 0x7}, {0x6, 0x4}, {0x5, 0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x3}, {0x1, 0xa}, {0x0, 0x2}, {0x0, 0x4}, {0x3, 0x4}, {0x0, 0x1}, {0x2, 0x4}, {0x2, 0x4}, {0x1, 0x4}, {0x1, 0x6}, {0x0, 0xa}, {0x6}, {0x5, 0x6}, {0x4, 0x7}, {0x6, 0x9}, {0x2, 0x3}, {0x6, 0x9}, {0x1, 0x6}, {0x6, 0x6}, {0x6, 0x7}, {0x1, 0x6}, {0x1, 0x6}, {0x3, 0x8}, {0x2, 0x8}, {0x0, 0x8}, {0x0, 0x3}, {0x5, 0x2}, {0x2, 0x6}, {0x7, 0x4}, {0x7, 0xa}, {0x1, 0xa}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x1224, 0x8, 0x40, 0x1, 0xfff7, 0x8, 0x9]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x5, 0x9}, {0x5, 0x5}, {0x7, 0x3}, {0x4, 0x3}, {0x4, 0x9}, {0x7, 0x2}, {}, {0x6, 0x5}, {0x5, 0x7}, {0x1, 0x8}, {0x7, 0x9}, {0x7, 0x9}, {0x4, 0xa}, {0x3, 0x9}, {0x0, 0x4}, {0x5, 0x9}, {0x0, 0x5}, {0x4, 0x8}, {0x5, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x1}, {0x6, 0x7}, {0x7, 0x3}, {0x2, 0x6}, {0x4, 0x4}, {0x2, 0x3}, {0x0, 0x5}, {0x4, 0x6}, {0x6, 0xa}, {0x0, 0x9}, {0x1, 0x1}, {0x6, 0x8}, {0x2}, {0x6}, {0x5, 0x6}, {0x7, 0x7}, {0x2, 0x3}, {0x7}, {0x2, 0x4}, {0x0, 0x8}, {0x5, 0x1}, {0x7, 0x3}, {0x2, 0x7}, {0x6, 0x3}, {0x7, 0x7}, {0x1, 0x7}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x12, 0x3, 0x4, 0x4, 0x4]}]}]}, @NL80211_ATTR_TX_RATES={0xb8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x7, 0x2}, {0x2, 0xa}, {0x0, 0x1}, {0x1, 0xa}, {0x7, 0x9}, {0x1, 0x6}, {0x5, 0x1}, {0x6, 0x5}, {0x3, 0x7}, {0x3, 0x4}, {0x3, 0x8}, {0x2, 0xa}, {0x4, 0x7}, {0x5, 0x4}, {0x0, 0x4}, {0x6, 0x3}, {0x2, 0x7}, {0x1, 0x7}, {0x1, 0x9}, {0x5, 0x4}, {0x4, 0x6}, {0x4, 0x6}, {0x0, 0x7}, {0x3}, {0x6, 0x6}, {0x4, 0x3}, {0x6, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x0, 0x4}, {0x1, 0x2}, {0x7}, {0x5, 0x6}, {0x3, 0x7}, {0x1, 0x2}, {0x1, 0x7}, {0x1, 0x9}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x8}, {0x4, 0x6}, {0x1, 0x1}, {0x3, 0x4}, {0x0, 0xa}, {0x0, 0x9}, {0x2, 0x8}, {0x6, 0x4}, {0x6}, {0x7, 0x7}, {0x6, 0x7}, {0x3, 0x8}, {0x3, 0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0x1}, {0x2, 0x6}, {0x2, 0x5}, {0x0, 0x4}, {0x0, 0x3}, {0x1, 0x1}, {0x2, 0x4}, {0x0, 0x3}, {0x0, 0x5}, {0x6, 0x5}, {0x3, 0x7}, {0x6, 0xa}, {0x2, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x7, 0x2}, {0x7, 0x9}, {0x6, 0x5}, {0x0, 0x6}, {0x1, 0x3}, {0x4, 0x9}, {0x6, 0xa}, {0x5, 0x1}, {0x5, 0x3}, {0x4, 0x5}, {0x0, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x6, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x31, 0x6, 0x8, 0x8, 0x3ff, 0xf574, 0x3bd, 0x4]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0xe, 0x18, 0x16]}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0xd30}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = fcntl$dupfd(r0, 0x406, r0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000001480), 0x2000, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x26048800}, 0x94) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001600), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4100000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x34, r7, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd0}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x34}}, 0x50) close(r5) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0xc01}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x6c, r1, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000000) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001840)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000001a40)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a00)={&(0x7f00000018c0)={0x130, 0x0, 0x2, 0x0, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_MASTER={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_MASTER={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x130}, 0x1, 0x0, 0x0, 0x40}, 0x12) munlockall() munlockall() r9 = memfd_secret(0x0) r10 = perf_event_open$cgroup(&(0x7f0000001b00)={0x5, 0x80, 0x3, 0xf6, 0xb, 0x0, 0x0, 0x400, 0x80020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xf, 0x6, @perf_config_ext={0x6, 0x2}, 0x4089, 0x5, 0x3, 0x7, 0x9, 0xaa6, 0x3, 0x0, 0x3}, r9, 0xd, r9, 0x8) perf_event_open(&(0x7f0000001a80)={0x2, 0x80, 0x3, 0x6c, 0x9, 0x8, 0x0, 0x10001, 0x1000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xf216, 0x2, @perf_config_ext={0x4, 0x52}, 0x4000, 0xae12, 0x8001, 0x5, 0x3ff, 0x7, 0x401, 0x0, 0x1, 0x0, 0x100}, 0x0, 0x4, r10, 0xb) sendmsg$kcm(r8, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001b80)}, {&(0x7f0000001bc0)="d2a5b2d47bac53cc0616e6a45d57f282339452dfe8fdb0cd80b672af5e5cac67332e95b395b936e8813f0e44c00f1c3ffc727d5dc7967eec96e98adbe0e145f8a6cd58c0b721b8de62634d348e73c10e31774a1b97a2bf7309ca88dbb49e977a9c154c", 0x63}], 0x2, &(0x7f0000001c80)=[{0xe0, 0x10d, 0x875, "04a25199b775b31b6b0c67de05d64884ac2e8c182b50642280b343f9b7e1f6901a83ca587693942f5cec77564d0de67b865cfb72bc0d36b0ac6e8fac13338b0a95fc198994124c3f902b28d7d9556ab6c2413b923c024fefbc5967ef86b4084abe7749be02eb610689bd58e2d6e9f4ebf5563f6fc9363c14f2ea7df0ca67d8d1ae87b7d7661a76e53bfee1583682359e6b7d75646c3e523df0dbcbc02a874f9cac508ef134be9ae3b059784ea6210f49308798fdc64f80e7c3432731a422e154624d74f0a1920afed30c9fa5229ed976"}, {0xb8, 0x1, 0x9, "66541644ddd4d6d015cae063095ff08ed91dad29fef6d9433c6df0dc6878117a42ec6533a7f48f4f914858f3d133271ee7171a24513691e9299b5d0a5e71463238adfcb1db12c83917d2f281466ec010721747f49aa5d2f08eeed20c8c050aa514d272343aef5afcef99f9d3124ca025c212fc7a3e2b50e31abd1ffbc4c1fc0ae33ff01291337d217e740652eb0d43eef27702d46c52800ff63ca2b1631732b1cfbf"}, {0x78, 0x102, 0x5, "d3c74b6d0f0cae4970f872deb45cc26c155d3494334151a95c46f24d1893487c79b8cbf6a6f95c79a765c95d17a3dc5a1e0df467016f1478bcc787122322f59a94c972a6a798d23bb00463cd2a295976ebe1d9feb465f493106d5daf22be8646a768"}, {0xc8, 0x0, 0x0, "4f8223e1d1f64aadbc48815c50427cddded7f309eea74f18d66e27a92094c85a8a48867aca970216f3373b27148da2aefe286816314794395228773054c9099bcaeaf1f53556cf7afd33d18148bf3fb63d74b001f79c9567baa83d8e6f8781b0c7c99e98bde64405fc25845821904a42cea27cd233d21730cd64e9e81638963e62093aa9c46a746cc086e8a958f96587d54b676dd036e0bf04aa071dccc63f8edfe7ac0bf010138036db1a233f395306f4"}, {0x80, 0x119, 0x1, "0d97bc5f1e872de05496986c351233e52dae65c365dd131b1a8e3d61a8cb4c49d7590964b11ec682ed5931ae87b3ef9672ffaa0c5e8b1aa49043d05b26e0bb56ebe729327cead3148ffdd9839843758d84517757a202de74579f6cdafb063597277d5f8bac6576d4ba586e"}, {0x40, 0x111, 0x9, "a7fe38270cd595d62293dd5dc5ee041644f6161927dfa578dcb87c8d74319ddf6cdfb5d2593eb6bf09d6"}, {0x70, 0x108, 0x12, "14a7e2fd95a3c1167c10005912f68b8e196c23e43d9f7c72c7dc2cf73ddadc91445d620612e599f14b5f7879db2d2a0ad8347c339e2f9ef39f37786439397a5c3cea65187c795207b69a8bcf80a6df035cb3a5f8ed179d7d65a4e90f4a874434"}, {0xb8, 0x88, 0x9d2, "e6a782a5b02404abe7011ab74375d44fbecbf25593599a0c2a9b618c50eb6da95c502cf9f9f4c3fc45bb70a37f3d3f7766fc592e90ba13fda794446f24c902675d0c77924f8eea6ee9fdf8dd21ff1a8150b2bd7ace6208a4aba03a2712bf8999c954ed3701b9049671077d054cf8d128929ef8b76fd4d7f9d1f1d65b61c567b59c5fcf484f453681a3486ae3ed618fc086c8a3ec73088a33a1c1272494efed83cf49"}, {0x1010, 0x101, 0x0, "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"}], 0x14d0}, 0x44001) openat$sysfs(0xffffffffffffff9c, &(0x7f00000031c0)='/sys/kernel/kexec_crash_loaded', 0x40, 0x132) execve(&(0x7f0000003200)='./file0\x00', &(0x7f00000034c0)={[&(0x7f0000003240)='+\x00', &(0x7f0000003280)='.--\x17),\x00', &(0x7f00000032c0)='wlan0\x00', &(0x7f0000003300)='nl80211\x00', &(0x7f0000003340)='^}\x00', &(0x7f0000003380)='pci\x00', &(0x7f00000033c0)='\x00', &(0x7f0000003400)='-\\>,\x00', &(0x7f0000003440)='mptcp_pm\x00', &(0x7f0000003480)='&.\x00']}, &(0x7f0000003780)={[&(0x7f0000003540)='netdevsim\x00', &(0x7f0000003580)='\x00', &(0x7f00000035c0)='\x00', &(0x7f0000003600)='$^,\x00', &(0x7f0000003640)='\\}.!+^}+&+!%]+\'\x00', &(0x7f0000003680)='\x00', &(0x7f00000036c0)='mptcp_pm\x00', &(0x7f0000003700)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', &(0x7f0000003740)='(\'^@\x00']}) syz_open_dev$tty1(0xc, 0x4, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000003800)) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000003840)={0x0, 0x1}, &(0x7f0000003880)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000003940)={r11, 0xfffffffd, 0x1, 0x0, 0x101, 0x101, 0xe1e, 0x8, {0x0, @in={{0x2, 0x4e22, @private=0xa010101}}, 0x5, 0x4, 0x1, 0xfff, 0x5}}, &(0x7f0000003a00)=0xb0) 2.42819972s ago: executing program 5 (id=502): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r3 = fcntl$dupfd(r2, 0x406, r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff6}, {0xffff, 0xffff}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x198, r5, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x15e, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6\xbees0\xad\xc6\xbf6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xf8\xb51O\xd3$\xb4j=\x11d\xf0\xcey\n\xe3\xa5\x03/\x1f@V\xe4\x8f\x03\xd9\xd6\xbb\x04\xa3H?\xf2\xff$%\xe2\xf5\xf7y\x03K\xbf\xcfGxU\xbf\xbb\xb8;Cd)\x14\xbc\x11\x89\xfd\'\xe0b\x99\xbf5#t\xd8\xca$:w\xa3\t\xfd\xef`!\xa3\x9b\xf79!\xbd\xaa\xbd>F\x14.s\xad\xa9\x80\x9e\xb9\xb2\xf9m\x81\xdc\x1d&,w\xe2fxy6\xb3\x99\xc0_S\x1a\xe4\xffM\xa9\x920\x0e\xb4\xa4\'l\x00'/346}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x198}}, 0x8800) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x220000c0}, 0x801) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f00000004c0)=""/136, &(0x7f0000000200)=0x88) 2.423049081s ago: executing program 6 (id=503): r0 = socket(0x200000000000011, 0x2, 0xd) r1 = accept4$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x1c, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x0, r0}, 0x18) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x20}, {r0, 0x14a}, {r1, 0x100}, {r0, 0x24}, {r0, 0x40a2}, {r0, 0x8040}, {r0, 0x80}, {r2, 0x3074}, {r5, 0x3320}], 0x9, &(0x7f0000000280)={0x77359400}, &(0x7f0000000380)={[0x547e]}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x7}, 0x18) r9 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0) pwritev2(r9, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x88) r11 = dup(r10) sendfile(r11, r9, 0x0, 0x8000fffffffc) r12 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x0, 0x80000}}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@discard}, {@noblock_validity}, {@usrjquota}, {@jqfmt_vfsv1}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000000780)="$eJzs3T9sG2UbAPDnznHTP/m+9JO+T/pAHSpAKlJVJ+kfKEztiqhUqQMSC0SOG1Vx4ipOoIkike4VogMC1KVsMDCCGBgQCyMrC4gZqaIRSE0HMHJ8TtPULk6I4xL/ftLZ73t39vO+d35e+053cgB962j9IY14KiIuJhHDG5YNRLbwaGO91ZWl4v2VpWIStdqlX5JIIuLeylKxuX6SPR+KiOWI+H9EfJOPOJ6uv+W+ZqG6sDg1Xi6XZrP6yNz01ZHqwuKJK9Pjk6XJ0sypF186c/b0mbGTYxube7+2sZbfWl9v/Hjz3RvfvXL75qefHVkuvj+exLkYypZt7MdOamyTfJzbNP90N4L1UNLrBrAtuSzP66n0vxiOXJb1rdQ2Dg6Du9I8oItqgxE1oE8l8h/6VPN3QP34tznt5u+PO+cbByD1uKsrS8V3ohl/oHFuIvavHZsc/DV56Mikfrx5eDcbyp60fD0iRgcGHv38J9nnb/tGd6KBdNXX5xs76tH9n66PP9Fi/Blqnjv9m5rj32o2/q22iJ9rM/5d7DDG76//9FHb+NcH4+mW8ZP1+EmL+GlEvNlh/FuvfXm23bLaxxHHonX8puTx54dHLl8pl0Ybjy1jfHXsyMvt+x9xsE38xjnb/WtfMxv7vy9rU9ph/7/49vNnlh8T//lnH7//W23/AxHxXofx/3Pvk1fbLbtzPblb/xWw1f2fRD5udxj/hXNHf8iKzhoCAAAAAAAAAMAOSteuZUvSwno5TQuFxj28/42DablSnTt+uTI/M9G45u1w5NPmlVbDjXpSr49l1+M26yc31U/lsoC5A2v1QrFSnuhx3wEAAAAAAAAAAAAAAAAAAOBJcWjT/f+/5dbu/9/8d9XAXtX+L7+BvU7+Q/96OP+TnrUD2H2+/6Fv1eQ/9C/5D/1L/kP/kv/Qv+Q/9C/5D/1L/gMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChPtXurywV6/WJgYX5qcpbJyZK1anC9HyxUKzMXi1MViqT5VKhWJn+q/dLKpWrozEzf21krlSdG6kuLL4xXZmfaf6naCnf9R4BAAAAAAAAAAAAAAAAAADAP8/Q2pSkhYh8o56mhULEvyLicBLJ5Svl0mhE/Dsivs/lB+v1sV43GgAAAAAAAAAAAAAAAAAAAPaY6sLi1Hi5XJrtXmEgC9XFEJ0XBrayckQs72wz6u+45Vflsw3Y4023Nwq5J+Nz+OQXejgoAQAAAAAAAAAAAAAAAABAn3pw02+nr/ijuw0CAAAAAAAAAAAAAAAAAACAvpT+nEREfTo2/NzQ5qX7ktXc2nNEvH3r0gfXxufmZsfq8++uz5/7MJt/shftBzrVzNM0Iup5DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxQXVicGi+XS7PbLAx2sE6v+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwHX8GAAD//xLkz18=") r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x26) ioctl$FS_IOC_FSSETXATTR(r13, 0x401c5820, &(0x7f0000000080)={0x1018, 0xfffffffc, 0x0, 0x3, 0x1}) ioctl$FS_IOC_FSSETXATTR(r13, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffe, 0xe4c, 0xf2}) r14 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x191282, 0x0) ioctl$TIOCSETD(r14, 0x5423, &(0x7f00000003c0)=0x1) 2.419113311s ago: executing program 5 (id=504): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r2, 0x0, 0xc1c, 0x80000000) 2.234673829s ago: executing program 5 (id=505): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001bc0)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f00000004c0)=ANY=[], 0xfdef) 2.23300685s ago: executing program 2 (id=507): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) readahead(0xffffffffffffffff, 0x100000001, 0xb3e32e0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x3}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500002c0000fffd01119078000000000000006300004e2000189078040000000e0000000900000000000000"], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0xa000, 0x100) close$binfmt(r4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x1, 0x4) fstat(r5, &(0x7f0000000340)) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000340)='kmem_cache_free\x00', r9}, 0x18) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r10, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r10, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) vmsplice(r7, &(0x7f0000000880)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, r7}, 0x94) 2.068978746s ago: executing program 5 (id=509): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) acct(0x0) (fail_nth: 2) 1.62414835s ago: executing program 5 (id=510): splice(0xffffffffffffffff, &(0x7f00000003c0)=0x6, 0xffffffffffffffff, &(0x7f00000004c0)=0x7, 0xfff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000400000004000000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640"], 0x164}, 0x1, 0x0, 0x0, 0x4000809}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r5 = dup(r3) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8000, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[], 0x9) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e5d, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0xaa, 0x0, 0x78}, 0x9c) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f00000002c0)={0x0, 0x30, '\x00', 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0x7f, 0xdf, 0x8001, 0xb, @private0, @local, 0x80, 0x700, 0x6, 0x8}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = pidfd_getfd(r5, r3, 0x0) getpeername$tipc(r6, &(0x7f0000000300)=@id, &(0x7f0000000340)=0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r0, 0x0, 0x0}, 0x20) 1.594973623s ago: executing program 5 (id=511): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r5, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, r5, 0x30, 0x1, @ib={0x1b, 0x8000, 0x3, {"3f8c0d6cf777eaa6ace6d3ec00ed4771"}, 0x500e, 0x0, 0xf}}}, 0xa0) r6 = socket$unix(0x1, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xffe9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000040000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000090100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000100)={0xa002800, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4040014) 1.570288655s ago: executing program 6 (id=512): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x16}, [@call={0x5c}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@getae={0xb0, 0x1f, 0x200, 0x70bd2c, 0x25dfdbfe, {{@in=@loopback, 0x4d3, 0xa, 0x33}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3, 0x3505}, [@algo_comp={0x65, 0x3, {{'lzs\x00'}, 0xe8, "48622036950667c1cd00fdfa665bf490349169d4d447b6e7866d902889"}}, @tfcpad={0x8, 0x16, 0x3ff}]}, 0xb0}}, 0x2) 1.32284751s ago: executing program 3 (id=514): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioprio_set$pid(0x3, 0x0, 0x2004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r3, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x91, 0x6f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timerfd_create(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='mm_page_free\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x81, 0x546, &(0x7f0000000b00)="$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") 1.239420058s ago: executing program 6 (id=515): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r2, 0x0, 0xc1c, 0x80000000) 1.20898812s ago: executing program 3 (id=516): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8cff, &(0x7f0000000140)=ANY=[@ANYBLOB="0039936da8abb4625380b974"], 0x1, 0x539, &(0x7f00000005c0)="$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") 1.135847108s ago: executing program 6 (id=517): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x2c002) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x2c002) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000340)={0x0, 0xfffffffa, 0x0, 'queue0\x00', 0x2}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000040)={[0x10000]}, &(0x7f0000000180), &(0x7f0000000200)={r2, r3+10000000}, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x1b0, 0x178, 0x178, 0x1b0, 0x178, 0x49, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x70, 0xd8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfffd, 0x7fff, 0x0, '\x00', 'syz1\x00'}}}, {{@ip={@local, @empty, 0xff000000, 0xff, 'pim6reg0\x00', 'macsec0\x00', {0xff}, {}, 0x0, 0x0, 0x68}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1b, 0x800, 0xd, 0x7, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0xfffffffffffffe14, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) io_setup(0x8, &(0x7f00000002c0)) (async) io_setup(0x8, &(0x7f00000002c0)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c3d17d5836958c5cfc11cf0246feef977ef9d99bd0ed22655cec2a8bc0fcaa804c57c3f382c34103b061b65a33244107366daac91746926e7c0a3e554fff5b75673ac75ed0d1f685fc7449c7d1877b18ae162417f9080000000800", @ANYRES16=r8, @ANYRESDEC=r5], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x24004081) (async) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c3d17d5836958c5cfc11cf0246feef977ef9d99bd0ed22655cec2a8bc0fcaa804c57c3f382c34103b061b65a33244107366daac91746926e7c0a3e554fff5b75673ac75ed0d1f685fc7449c7d1877b18ae162417f9080000000800", @ANYRES16=r8, @ANYRESDEC=r5], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x24004081) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) quotactl_fd$Q_GETNEXTQUOTA(r6, 0xffffffff80000901, 0x0, &(0x7f0000001880)) 1.135520168s ago: executing program 3 (id=518): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (fail_nth: 3) 1.065421805s ago: executing program 3 (id=519): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000001080)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6075ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r2, r2, 0x0) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000021c0)="1e", 0x1}], 0x1, &(0x7f0000000200)=ANY=[], 0x10}}], 0x2, 0x4000045) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r5, 0x0, 0x1034}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x5461a, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x824, 0x8, 0x8, 0x1, 0x8, 0x9, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) r9 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r9, 0x84, 0x1f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r8, @ANYBLOB="080003"], 0x44}}, 0x0) acct(0x0) 987.414783ms ago: executing program 6 (id=520): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r3) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000300000008000100", @ANYRES32=0x0, @ANYBLOB="080002000000000008000400ac1414bb08000700", @ANYRES32=r5, @ANYBLOB="080005"], 0x3c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x54, r2, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x7ffd}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8000}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x54}}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r8}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) tee(r10, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) futimesat(r10, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={{0x77359400}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1, 0x0, r6}}, 0x40) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 884.091863ms ago: executing program 3 (id=521): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004880}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4804}, 0x18) flistxattr(r2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001800010000000000080000000a373f00", @ANYRES32=r3, @ANYRES32=r3], 0x38}}, 0x240000c1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r7, 0x110, 0x2, 0x0, 0x5392f5b1) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0/file0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r8, 0xc0404806, &(0x7f0000000440)) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 822.300709ms ago: executing program 6 (id=523): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setresuid(0xee01, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) write$cgroup_pid(r0, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) socket$inet6(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x810000, &(0x7f0000000580), 0x1, 0x557, &(0x7f00000005c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() 463.037665ms ago: executing program 0 (id=525): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x8800, 0x484, &(0x7f0000000ac0)=""/111, &(0x7f0000000b40)=0x6f) 408.35312ms ago: executing program 0 (id=526): socket$inet_tcp(0x2, 0x1, 0x0) r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x1, 0x80, 0xa6, 0xf, 0x7, 0x4, 0x0, 0x0, 0x84820, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x33, 0xfffffffffffffffb}, 0x2044, 0x8000000000000000, 0x32504973, 0x4, 0x4, 0x2, 0x90, 0x0, 0x4, 0x0, 0x7}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8040, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x1100, 0x5dd8, 0x801, 0x1, 0x7, 0x28, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000d000000007b8af8ff000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3a9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) syz_io_uring_setup(0x2352, &(0x7f0000000140)={0x0, 0x91b5, 0x40, 0x2, 0x39d}, &(0x7f0000000000), &(0x7f0000000680)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x180}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r7 = socket(0x1, 0x4, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x28000) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r8], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x74, r10, {}, {0xfff1, 0x1}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4008041) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000100000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000", @ANYRES32=r11, @ANYRES8=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) 300.25661ms ago: executing program 0 (id=527): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r2, 0x0, 0xc1c, 0x80000000) 275.927343ms ago: executing program 0 (id=528): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32=r1, @ANYRES16=r2, @ANYRESHEX=r2, @ANYRESHEX=r2, @ANYRES64=r1, @ANYBLOB="f714bd256089a974be711edeb3a24ab6f1ba5fb5e5c59bef5c90c43c09"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x6}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x401, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r5}, 0x18) iopl(0xf8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r6 = open(0x0, 0x470000, 0x14) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffec7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007d8af8ff00000000bfa2004856c2d247c43b42000000000007020000f8ffffffb703000000000000b704000000000000000000005700000095"], 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES64], 0x60}}, 0x4810) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x1000}) r10 = socket(0x10, 0x803, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f00000003c0)={0x9c}, 0x1) ioprio_set$pid(0x2, 0x0, 0x0) 180.189853ms ago: executing program 3 (id=529): socket$inet_tcp(0x2, 0x1, 0x0) r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x1, 0x80, 0xa6, 0xf, 0x7, 0x4, 0x0, 0x0, 0x84820, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x33, 0xfffffffffffffffb}, 0x2044, 0x8000000000000000, 0x32504973, 0x4, 0x4, 0x2, 0x90, 0x0, 0x4, 0x0, 0x7}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8040, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x1100, 0x5dd8, 0x801, 0x1, 0x7, 0x28, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) syz_io_uring_setup(0x2352, &(0x7f0000000140)={0x0, 0x91b5, 0x40, 0x2, 0x39d}, &(0x7f0000000000), &(0x7f0000000680)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x180}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r9 = socket(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x28000) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r8], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x74, r10, {}, {0x5, 0x1}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (fail_nth: 4) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000100000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000", @ANYRES32=r11, @ANYRES8=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) 100.35192ms ago: executing program 0 (id=530): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0xf5, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000680)="d85c4e25", 0x4}], 0x2}, 0x4048081) connect$can_j1939(r0, 0x0, 0x0) 0s ago: executing program 0 (id=531): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) mkdir(&(0x7f0000000540)='./file0\x00', 0x43) utime(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3, 0x0, 0x1}, 0x18) socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000025b47b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0xe6c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0x81, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x5}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x1, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x7}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0xa9, 0xfffffffc}, {0x0, 0x80000000, 0x2, 0xce6, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x1, 0xc, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x5}, {0x8, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x4, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0x9, 0xfffffff9, 0x1}, {0x162, 0x0, 0x4b3, 0xcb5, 0x5, 0x7fffffdf}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x3}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x200, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10004, 0x24056a58, 0x8, 0x8, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x4f5e, 0x9, 0x2, 0x4, 0xdd9f, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x83, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x5, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x6, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0xffffffff}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x7, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x8, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0x2, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x3, 0x3, 0xff36}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0x8, 0x9, 0xd32, 0xd4, 0x100, 0x2}, {0x0, 0xb, 0xec36, 0x52, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x5, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x2}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4, 0x700}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1d, 0x40, 0x472, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x401, 0x6, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x6, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x6, 0x9, 0x611, 0x3, 0x2, 0x6}, {0x9, 0x3, 0x2, 0x9e7, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x2}, {0x2da, 0x0, 0x9, 0xa748, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x0, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x3, 0x3, 0x1, 0x8, 0x400, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffffb}, {0x3eb, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x8, 0x2}, {0x10000000, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0x1, 0x7, 0x8, 0xfffffffb}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x40}, {0x73d, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffd, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x8001, 0x2, 0xd3, 0xe, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x5}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0x5}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0xffffffff, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x8, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe6c}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00'}, 0x10) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) kernel console output (not intermixed with test programs): 000000000000000 [ 41.057695][ T3626] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.057782][ T3626] R13: 00007fe11c446038 R14: 00007fe11c445fa0 R15: 00007ffd4d96b5f8 [ 41.057807][ T3626] [ 41.322250][ T3631] FAULT_INJECTION: forcing a failure. [ 41.322250][ T3631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.335527][ T3631] CPU: 1 UID: 0 PID: 3631 Comm: syz.1.46 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.335554][ T3631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 41.335638][ T3631] Call Trace: [ 41.335644][ T3631] [ 41.335652][ T3631] __dump_stack+0x1d/0x30 [ 41.335674][ T3631] dump_stack_lvl+0xe8/0x140 [ 41.335695][ T3631] dump_stack+0x15/0x1b [ 41.335773][ T3631] should_fail_ex+0x265/0x280 [ 41.335809][ T3631] should_fail+0xb/0x20 [ 41.335918][ T3631] should_fail_usercopy+0x1a/0x20 [ 41.335939][ T3631] _copy_from_iter+0xd2/0xe80 [ 41.336042][ T3631] ? __build_skb_around+0x1ab/0x200 [ 41.336070][ T3631] ? __alloc_skb+0x223/0x320 [ 41.336097][ T3631] netlink_sendmsg+0x471/0x6b0 [ 41.336169][ T3631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 41.336200][ T3631] __sock_sendmsg+0x145/0x180 [ 41.336222][ T3631] ____sys_sendmsg+0x31e/0x4e0 [ 41.336268][ T3631] ___sys_sendmsg+0x17b/0x1d0 [ 41.336315][ T3631] __x64_sys_sendmsg+0xd4/0x160 [ 41.336351][ T3631] x64_sys_call+0x191e/0x3000 [ 41.336373][ T3631] do_syscall_64+0xd2/0x200 [ 41.336432][ T3631] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 41.336483][ T3631] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 41.336513][ T3631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.336536][ T3631] RIP: 0033:0x7f69e1dfefc9 [ 41.336552][ T3631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.336570][ T3631] RSP: 002b:00007f69e085f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.336590][ T3631] RAX: ffffffffffffffda RBX: 00007f69e2055fa0 RCX: 00007f69e1dfefc9 [ 41.336603][ T3631] RDX: 0000000004000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 41.336628][ T3631] RBP: 00007f69e085f090 R08: 0000000000000000 R09: 0000000000000000 [ 41.336641][ T3631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.336653][ T3631] R13: 00007f69e2056038 R14: 00007f69e2055fa0 R15: 00007ffe3d695618 [ 41.336674][ T3631] [ 41.619017][ T3637] FAULT_INJECTION: forcing a failure. [ 41.619017][ T3637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.632250][ T3637] CPU: 1 UID: 0 PID: 3637 Comm: syz.3.48 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.632359][ T3637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 41.632378][ T3637] Call Trace: [ 41.632386][ T3637] [ 41.632396][ T3637] __dump_stack+0x1d/0x30 [ 41.632422][ T3637] dump_stack_lvl+0xe8/0x140 [ 41.632445][ T3637] dump_stack+0x15/0x1b [ 41.632469][ T3637] should_fail_ex+0x265/0x280 [ 41.632514][ T3637] should_fail+0xb/0x20 [ 41.632628][ T3637] should_fail_usercopy+0x1a/0x20 [ 41.632655][ T3637] _copy_from_user+0x1c/0xb0 [ 41.632767][ T3637] ___sys_sendmsg+0xc1/0x1d0 [ 41.632821][ T3637] __x64_sys_sendmsg+0xd4/0x160 [ 41.632902][ T3637] x64_sys_call+0x191e/0x3000 [ 41.632931][ T3637] do_syscall_64+0xd2/0x200 [ 41.632961][ T3637] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 41.633056][ T3637] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 41.633128][ T3637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.633150][ T3637] RIP: 0033:0x7fe11c1eefc9 [ 41.633165][ T3637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.633229][ T3637] RSP: 002b:00007fe11ac4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.633252][ T3637] RAX: ffffffffffffffda RBX: 00007fe11c445fa0 RCX: 00007fe11c1eefc9 [ 41.633265][ T3637] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: 0000000000000008 [ 41.633281][ T3637] RBP: 00007fe11ac4f090 R08: 0000000000000000 R09: 0000000000000000 [ 41.633295][ T3637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.633307][ T3637] R13: 00007fe11c446038 R14: 00007fe11c445fa0 R15: 00007ffd4d96b5f8 [ 41.633378][ T3637] [ 41.840790][ T3639] netlink: 'syz.0.47': attribute type 21 has an invalid length. [ 41.851236][ T3639] netlink: 'syz.0.47': attribute type 1 has an invalid length. [ 41.858931][ T3639] netlink: 132 bytes leftover after parsing attributes in process `syz.0.47'. [ 41.892660][ T3648] netlink: 36 bytes leftover after parsing attributes in process `syz.4.49'. [ 41.901543][ T3648] netlink: 16 bytes leftover after parsing attributes in process `syz.4.49'. [ 41.910635][ T3648] netlink: 36 bytes leftover after parsing attributes in process `syz.4.49'. [ 41.926835][ T3639] 9pnet_fd: Insufficient options for proto=fd [ 41.933262][ T3648] netlink: 36 bytes leftover after parsing attributes in process `syz.4.49'. [ 41.975651][ T3657] loop3: detected capacity change from 0 to 1024 [ 42.011555][ T3657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.032487][ T3666] FAULT_INJECTION: forcing a failure. [ 42.032487][ T3666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.045639][ T3666] CPU: 0 UID: 0 PID: 3666 Comm: syz.1.57 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.045685][ T3666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 42.045700][ T3666] Call Trace: [ 42.045708][ T3666] [ 42.045718][ T3666] __dump_stack+0x1d/0x30 [ 42.045743][ T3666] dump_stack_lvl+0xe8/0x140 [ 42.045762][ T3666] dump_stack+0x15/0x1b [ 42.045778][ T3666] should_fail_ex+0x265/0x280 [ 42.045859][ T3666] should_fail+0xb/0x20 [ 42.045959][ T3666] should_fail_usercopy+0x1a/0x20 [ 42.045984][ T3666] _copy_from_user+0x1c/0xb0 [ 42.046015][ T3666] __sys_bpf+0x183/0x7c0 [ 42.046073][ T3666] __x64_sys_bpf+0x41/0x50 [ 42.046186][ T3666] x64_sys_call+0x2aee/0x3000 [ 42.046266][ T3666] do_syscall_64+0xd2/0x200 [ 42.046299][ T3666] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 42.046328][ T3666] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 42.046387][ T3666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.046415][ T3666] RIP: 0033:0x7f69e1dfefc9 [ 42.046435][ T3666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.046467][ T3666] RSP: 002b:00007f69e085f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 42.046570][ T3666] RAX: ffffffffffffffda RBX: 00007f69e2055fa0 RCX: 00007f69e1dfefc9 [ 42.046586][ T3666] RDX: 0000000000000004 RSI: 00002000000002c0 RDI: 000000000000001e [ 42.046601][ T3666] RBP: 00007f69e085f090 R08: 0000000000000000 R09: 0000000000000000 [ 42.046613][ T3666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.046625][ T3666] R13: 00007f69e2056038 R14: 00007f69e2055fa0 R15: 00007ffe3d695618 [ 42.046644][ T3666] [ 42.091794][ T3657] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 42.229489][ T3657] EXT4-fs (loop3): This should not happen!! Data will be lost [ 42.229489][ T3657] [ 42.239181][ T3657] EXT4-fs (loop3): Total free blocks count 0 [ 42.245241][ T3657] EXT4-fs (loop3): Free/Dirty block details [ 42.251269][ T3657] EXT4-fs (loop3): free_blocks=0 [ 42.256667][ T3657] EXT4-fs (loop3): dirty_blocks=0 [ 42.261763][ T3657] EXT4-fs (loop3): Block reservation details [ 42.267389][ T3678] netlink: 'syz.2.60': attribute type 21 has an invalid length. [ 42.267809][ T3657] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 42.340390][ T3687] loop1: detected capacity change from 0 to 1024 [ 42.347534][ T3657] syz.3.55 (3657) used greatest stack depth: 10296 bytes left [ 42.349262][ T3687] EXT4-fs: Ignoring removed bh option [ 42.378786][ T3687] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 42.419558][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.445745][ T3687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.461487][ T3687] FAULT_INJECTION: forcing a failure. [ 42.461487][ T3687] name failslab, interval 1, probability 0, space 0, times 0 [ 42.474186][ T3687] CPU: 0 UID: 0 PID: 3687 Comm: syz.1.62 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.474225][ T3687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 42.474262][ T3687] Call Trace: [ 42.474269][ T3687] [ 42.474278][ T3687] __dump_stack+0x1d/0x30 [ 42.474305][ T3687] dump_stack_lvl+0xe8/0x140 [ 42.474346][ T3687] dump_stack+0x15/0x1b [ 42.474368][ T3687] should_fail_ex+0x265/0x280 [ 42.474441][ T3687] should_failslab+0x8c/0xb0 [ 42.474476][ T3687] kmem_cache_alloc_noprof+0x50/0x480 [ 42.474523][ T3687] ? getname_flags+0x80/0x3b0 [ 42.474553][ T3687] getname_flags+0x80/0x3b0 [ 42.474585][ T3687] user_path_at+0x28/0x130 [ 42.474629][ T3687] do_sys_truncate+0x5c/0x130 [ 42.474763][ T3687] __x64_sys_truncate+0x31/0x40 [ 42.474797][ T3687] x64_sys_call+0x1a2f/0x3000 [ 42.474825][ T3687] do_syscall_64+0xd2/0x200 [ 42.474856][ T3687] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 42.474892][ T3687] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 42.474985][ T3687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.475006][ T3687] RIP: 0033:0x7f69e1dfefc9 [ 42.475021][ T3687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.475039][ T3687] RSP: 002b:00007f69e085f038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 42.475059][ T3687] RAX: ffffffffffffffda RBX: 00007f69e2055fa0 RCX: 00007f69e1dfefc9 [ 42.475075][ T3687] RDX: 0000000000000000 RSI: 0000000003000000 RDI: 0000200000000900 [ 42.475091][ T3687] RBP: 00007f69e085f090 R08: 0000000000000000 R09: 0000000000000000 [ 42.475128][ T3687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.475157][ T3687] R13: 00007f69e2056038 R14: 00007f69e2055fa0 R15: 00007ffe3d695618 [ 42.475182][ T3687] [ 42.752866][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.870087][ T29] kauditd_printk_skb: 427 callbacks suppressed [ 42.870103][ T29] audit: type=1400 audit(1760777154.282:516): avc: denied { relabelfrom } for pid=3711 comm="syz.4.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 42.896514][ T29] audit: type=1400 audit(1760777154.282:517): avc: denied { relabelto } for pid=3711 comm="syz.4.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 42.910868][ T3714] netlink: 'syz.4.70': attribute type 41 has an invalid length. [ 42.937727][ T3713] loop3: detected capacity change from 0 to 4096 [ 42.977090][ T3515] udevd[3515]: incorrect ext4 checksum on /dev/loop3 [ 42.984484][ T3713] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4635: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 42.985323][ T29] audit: type=1400 audit(1760777154.282:518): avc: denied { setopt } for pid=3711 comm="syz.4.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.998159][ T3713] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 43.056901][ T3515] udevd[3515]: incorrect ext4 checksum on /dev/loop3 [ 43.083225][ T29] audit: type=1400 audit(1760777154.482:519): avc: denied { setopt } for pid=3723 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.103227][ T29] audit: type=1400 audit(1760777154.492:520): avc: denied { write } for pid=3723 comm="syz.2.77" path="socket:[5338]" dev="sockfs" ino=5338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.134563][ T3706] mmap: syz.0.68 (3706) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.235509][ T29] audit: type=1400 audit(1760777154.642:521): avc: denied { kexec_image_load } for pid=3729 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 43.297543][ T29] audit: type=1400 audit(1760777154.682:522): avc: denied { create } for pid=3705 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 43.317163][ T29] audit: type=1400 audit(1760777154.682:523): avc: denied { connect } for pid=3705 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 43.356688][ T29] audit: type=1326 audit(1760777154.762:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.4.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5bd1efc9 code=0x7ffc0000 [ 43.403016][ T29] audit: type=1326 audit(1760777154.762:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.4.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f8c5bd1efc9 code=0x7ffc0000 [ 43.507080][ T3752] loop9: detected capacity change from 0 to 7 [ 43.531117][ T3752] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.541365][ C1] hrtimer: interrupt took 74490 ns [ 43.549866][ T3752] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.558006][ T3752] loop9: unable to read partition table [ 43.594459][ T3728] loop1: detected capacity change from 0 to 32768 [ 43.608712][ T3752] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 43.608712][ T3752] ) failed (rc=-5) [ 43.626914][ T3515] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.635591][ T3515] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.638117][ T3763] serio: Serial port ptm0 [ 43.644289][ T3515] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.667677][ T3305] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 43.673128][ T3305] loop1: p1 start 460800 is beyond EOD, truncated [ 43.679794][ T3305] loop1: p2 size 83886080 extends beyond EOD, truncated [ 43.686256][ T3515] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.695291][ T3305] loop1: p5 start 460800 is beyond EOD, truncated [ 43.702177][ T3305] loop1: p6 size 83886080 extends beyond EOD, truncated [ 43.723370][ T3515] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.734241][ T3728] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 43.739852][ T3728] loop1: p1 start 460800 is beyond EOD, truncated [ 43.746340][ T3728] loop1: p2 size 83886080 extends beyond EOD, truncated [ 43.768756][ T3728] loop1: p5 start 460800 is beyond EOD, truncated [ 43.775248][ T3728] loop1: p6 size 83886080 extends beyond EOD, truncated [ 43.786397][ T3770] FAULT_INJECTION: forcing a failure. [ 43.786397][ T3770] name failslab, interval 1, probability 0, space 0, times 0 [ 43.799308][ T3770] CPU: 1 UID: 0 PID: 3770 Comm: syz.3.92 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.799341][ T3770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 43.799358][ T3770] Call Trace: [ 43.799365][ T3770] [ 43.799374][ T3770] __dump_stack+0x1d/0x30 [ 43.799441][ T3770] dump_stack_lvl+0xe8/0x140 [ 43.799467][ T3770] dump_stack+0x15/0x1b [ 43.799487][ T3770] should_fail_ex+0x265/0x280 [ 43.799570][ T3770] should_failslab+0x8c/0xb0 [ 43.799626][ T3770] kmem_cache_alloc_noprof+0x50/0x480 [ 43.799663][ T3770] ? getname_flags+0x80/0x3b0 [ 43.799703][ T3770] getname_flags+0x80/0x3b0 [ 43.799800][ T3770] __se_sys_statx+0x5e/0x1b0 [ 43.799889][ T3770] ? vfs_write+0x7e8/0x960 [ 43.799913][ T3770] ? __rcu_read_unlock+0x4f/0x70 [ 43.799985][ T3770] ? __fget_files+0x184/0x1c0 [ 43.800019][ T3770] ? fput+0x8f/0xc0 [ 43.800052][ T3770] ? ksys_write+0x192/0x1a0 [ 43.800111][ T3770] __x64_sys_statx+0x67/0x80 [ 43.800157][ T3770] x64_sys_call+0x2cbc/0x3000 [ 43.800184][ T3770] do_syscall_64+0xd2/0x200 [ 43.800215][ T3770] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 43.800254][ T3770] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 43.800292][ T3770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.800321][ T3770] RIP: 0033:0x7fe11c1eefc9 [ 43.800337][ T3770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.800355][ T3770] RSP: 002b:00007fe11ac4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 43.800455][ T3770] RAX: ffffffffffffffda RBX: 00007fe11c445fa0 RCX: 00007fe11c1eefc9 [ 43.800472][ T3770] RDX: 0000000000006000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 43.800535][ T3770] RBP: 00007fe11ac4f090 R08: 0000000000000000 R09: 0000000000000000 [ 43.800551][ T3770] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 43.800568][ T3770] R13: 00007fe11c446038 R14: 00007fe11c445fa0 R15: 00007ffd4d96b5f8 [ 43.800594][ T3770] [ 44.108529][ T3537] udevd[3537]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 44.119988][ T3515] udevd[3515]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 44.137828][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 44.141255][ T3536] udevd[3536]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 44.233298][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 44.245198][ T3537] udevd[3537]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 44.264141][ T3536] udevd[3536]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 44.320989][ T3515] udevd[3515]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 44.415084][ T3794] __nla_validate_parse: 3 callbacks suppressed [ 44.415104][ T3794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.100'. [ 44.522516][ T3807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.105'. [ 44.551388][ T3812] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.662940][ T3823] netlink: 24 bytes leftover after parsing attributes in process `syz.4.103'. [ 44.692620][ T3825] netlink: 20 bytes leftover after parsing attributes in process `syz.1.111'. [ 44.740919][ T3825] netlink: '': attribute type 3 has an invalid length. [ 44.758807][ T3815] loop2: detected capacity change from 0 to 32768 [ 44.774950][ T3830] FAULT_INJECTION: forcing a failure. [ 44.774950][ T3830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.788166][ T3830] CPU: 1 UID: 0 PID: 3830 Comm: syz.4.113 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.788198][ T3830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 44.788262][ T3830] Call Trace: [ 44.788268][ T3830] [ 44.788276][ T3830] __dump_stack+0x1d/0x30 [ 44.788299][ T3830] dump_stack_lvl+0xe8/0x140 [ 44.788324][ T3830] dump_stack+0x15/0x1b [ 44.788345][ T3830] should_fail_ex+0x265/0x280 [ 44.788390][ T3830] should_fail+0xb/0x20 [ 44.788498][ T3830] should_fail_usercopy+0x1a/0x20 [ 44.788516][ T3830] _copy_from_user+0x1c/0xb0 [ 44.788539][ T3830] ___sys_sendmsg+0xc1/0x1d0 [ 44.788610][ T3830] __x64_sys_sendmsg+0xd4/0x160 [ 44.788641][ T3830] x64_sys_call+0x191e/0x3000 [ 44.788661][ T3830] do_syscall_64+0xd2/0x200 [ 44.788683][ T3830] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 44.788750][ T3830] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 44.788771][ T3830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.788790][ T3830] RIP: 0033:0x7f8c5bd1efc9 [ 44.788804][ T3830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.788820][ T3830] RSP: 002b:00007f8c5a787038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.788837][ T3830] RAX: ffffffffffffffda RBX: 00007f8c5bf75fa0 RCX: 00007f8c5bd1efc9 [ 44.788889][ T3830] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 44.788899][ T3830] RBP: 00007f8c5a787090 R08: 0000000000000000 R09: 0000000000000000 [ 44.788910][ T3830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.788920][ T3830] R13: 00007f8c5bf76038 R14: 00007f8c5bf75fa0 R15: 00007ffe6e0a1008 [ 44.788938][ T3830] [ 44.988143][ T3537] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 44.993564][ T3537] loop2: p1 start 460800 is beyond EOD, truncated [ 45.000184][ T3537] loop2: p2 size 83886080 extends beyond EOD, truncated [ 45.010524][ T3537] loop2: p5 start 460800 is beyond EOD, truncated [ 45.017080][ T3537] loop2: p6 size 83886080 extends beyond EOD, truncated [ 45.026380][ T3834] netlink: 76 bytes leftover after parsing attributes in process `syz.4.114'. [ 45.062444][ T3834] xt_CT: No such helper "netbios-ns" [ 45.079328][ T3815] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 45.084933][ T3815] loop2: p1 start 460800 is beyond EOD, truncated [ 45.091604][ T3815] loop2: p2 size 83886080 extends beyond EOD, truncated [ 45.105434][ T3815] loop2: p5 start 460800 is beyond EOD, truncated [ 45.111959][ T3815] loop2: p6 size 83886080 extends beyond EOD, truncated [ 45.197338][ T3844] loop5: detected capacity change from 0 to 6983 [ 45.236837][ T3537] Buffer I/O error on dev loop5, logical block 872, async page read [ 45.272759][ T3846] loop5: detected capacity change from 6983 to 8255 [ 45.295917][ T3537] udevd[3537]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 45.308454][ T3515] udevd[3515]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 45.352829][ T3305] Buffer I/O error on dev loop5, logical block 1031, async page read [ 45.638360][ T3855] xt_CT: No such helper "netbios-ns" [ 45.682138][ T3859] FAULT_INJECTION: forcing a failure. [ 45.682138][ T3859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.695354][ T3859] CPU: 1 UID: 0 PID: 3859 Comm: syz.3.121 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.695382][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 45.695397][ T3859] Call Trace: [ 45.695402][ T3859] [ 45.695408][ T3859] __dump_stack+0x1d/0x30 [ 45.695430][ T3859] dump_stack_lvl+0xe8/0x140 [ 45.695510][ T3859] dump_stack+0x15/0x1b [ 45.695528][ T3859] should_fail_ex+0x265/0x280 [ 45.695574][ T3859] should_fail+0xb/0x20 [ 45.695683][ T3859] should_fail_usercopy+0x1a/0x20 [ 45.695759][ T3859] _copy_from_user+0x1c/0xb0 [ 45.695792][ T3859] do_ip6t_set_ctl+0x3a9/0x840 [ 45.695824][ T3859] ? kstrtoull+0x111/0x140 [ 45.695861][ T3859] ? __rcu_read_unlock+0x4f/0x70 [ 45.695951][ T3859] nf_setsockopt+0x199/0x1b0 [ 45.695992][ T3859] ipv6_setsockopt+0x11a/0x130 [ 45.696066][ T3859] tcp_setsockopt+0x98/0xb0 [ 45.696097][ T3859] sock_common_setsockopt+0x69/0x80 [ 45.696126][ T3859] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 45.696185][ T3859] __sys_setsockopt+0x184/0x200 [ 45.696232][ T3859] __x64_sys_setsockopt+0x64/0x80 [ 45.696330][ T3859] x64_sys_call+0x20ec/0x3000 [ 45.696352][ T3859] do_syscall_64+0xd2/0x200 [ 45.696410][ T3859] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 45.696445][ T3859] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 45.696475][ T3859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.696580][ T3859] RIP: 0033:0x7fe11c1eefc9 [ 45.696599][ T3859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.696617][ T3859] RSP: 002b:00007fe11ac4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 45.696641][ T3859] RAX: ffffffffffffffda RBX: 00007fe11c445fa0 RCX: 00007fe11c1eefc9 [ 45.696654][ T3859] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 45.696665][ T3859] RBP: 00007fe11ac4f090 R08: 0000000000000408 R09: 0000000000000000 [ 45.696680][ T3859] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 45.696697][ T3859] R13: 00007fe11c446038 R14: 00007fe11c445fa0 R15: 00007ffd4d96b5f8 [ 45.696721][ T3859] [ 45.985915][ T3861] loop3: detected capacity change from 0 to 1024 [ 46.033804][ T3861] EXT4-fs: Ignoring removed bh option [ 46.040753][ T3865] netlink: 104 bytes leftover after parsing attributes in process `syz.4.125'. [ 46.054318][ T3861] EXT4-fs: dax option not supported [ 46.060749][ T3866] loop4: detected capacity change from 0 to 1024 [ 46.070239][ T3866] EXT4-fs: Ignoring removed orlov option [ 46.099026][ T3861] loop3: detected capacity change from 0 to 2048 [ 46.108104][ T3866] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.129928][ T3866] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e018, mo2=0000] [ 46.155485][ T3866] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.125: lblock 2 mapped to illegal pblock 2 (length 1) [ 46.171703][ T3866] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.125: lblock 0 mapped to illegal pblock 48 (length 1) [ 46.210862][ T3866] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.125: Failed to acquire dquot type 0 [ 46.234839][ T3866] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 46.247459][ T3861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.260998][ T3861] EXT4-fs (loop3): shut down requested (2) [ 46.269026][ T3866] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.125: mark_inode_dirty error [ 46.269614][ T3866] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 46.269713][ T3866] EXT4-fs (loop4): 1 orphan inode deleted [ 46.270330][ T3866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.285826][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.387510][ T158] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.396549][ T158] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 46.398583][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.410541][ T3312] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 46.410950][ T3312] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 46.411623][ T3312] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 46.504120][ T3883] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 46.507919][ T3883] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 46.518465][ T3884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.130'. [ 46.648037][ T3894] capability: warning: `syz.4.134' uses deprecated v2 capabilities in a way that may be insecure [ 46.689951][ T3899] loop1: detected capacity change from 0 to 1024 [ 46.690566][ T3899] EXT4-fs: inline encryption not supported [ 46.693485][ T3894] loop4: detected capacity change from 0 to 512 [ 46.703625][ T3894] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.134: inode has both inline data and extents flags [ 46.708598][ T3894] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.134: couldn't read orphan inode 15 (err -117) [ 46.709371][ T3894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.728929][ T3899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.788329][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.303166][ T3920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'. [ 47.467924][ T3925] FAULT_INJECTION: forcing a failure. [ 47.467924][ T3925] name failslab, interval 1, probability 0, space 0, times 0 [ 47.480674][ T3925] CPU: 0 UID: 0 PID: 3925 Comm: syz.3.143 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.480770][ T3925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 47.480787][ T3925] Call Trace: [ 47.480795][ T3925] [ 47.480805][ T3925] __dump_stack+0x1d/0x30 [ 47.480851][ T3925] dump_stack_lvl+0xe8/0x140 [ 47.480954][ T3925] dump_stack+0x15/0x1b [ 47.480982][ T3925] should_fail_ex+0x265/0x280 [ 47.481157][ T3925] ? vt_do_kdsk_ioctl+0x3e7/0x720 [ 47.481192][ T3925] should_failslab+0x8c/0xb0 [ 47.481293][ T3925] __kmalloc_cache_noprof+0x4c/0x4a0 [ 47.481327][ T3925] vt_do_kdsk_ioctl+0x3e7/0x720 [ 47.481356][ T3925] ? security_capable+0x83/0x90 [ 47.481394][ T3925] vt_ioctl+0x8e8/0x18a0 [ 47.481493][ T3925] ? tty_jobctrl_ioctl+0x29e/0x810 [ 47.481592][ T3925] tty_ioctl+0x7d8/0xb80 [ 47.481613][ T3925] ? __pfx_tty_ioctl+0x10/0x10 [ 47.481652][ T3925] __se_sys_ioctl+0xce/0x140 [ 47.481689][ T3925] __x64_sys_ioctl+0x43/0x50 [ 47.481714][ T3925] x64_sys_call+0x1816/0x3000 [ 47.481743][ T3925] do_syscall_64+0xd2/0x200 [ 47.481846][ T3925] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 47.481875][ T3925] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 47.481904][ T3925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.481956][ T3925] RIP: 0033:0x7fe11c1eefc9 [ 47.481981][ T3925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.482006][ T3925] RSP: 002b:00007fe11ac4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.482033][ T3925] RAX: ffffffffffffffda RBX: 00007fe11c445fa0 RCX: 00007fe11c1eefc9 [ 47.482046][ T3925] RDX: 0000200000000380 RSI: 0000000000004b47 RDI: 0000000000000003 [ 47.482096][ T3925] RBP: 00007fe11ac4f090 R08: 0000000000000000 R09: 0000000000000000 [ 47.482112][ T3925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.482129][ T3925] R13: 00007fe11c446038 R14: 00007fe11c445fa0 R15: 00007ffd4d96b5f8 [ 47.482154][ T3925] [ 47.716047][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.794396][ T3923] netlink: 'syz.0.142': attribute type 13 has an invalid length. [ 47.876155][ T3923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 47.909077][ T29] kauditd_printk_skb: 2015 callbacks suppressed [ 47.909103][ T29] audit: type=1326 audit(1760777159.312:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3910 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5bd1efc9 code=0x50000 [ 47.938793][ T29] audit: type=1326 audit(1760777159.312:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3910 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5bd1efc9 code=0x50000 [ 47.962282][ T29] audit: type=1326 audit(1760777159.312:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3910 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5bd1efc9 code=0x50000 [ 47.985593][ T29] audit: type=1326 audit(1760777159.312:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3910 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5bd1efc9 code=0x50000 [ 48.009168][ T29] audit: type=1326 audit(1760777159.312:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3910 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5bd1efc9 code=0x50000 [ 48.032271][ T29] audit: type=1326 audit(1760777159.312:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3910 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5bd1efc9 code=0x50000 [ 48.055498][ T29] audit: type=1326 audit(1760777159.312:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3910 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5bd1efc9 code=0x50000 [ 48.078639][ T29] audit: type=1326 audit(1760777159.312:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3910 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5bd1efc9 code=0x50000 [ 48.101847][ T29] audit: type=1326 audit(1760777159.312:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3910 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5bd1efc9 code=0x50000 [ 48.125030][ T29] audit: type=1326 audit(1760777159.312:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3910 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5bd1efc9 code=0x50000 [ 48.181682][ T3938] FAULT_INJECTION: forcing a failure. [ 48.181682][ T3938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.194890][ T3938] CPU: 0 UID: 0 PID: 3938 Comm: syz.3.147 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.194922][ T3938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 48.194937][ T3938] Call Trace: [ 48.194944][ T3938] [ 48.194953][ T3938] __dump_stack+0x1d/0x30 [ 48.195011][ T3938] dump_stack_lvl+0xe8/0x140 [ 48.195034][ T3938] dump_stack+0x15/0x1b [ 48.195052][ T3938] should_fail_ex+0x265/0x280 [ 48.195135][ T3938] should_fail+0xb/0x20 [ 48.195198][ T3938] should_fail_usercopy+0x1a/0x20 [ 48.195277][ T3938] _copy_from_user+0x1c/0xb0 [ 48.195311][ T3938] kstrtouint_from_user+0x69/0xf0 [ 48.195357][ T3938] ? 0xffffffff81000000 [ 48.195374][ T3938] ? selinux_file_permission+0x1e4/0x320 [ 48.195487][ T3938] proc_fail_nth_write+0x50/0x160 [ 48.195577][ T3938] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 48.195616][ T3938] vfs_write+0x269/0x960 [ 48.195650][ T3938] ? vfs_read+0x4e6/0x770 [ 48.195697][ T3938] ? __rcu_read_unlock+0x4f/0x70 [ 48.195729][ T3938] ? __fget_files+0x184/0x1c0 [ 48.195765][ T3938] ksys_write+0xda/0x1a0 [ 48.195796][ T3938] __x64_sys_write+0x40/0x50 [ 48.195826][ T3938] x64_sys_call+0x2802/0x3000 [ 48.195866][ T3938] do_syscall_64+0xd2/0x200 [ 48.195898][ T3938] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 48.195929][ T3938] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 48.195988][ T3938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.196044][ T3938] RIP: 0033:0x7fe11c1eda7f [ 48.196090][ T3938] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 48.196115][ T3938] RSP: 002b:00007fe11ac2e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 48.196163][ T3938] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe11c1eda7f [ 48.196177][ T3938] RDX: 0000000000000001 RSI: 00007fe11ac2e0a0 RDI: 0000000000000006 [ 48.196192][ T3938] RBP: 00007fe11ac2e090 R08: 0000000000000000 R09: 0000000000000000 [ 48.196207][ T3938] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 48.196222][ T3938] R13: 00007fe11c446128 R14: 00007fe11c446090 R15: 00007ffd4d96b5f8 [ 48.196246][ T3938] [ 48.440668][ T3941] loop2: detected capacity change from 0 to 512 [ 48.467542][ T3943] FAULT_INJECTION: forcing a failure. [ 48.467542][ T3943] name failslab, interval 1, probability 0, space 0, times 0 [ 48.468319][ T3941] EXT4-fs: Ignoring removed oldalloc option [ 48.480739][ T3943] CPU: 1 UID: 0 PID: 3943 Comm: syz.3.151 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.480787][ T3943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 48.480804][ T3943] Call Trace: [ 48.480811][ T3943] [ 48.480894][ T3943] __dump_stack+0x1d/0x30 [ 48.480936][ T3943] dump_stack_lvl+0xe8/0x140 [ 48.480962][ T3943] dump_stack+0x15/0x1b [ 48.480984][ T3943] should_fail_ex+0x265/0x280 [ 48.481102][ T3943] ? vt_do_kdsk_ioctl+0x3e7/0x720 [ 48.481204][ T3943] should_failslab+0x8c/0xb0 [ 48.481243][ T3943] __kmalloc_cache_noprof+0x4c/0x4a0 [ 48.481355][ T3943] vt_do_kdsk_ioctl+0x3e7/0x720 [ 48.481392][ T3943] ? security_capable+0x83/0x90 [ 48.481485][ T3943] vt_ioctl+0x8e8/0x18a0 [ 48.481511][ T3943] ? tty_jobctrl_ioctl+0x29e/0x810 [ 48.481560][ T3943] tty_ioctl+0x7d8/0xb80 [ 48.481636][ T3943] ? __pfx_tty_ioctl+0x10/0x10 [ 48.481696][ T3943] __se_sys_ioctl+0xce/0x140 [ 48.481782][ T3943] __x64_sys_ioctl+0x43/0x50 [ 48.481807][ T3943] x64_sys_call+0x1816/0x3000 [ 48.481838][ T3943] do_syscall_64+0xd2/0x200 [ 48.481887][ T3943] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 48.481926][ T3943] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 48.481959][ T3943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.481989][ T3943] RIP: 0033:0x7fe11c1eefc9 [ 48.482066][ T3943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.482092][ T3943] RSP: 002b:00007fe11ac4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.482119][ T3943] RAX: ffffffffffffffda RBX: 00007fe11c445fa0 RCX: 00007fe11c1eefc9 [ 48.482137][ T3943] RDX: 0000200000000380 RSI: 0000000000004b47 RDI: 0000000000000003 [ 48.482155][ T3943] RBP: 00007fe11ac4f090 R08: 0000000000000000 R09: 0000000000000000 [ 48.482170][ T3943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.482256][ T3943] R13: 00007fe11c446038 R14: 00007fe11c445fa0 R15: 00007ffd4d96b5f8 [ 48.482285][ T3943] [ 48.694010][ T3939] tipc: Started in network mode [ 48.694130][ T3939] tipc: Node identity 6efb6c02e92a, cluster identity 4711 [ 48.694244][ T3939] tipc: Enabled bearer , priority 0 [ 48.694814][ T3944] syzkaller0: entered promiscuous mode [ 48.719237][ T3944] syzkaller0: entered allmulticast mode [ 48.730127][ T3941] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 48.743359][ T3941] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.806770][ T3941] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 48.879139][ T3941] EXT4-fs (loop2): 1 truncate cleaned up [ 48.889700][ T3941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.026225][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.198003][ T3957] FAULT_INJECTION: forcing a failure. [ 49.198003][ T3957] name failslab, interval 1, probability 0, space 0, times 0 [ 49.210993][ T3957] CPU: 0 UID: 0 PID: 3957 Comm: syz.2.155 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.211060][ T3957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 49.211076][ T3957] Call Trace: [ 49.211084][ T3957] [ 49.211114][ T3957] __dump_stack+0x1d/0x30 [ 49.211137][ T3957] dump_stack_lvl+0xe8/0x140 [ 49.211156][ T3957] dump_stack+0x15/0x1b [ 49.211172][ T3957] should_fail_ex+0x265/0x280 [ 49.211244][ T3957] should_failslab+0x8c/0xb0 [ 49.211280][ T3957] __kvmalloc_node_noprof+0x12e/0x670 [ 49.211322][ T3957] ? nf_hook_entries_grow+0x1c1/0x460 [ 49.211424][ T3957] nf_hook_entries_grow+0x1c1/0x460 [ 49.211470][ T3957] __nf_register_net_hook+0x18e/0x480 [ 49.211513][ T3957] nf_register_net_hook+0x88/0x130 [ 49.211582][ T3957] nf_register_net_hooks+0x44/0x150 [ 49.211613][ T3957] nf_ct_netns_do_get+0x2b1/0x380 [ 49.211644][ T3957] nf_ct_netns_get+0x87/0xc0 [ 49.211700][ T3957] helper_mt_check+0x44/0xd0 [ 49.211742][ T3957] xt_check_match+0x2ad/0x4f0 [ 49.211768][ T3957] ? strnlen+0x28/0x50 [ 49.211801][ T3957] ? xt_find_match+0x1d1/0x210 [ 49.211876][ T3957] ? xt_find_match+0x1b5/0x210 [ 49.211926][ T3957] translate_table+0xa9c/0xf90 [ 49.211974][ T3957] ? _copy_from_user+0x89/0xb0 [ 49.212002][ T3957] do_ipt_set_ctl+0x66f/0x820 [ 49.212115][ T3957] ? _raw_spin_unlock_bh+0x36/0x40 [ 49.212145][ T3957] ? tcp_release_cb+0xf1/0x370 [ 49.212189][ T3957] nf_setsockopt+0x199/0x1b0 [ 49.212237][ T3957] ip_setsockopt+0x102/0x110 [ 49.212304][ T3957] tcp_setsockopt+0x98/0xb0 [ 49.212344][ T3957] sock_common_setsockopt+0x69/0x80 [ 49.212431][ T3957] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 49.212453][ T3957] __sys_setsockopt+0x184/0x200 [ 49.212493][ T3957] __x64_sys_setsockopt+0x64/0x80 [ 49.212524][ T3957] x64_sys_call+0x20ec/0x3000 [ 49.212553][ T3957] do_syscall_64+0xd2/0x200 [ 49.212586][ T3957] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 49.212692][ T3957] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 49.212746][ T3957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.212768][ T3957] RIP: 0033:0x7f04e301efc9 [ 49.212786][ T3957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.212821][ T3957] RSP: 002b:00007f04e1a87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 49.212846][ T3957] RAX: ffffffffffffffda RBX: 00007f04e3275fa0 RCX: 00007f04e301efc9 [ 49.212864][ T3957] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 49.212880][ T3957] RBP: 00007f04e1a87090 R08: 00000000000003f0 R09: 0000000000000000 [ 49.212897][ T3957] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000002 [ 49.212919][ T3957] R13: 00007f04e3276038 R14: 00007f04e3275fa0 R15: 00007ffef0916568 [ 49.212974][ T3957] [ 49.327575][ T3957] xt_helper: cannot load conntrack support for proto=2 [ 49.394901][ T3950] loop0: detected capacity change from 0 to 32768 [ 49.504916][ T3937] tipc: Resetting bearer [ 49.588077][ T3937] tipc: Disabling bearer [ 49.648104][ T3515] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 49.657861][ T3515] loop0: p1 start 460800 is beyond EOD, truncated [ 49.664332][ T3515] loop0: p2 size 83886080 extends beyond EOD, truncated [ 49.699989][ T3515] loop0: p5 start 460800 is beyond EOD, truncated [ 49.706486][ T3515] loop0: p6 size 83886080 extends beyond EOD, truncated [ 49.728774][ T3966] loop4: detected capacity change from 0 to 128 [ 49.806097][ T3966] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.819589][ T3966] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.884330][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.900518][ T3950] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 49.905906][ T3950] loop0: p1 start 460800 is beyond EOD, truncated [ 49.912493][ T3950] loop0: p2 size 83886080 extends beyond EOD, truncated [ 49.945911][ T3950] loop0: p5 start 460800 is beyond EOD, truncated [ 49.952517][ T3950] loop0: p6 size 83886080 extends beyond EOD, truncated [ 50.421818][ T3515] udevd[3515]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 50.440542][ T3536] udevd[3536]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 50.459084][ T3537] udevd[3537]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 50.470254][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 50.548464][ T3939] Set syz1 is full, maxelem 65536 reached [ 50.569337][ T3997] FAULT_INJECTION: forcing a failure. [ 50.569337][ T3997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.582544][ T3997] CPU: 0 UID: 0 PID: 3997 Comm: syz.4.168 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.582616][ T3997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 50.582629][ T3997] Call Trace: [ 50.582637][ T3997] [ 50.582646][ T3997] __dump_stack+0x1d/0x30 [ 50.582674][ T3997] dump_stack_lvl+0xe8/0x140 [ 50.582738][ T3997] dump_stack+0x15/0x1b [ 50.582760][ T3997] should_fail_ex+0x265/0x280 [ 50.582806][ T3997] should_fail+0xb/0x20 [ 50.582843][ T3997] should_fail_usercopy+0x1a/0x20 [ 50.582871][ T3997] strncpy_from_user+0x25/0x230 [ 50.582912][ T3997] ? kmem_cache_alloc_noprof+0x242/0x480 [ 50.582947][ T3997] ? getname_flags+0x80/0x3b0 [ 50.583053][ T3997] getname_flags+0xae/0x3b0 [ 50.583089][ T3997] __x64_sys_rename+0x40/0x70 [ 50.583121][ T3997] x64_sys_call+0x1f9/0x3000 [ 50.583230][ T3997] do_syscall_64+0xd2/0x200 [ 50.583258][ T3997] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 50.583295][ T3997] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 50.583323][ T3997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.583364][ T3997] RIP: 0033:0x7f8c5bd1efc9 [ 50.583380][ T3997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.583397][ T3997] RSP: 002b:00007f8c5a787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 50.583433][ T3997] RAX: ffffffffffffffda RBX: 00007f8c5bf75fa0 RCX: 00007f8c5bd1efc9 [ 50.583456][ T3997] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000000 [ 50.583473][ T3997] RBP: 00007f8c5a787090 R08: 0000000000000000 R09: 0000000000000000 [ 50.583489][ T3997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.583505][ T3997] R13: 00007f8c5bf76038 R14: 00007f8c5bf75fa0 R15: 00007ffe6e0a1008 [ 50.583556][ T3997] [ 50.778406][ T3980] loop3: detected capacity change from 0 to 32768 [ 50.809908][ T3516] udevd[3516]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 50.819045][ T3536] udevd[3536]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 50.834000][ T3515] udevd[3515]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 50.845107][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 50.868459][ T3537] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 50.878105][ T4005] loop0: detected capacity change from 0 to 128 [ 50.891303][ T3537] loop3: p1 start 460800 is beyond EOD, truncated [ 50.897897][ T3537] loop3: p2 size 83886080 extends beyond EOD, truncated [ 50.910546][ T4003] loop1: detected capacity change from 0 to 128 [ 50.922862][ T3537] loop3: p5 start 460800 is beyond EOD, truncated [ 50.929524][ T3537] loop3: p6 size 83886080 extends beyond EOD, truncated [ 50.950281][ T4003] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.974087][ T4012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.175'. [ 51.005320][ T4003] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 51.018134][ T3980] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 51.023562][ T3980] loop3: p1 start 460800 is beyond EOD, truncated [ 51.030091][ T3980] loop3: p2 size 83886080 extends beyond EOD, truncated [ 51.051613][ T3980] loop3: p5 start 460800 is beyond EOD, truncated [ 51.058118][ T3980] loop3: p6 size 83886080 extends beyond EOD, truncated [ 51.270416][ T4042] netlink: 24 bytes leftover after parsing attributes in process `syz.3.183'. [ 51.281803][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 51.288512][ T3536] udevd[3536]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 51.314272][ T4035] 9pnet_fd: Insufficient options for proto=fd [ 51.368585][ T4044] loop2: detected capacity change from 0 to 512 [ 51.388057][ T4044] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.434020][ T4044] EXT4-fs error (device loop2): __ext4_iget:5443: inode #11: block 1: comm syz.2.184: invalid block [ 51.458375][ T4044] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.184: couldn't read orphan inode 11 (err -117) [ 51.504808][ T4044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.555487][ T4051] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=4051 comm=syz.3.185 [ 51.571512][ T4044] unsupported nla_type 52263 [ 51.601241][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.622872][ T4051] sd 0:0:1:0: device reset [ 51.686143][ T4058] FAULT_INJECTION: forcing a failure. [ 51.686143][ T4058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.699321][ T4058] CPU: 0 UID: 0 PID: 4058 Comm: syz.2.190 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.699347][ T4058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 51.699363][ T4058] Call Trace: [ 51.699370][ T4058] [ 51.699378][ T4058] __dump_stack+0x1d/0x30 [ 51.699434][ T4058] dump_stack_lvl+0xe8/0x140 [ 51.699453][ T4058] dump_stack+0x15/0x1b [ 51.699469][ T4058] should_fail_ex+0x265/0x280 [ 51.699512][ T4058] should_fail+0xb/0x20 [ 51.699584][ T4058] should_fail_usercopy+0x1a/0x20 [ 51.699611][ T4058] strncpy_from_user+0x25/0x230 [ 51.699639][ T4058] ? kmem_cache_alloc_noprof+0x242/0x480 [ 51.699672][ T4058] ? getname_flags+0x80/0x3b0 [ 51.699810][ T4058] getname_flags+0xae/0x3b0 [ 51.699845][ T4058] user_path_at+0x28/0x130 [ 51.699889][ T4058] __se_sys_chroot+0x45/0x230 [ 51.699931][ T4058] __x64_sys_chroot+0x1f/0x30 [ 51.699967][ T4058] x64_sys_call+0x214f/0x3000 [ 51.699996][ T4058] do_syscall_64+0xd2/0x200 [ 51.700029][ T4058] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 51.700062][ T4058] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 51.700083][ T4058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.700169][ T4058] RIP: 0033:0x7f04e301efc9 [ 51.700185][ T4058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.700204][ T4058] RSP: 002b:00007f04e1a87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a1 [ 51.700229][ T4058] RAX: ffffffffffffffda RBX: 00007f04e3275fa0 RCX: 00007f04e301efc9 [ 51.700245][ T4058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 51.700262][ T4058] RBP: 00007f04e1a87090 R08: 0000000000000000 R09: 0000000000000000 [ 51.700278][ T4058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.700294][ T4058] R13: 00007f04e3276038 R14: 00007f04e3275fa0 R15: 00007ffef0916568 [ 51.700324][ T4058] [ 52.159444][ T4085] loop4: detected capacity change from 0 to 512 [ 52.170002][ T4087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 52.177261][ T4087] IPv6: NLM_F_CREATE should be set when creating new route [ 52.184585][ T4087] IPv6: NLM_F_CREATE should be set when creating new route [ 52.193264][ T4085] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.200008][ T4085] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.206807][ T4085] ext4: Bad value for 'resgid' [ 52.211779][ T4085] ext4: Bad value for 'resgid' [ 52.217129][ T4087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 52.354291][ T4069] loop0: detected capacity change from 0 to 32768 [ 52.420178][ T4105] loop3: detected capacity change from 0 to 512 [ 52.426953][ T4105] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.450071][ T4069] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 52.455641][ T4069] loop0: p1 start 460800 is beyond EOD, truncated [ 52.462290][ T4069] loop0: p2 size 83886080 extends beyond EOD, truncated [ 52.472205][ T4111] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 52.483247][ T4105] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.492594][ T4069] loop0: p5 start 460800 is beyond EOD, truncated [ 52.499130][ T4069] loop0: p6 size 83886080 extends beyond EOD, truncated [ 52.512752][ T4111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.533358][ T4111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.544872][ T3002] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 52.550687][ T3002] loop0: p1 start 460800 is beyond EOD, truncated [ 52.557163][ T3002] loop0: p2 size 83886080 extends beyond EOD, truncated [ 52.564851][ T4118] loop1: detected capacity change from 0 to 256 [ 52.571976][ T4105] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.575130][ T3002] loop0: p5 start 460800 is beyond EOD, truncated [ 52.580571][ T4105] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.586911][ T3002] loop0: p6 size 83886080 extends beyond EOD, truncated [ 52.613993][ T4120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.209'. [ 52.631789][ T4105] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.204: Allocating blocks 41-42 which overlap fs metadata [ 52.686085][ T4105] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.204: Allocating blocks 41-42 which overlap fs metadata [ 52.707003][ T3316] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 52.714966][ T3316] FAT-fs (loop1): Filesystem has been set read-only [ 52.723415][ T4105] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.204: Failed to acquire dquot type 1 [ 52.735048][ T4126] loop4: detected capacity change from 0 to 1024 [ 52.742410][ T3316] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 52.745991][ T4105] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 52.764824][ T4105] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.204: corrupted inode contents [ 52.778002][ T4105] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #12: comm syz.3.204: mark_inode_dirty error [ 52.819699][ T4126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.840088][ T4130] FAULT_INJECTION: forcing a failure. [ 52.840088][ T4130] name failslab, interval 1, probability 0, space 0, times 0 [ 52.853044][ T4130] CPU: 0 UID: 0 PID: 4130 Comm: syz.0.212 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.853146][ T4130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 52.853162][ T4130] Call Trace: [ 52.853170][ T4130] [ 52.853179][ T4130] __dump_stack+0x1d/0x30 [ 52.853206][ T4130] dump_stack_lvl+0xe8/0x140 [ 52.853250][ T4130] dump_stack+0x15/0x1b [ 52.853266][ T4130] should_fail_ex+0x265/0x280 [ 52.853432][ T4130] should_failslab+0x8c/0xb0 [ 52.853470][ T4130] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 52.853510][ T4130] ? alloc_workqueue_noprof+0x505/0x1330 [ 52.853622][ T4130] alloc_workqueue_noprof+0x505/0x1330 [ 52.853664][ T4130] ? dev_set_name+0x83/0xb0 [ 52.853707][ T4130] hci_register_dev+0x1a7/0x570 [ 52.853785][ T4130] hci_uart_tty_ioctl+0x520/0x5c0 [ 52.853855][ T4130] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 52.853894][ T4130] tty_ioctl+0x83f/0xb80 [ 52.853917][ T4130] ? __pfx_tty_ioctl+0x10/0x10 [ 52.853938][ T4130] __se_sys_ioctl+0xce/0x140 [ 52.853985][ T4130] __x64_sys_ioctl+0x43/0x50 [ 52.854010][ T4130] x64_sys_call+0x1816/0x3000 [ 52.854114][ T4130] do_syscall_64+0xd2/0x200 [ 52.854139][ T4130] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 52.854171][ T4130] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 52.854201][ T4130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.854265][ T4130] RIP: 0033:0x7fed1219efc9 [ 52.854286][ T4130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.854310][ T4130] RSP: 002b:00007fed10bff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.854335][ T4130] RAX: ffffffffffffffda RBX: 00007fed123f5fa0 RCX: 00007fed1219efc9 [ 52.854352][ T4130] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 52.854369][ T4130] RBP: 00007fed10bff090 R08: 0000000000000000 R09: 0000000000000000 [ 52.854386][ T4130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.854473][ T4130] R13: 00007fed123f6038 R14: 00007fed123f5fa0 R15: 00007fff3e9c6e38 [ 52.854499][ T4130] [ 52.856537][ T4130] Bluetooth: Can't register HCI device [ 52.897353][ T4105] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.204: corrupted inode contents [ 53.067296][ T29] kauditd_printk_skb: 3959 callbacks suppressed [ 53.067348][ T29] audit: type=1400 audit(2000000002.790:6503): avc: denied { read } for pid=4131 comm="syz.0.214" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 53.095966][ T4105] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.204: mark_inode_dirty error [ 53.113559][ T29] audit: type=1400 audit(2000000002.790:6504): avc: denied { open } for pid=4131 comm="syz.0.214" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 53.116530][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.125245][ T29] audit: type=1400 audit(2000000002.800:6505): avc: denied { write } for pid=4131 comm="syz.0.214" name="snmp" dev="proc" ino=4026532540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 53.176962][ T4105] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.204: corrupted inode contents [ 53.181211][ T29] audit: type=1400 audit(2000000002.820:6506): avc: denied { ioctl } for pid=4131 comm="syz.0.214" path="/newroot/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 53.194659][ T4105] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 53.271984][ T4105] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.204: corrupted inode contents [ 53.300204][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.310910][ T4105] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.204: mark_inode_dirty error [ 53.318285][ T29] audit: type=1400 audit(2000000003.040:6507): avc: denied { mount } for pid=4135 comm="syz.4.213" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 53.332335][ T4105] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 53.343888][ T29] audit: type=1400 audit(2000000003.040:6508): avc: denied { mounton } for pid=4135 comm="syz.4.213" path="/41/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 53.407324][ T4146] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4146 comm=syz.4.221 [ 53.419846][ T4105] EXT4-fs (loop3): 1 truncate cleaned up [ 53.426018][ T4105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.439723][ T4146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.221'. [ 53.461576][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.477545][ T29] audit: type=1400 audit(2000000003.110:6509): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 53.497530][ T29] audit: type=1400 audit(2000000003.130:6510): avc: denied { nlmsg_write } for pid=4145 comm="syz.4.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 53.518282][ T29] audit: type=1400 audit(2000000003.170:6511): avc: denied { execmem } for pid=4144 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.540422][ T29] audit: type=1400 audit(2000000003.260:6512): avc: denied { mounton } for pid=4154 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.576633][ T4153] loop0: detected capacity change from 0 to 1024 [ 53.603472][ T4153] EXT4-fs: Ignoring removed orlov option [ 53.609105][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.609479][ T4153] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.631527][ T4105] EXT4-fs (loop3): shut down requested (1) [ 53.687408][ T4105] syz.3.204 (4105) used greatest stack depth: 9952 bytes left [ 53.697300][ T4153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.700686][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.721464][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.733990][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.796534][ T4174] loop0: detected capacity change from 0 to 512 [ 53.829150][ T4174] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.835693][ T4174] EXT4-fs: quotafile must be on filesystem root [ 53.852418][ T4181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 53.879398][ T4181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 53.939867][ T4181] bridge1: entered promiscuous mode [ 53.996523][ T12] bridge_slave_1: left allmulticast mode [ 54.002715][ T12] bridge_slave_1: left promiscuous mode [ 54.008494][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.035360][ T12] bridge_slave_0: left allmulticast mode [ 54.041123][ T12] bridge_slave_0: left promiscuous mode [ 54.046824][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.116492][ T4195] loop2: detected capacity change from 0 to 2048 [ 54.187832][ T4195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.200143][ T4195] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.270256][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.356478][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.377382][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.381026][ T12] bond0 (unregistering): Released all slaves [ 54.508840][ T4207] loop3: detected capacity change from 0 to 2048 [ 54.529940][ T4207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.547974][ T4207] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.559788][ T12] tipc: Left network mode [ 54.584746][ T12] hsr_slave_0: left promiscuous mode [ 54.608665][ T12] hsr_slave_1: left promiscuous mode [ 54.618423][ T4207] FAULT_INJECTION: forcing a failure. [ 54.618423][ T4207] name failslab, interval 1, probability 0, space 0, times 0 [ 54.631172][ T4207] CPU: 0 UID: 0 PID: 4207 Comm: syz.3.239 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.631273][ T4207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 54.631290][ T4207] Call Trace: [ 54.631298][ T4207] [ 54.631306][ T4207] __dump_stack+0x1d/0x30 [ 54.631336][ T4207] dump_stack_lvl+0xe8/0x140 [ 54.631356][ T4207] dump_stack+0x15/0x1b [ 54.631409][ T4207] should_fail_ex+0x265/0x280 [ 54.631453][ T4207] ? rds_cong_from_addr+0x38/0x2c0 [ 54.631490][ T4207] should_failslab+0x8c/0xb0 [ 54.631579][ T4207] __kmalloc_cache_noprof+0x4c/0x4a0 [ 54.631612][ T4207] rds_cong_from_addr+0x38/0x2c0 [ 54.631646][ T4207] ? __slab_alloc+0x25/0x50 [ 54.631737][ T4207] rds_cong_get_maps+0x1a/0x70 [ 54.631779][ T4207] __rds_conn_create+0x536/0x1040 [ 54.631830][ T4207] rds_conn_create_outgoing+0x43/0x60 [ 54.631943][ T4207] rds_sendmsg+0xbd2/0x14a0 [ 54.631976][ T4207] ? __pfx_rds_sendmsg+0x10/0x10 [ 54.632022][ T4207] __sock_sendmsg+0x145/0x180 [ 54.632044][ T4207] ____sys_sendmsg+0x31e/0x4e0 [ 54.632236][ T4207] ___sys_sendmsg+0x17b/0x1d0 [ 54.632289][ T4207] __x64_sys_sendmsg+0xd4/0x160 [ 54.632336][ T4207] x64_sys_call+0x191e/0x3000 [ 54.632435][ T4207] do_syscall_64+0xd2/0x200 [ 54.632462][ T4207] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 54.632489][ T4207] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 54.632515][ T4207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.632571][ T4207] RIP: 0033:0x7fe11c1eefc9 [ 54.632591][ T4207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.632664][ T4207] RSP: 002b:00007fe11ac2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.632689][ T4207] RAX: ffffffffffffffda RBX: 00007fe11c446090 RCX: 00007fe11c1eefc9 [ 54.632701][ T4207] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000009 [ 54.632714][ T4207] RBP: 00007fe11ac2e090 R08: 0000000000000000 R09: 0000000000000000 [ 54.632726][ T4207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.632761][ T4207] R13: 00007fe11c446128 R14: 00007fe11c446090 R15: 00007ffd4d96b5f8 [ 54.632786][ T4207] [ 54.855758][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.863209][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.885162][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.892732][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.920432][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.947062][ T12] veth1_macvtap: left promiscuous mode [ 54.985629][ T12] veth0_macvtap: left promiscuous mode [ 55.001047][ T12] veth1_vlan: left promiscuous mode [ 55.009247][ T12] veth0_vlan: left promiscuous mode [ 55.015557][ T4230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.243'. [ 55.042702][ T4230] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.165712][ T12] team0 (unregistering): Port device team_slave_1 removed [ 55.183668][ T12] team0 (unregistering): Port device team_slave_0 removed [ 55.331463][ T4154] chnl_net:caif_netlink_parms(): no params data found [ 55.469224][ T4154] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.476353][ T4154] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.503869][ T4154] bridge_slave_0: entered allmulticast mode [ 55.510656][ T4154] bridge_slave_0: entered promiscuous mode [ 55.560644][ T4154] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.567821][ T4154] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.609619][ T4154] bridge_slave_1: entered allmulticast mode [ 55.630955][ T4154] bridge_slave_1: entered promiscuous mode [ 55.682044][ T4257] loop0: detected capacity change from 0 to 512 [ 55.691809][ T4154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.727010][ T4154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.768020][ T4257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.836429][ T4154] team0: Port device team_slave_0 added [ 55.882158][ T4154] team0: Port device team_slave_1 added [ 55.894171][ T4257] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.927842][ T4154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.934903][ T4154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.961024][ T4154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.177602][ T4154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.184622][ T4154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.210694][ T4154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.418450][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.459398][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.529008][ T4154] hsr_slave_0: entered promiscuous mode [ 56.543966][ T4154] hsr_slave_1: entered promiscuous mode [ 56.556814][ T4154] debugfs: 'hsr0' already exists in 'hsr' [ 56.562937][ T4154] Cannot create hsr debugfs directory [ 56.581623][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.614608][ T4215] chnl_net:caif_netlink_parms(): no params data found [ 56.668748][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.748666][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.854649][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.861955][ T4215] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.887702][ T4215] bridge_slave_0: entered allmulticast mode [ 56.894440][ T4215] bridge_slave_0: entered promiscuous mode [ 56.910433][ T4215] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.917568][ T4215] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.927678][ T4215] bridge_slave_1: entered allmulticast mode [ 56.934394][ T4215] bridge_slave_1: entered promiscuous mode [ 56.993821][ T4215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.024852][ T4215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.083194][ T4215] team0: Port device team_slave_0 added [ 57.105641][ T4323] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 57.109300][ T4215] team0: Port device team_slave_1 added [ 57.152861][ T12] bridge_slave_1: left allmulticast mode [ 57.158709][ T12] bridge_slave_1: left promiscuous mode [ 57.164454][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.190528][ T12] bridge_slave_0: left allmulticast mode [ 57.196230][ T12] bridge_slave_0: left promiscuous mode [ 57.201967][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.351128][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.373793][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.397545][ T12] bond0 (unregistering): Released all slaves [ 57.422220][ T4215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.429218][ T4215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.455242][ T4215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.455831][ T4327] loop2: detected capacity change from 0 to 32768 [ 57.492043][ T4215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.499164][ T4215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.525104][ T4215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.552118][ T12] hsr_slave_0: left promiscuous mode [ 57.558308][ T4327] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 57.563793][ T4327] loop2: p1 start 460800 is beyond EOD, truncated [ 57.570269][ T4327] loop2: p2 size 83886080 extends beyond EOD, truncated [ 57.580355][ T12] hsr_slave_1: left promiscuous mode [ 57.586182][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.593722][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.595914][ T4327] loop2: p5 start 460800 is beyond EOD, truncated [ 57.607482][ T4327] loop2: p6 size 83886080 extends beyond EOD, truncated [ 57.615150][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.622730][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.635327][ T12] veth1_macvtap: left promiscuous mode [ 57.641331][ T12] veth0_macvtap: left promiscuous mode [ 57.743274][ T12] team0 (unregistering): Port device team_slave_1 removed [ 57.754031][ T12] team0 (unregistering): Port device team_slave_0 removed [ 57.833706][ T4154] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 57.850026][ T4154] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 57.862910][ T3537] udevd[3537]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 57.864414][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 57.886120][ T3515] udevd[3515]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 57.914167][ T4215] hsr_slave_0: entered promiscuous mode [ 57.935196][ T4215] hsr_slave_1: entered promiscuous mode [ 57.948467][ T4215] debugfs: 'hsr0' already exists in 'hsr' [ 57.954324][ T4215] Cannot create hsr debugfs directory [ 57.960056][ T4154] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 57.979942][ T4154] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 58.163822][ T4154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.189690][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 58.189708][ T29] audit: type=1400 audit(2000000007.920:6798): avc: denied { bind } for pid=4340 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.235737][ T4154] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.251580][ T4215] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 58.283640][ T4215] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 58.296111][ T4215] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 58.310673][ T4215] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 58.342811][ T1572] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.350002][ T1572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.365086][ T2635] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.372220][ T2635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.512938][ T4215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.549708][ T4215] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.581049][ T2635] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.588197][ T2635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.620845][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.627968][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.666473][ T4154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.869024][ T4215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.084089][ T4154] veth0_vlan: entered promiscuous mode [ 59.111455][ T4154] veth1_vlan: entered promiscuous mode [ 59.167200][ T4154] veth0_macvtap: entered promiscuous mode [ 59.178925][ T4154] veth1_macvtap: entered promiscuous mode [ 59.220559][ T4154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.245291][ T4215] veth0_vlan: entered promiscuous mode [ 59.268669][ T4154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.278803][ T4215] veth1_vlan: entered promiscuous mode [ 59.313239][ T2635] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.339057][ T2635] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.363343][ T2635] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.385463][ T29] audit: type=1400 audit(2000000009.110:6799): avc: denied { mounton } for pid=4154 comm="syz-executor" path="/root/syzkaller.pDS3ij/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 59.387787][ T2635] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.410059][ T29] audit: type=1400 audit(2000000009.110:6800): avc: denied { mount } for pid=4154 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.423119][ T4215] veth0_macvtap: entered promiscuous mode [ 59.440829][ T29] audit: type=1400 audit(2000000009.110:6801): avc: denied { mounton } for pid=4154 comm="syz-executor" path="/root/syzkaller.pDS3ij/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 59.473309][ T29] audit: type=1400 audit(2000000009.110:6802): avc: denied { mounton } for pid=4154 comm="syz-executor" path="/root/syzkaller.pDS3ij/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 59.488149][ T4215] veth1_macvtap: entered promiscuous mode [ 59.544980][ T4215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.565095][ T4428] loop2: detected capacity change from 0 to 2048 [ 59.575112][ T4215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.607878][ T2635] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.624179][ T4428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.657354][ T2635] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.703852][ T2635] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.726252][ T4436] netlink: 12 bytes leftover after parsing attributes in process `syz.5.220'. [ 59.736045][ T2635] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.755797][ T29] audit: type=1400 audit(2000000009.240:6803): avc: denied { mounton } for pid=4154 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 59.778892][ T29] audit: type=1400 audit(2000000009.240:6804): avc: denied { mount } for pid=4154 comm="syz-executor" name="/" dev="gadgetfs" ino=4764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 59.801641][ T29] audit: type=1400 audit(2000000009.420:6805): avc: denied { read } for pid=4426 comm="syz.2.254" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 59.824897][ T29] audit: type=1400 audit(2000000009.420:6806): avc: denied { open } for pid=4426 comm="syz.2.254" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 59.873904][ T29] audit: type=1400 audit(2000000009.480:6807): avc: denied { ioctl } for pid=4426 comm="syz.2.254" path="socket:[8059]" dev="sockfs" ino=8059 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.167590][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.176443][ T4478] Driver unsupported XDP return value 0 on prog (id 278) dev N/A, expect packet loss! [ 61.284316][ T4487] loop6: detected capacity change from 0 to 512 [ 61.304522][ T4490] netlink: 12 bytes leftover after parsing attributes in process `syz.5.266'. [ 61.343900][ T4487] EXT4-fs: Ignoring removed oldalloc option [ 61.349967][ T4487] EXT4-fs: inline encryption not supported [ 61.355857][ T4487] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.386048][ T4487] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.437344][ T4487] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.265: bg 0: block 64: padding at end of block bitmap is not set [ 61.460749][ T4502] netlink: 16 bytes leftover after parsing attributes in process `syz.5.270'. [ 61.500391][ T4487] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.265: Failed to acquire dquot type 0 [ 61.546488][ T4485] loop2: detected capacity change from 0 to 32768 [ 61.556766][ T4487] EXT4-fs (loop6): 1 truncate cleaned up [ 61.566383][ T3515] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 61.571914][ T3515] loop2: p1 start 460800 is beyond EOD, truncated [ 61.578481][ T3515] loop2: p2 size 83886080 extends beyond EOD, truncated [ 61.592470][ T3515] loop2: p5 start 460800 is beyond EOD, truncated [ 61.598997][ T3515] loop2: p6 size 83886080 extends beyond EOD, truncated [ 61.613246][ T4487] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.631842][ T4485] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 61.644125][ T4485] loop2: p1 start 460800 is beyond EOD, truncated [ 61.650649][ T4485] loop2: p2 size 83886080 extends beyond EOD, truncated [ 61.707737][ T4485] loop2: p5 start 460800 is beyond EOD, truncated [ 61.714307][ T4485] loop2: p6 size 83886080 extends beyond EOD, truncated [ 61.754884][ T4487] syz.6.265 (4487) used greatest stack depth: 9456 bytes left [ 61.810806][ T4215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.819963][ T4497] loop0: detected capacity change from 0 to 32768 [ 61.868911][ T3537] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 61.879726][ T3537] loop0: p1 start 460800 is beyond EOD, truncated [ 61.886196][ T3537] loop0: p2 size 83886080 extends beyond EOD, truncated [ 61.930258][ T4515] loop6: detected capacity change from 0 to 164 [ 61.943292][ T3537] loop0: p5 start 460800 is beyond EOD, truncated [ 61.949798][ T3537] loop0: p6 size 83886080 extends beyond EOD, truncated [ 61.983813][ T4515] 9pnet_fd: Insufficient options for proto=fd [ 61.996007][ T4497] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 62.008206][ T4497] loop0: p1 start 460800 is beyond EOD, truncated [ 62.014746][ T4497] loop0: p2 size 83886080 extends beyond EOD, truncated [ 62.085271][ T4497] loop0: p5 start 460800 is beyond EOD, truncated [ 62.091811][ T4497] loop0: p6 size 83886080 extends beyond EOD, truncated [ 62.246576][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 62.271151][ T3515] udevd[3515]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 62.334020][ T3515] udevd[3515]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 62.346120][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 62.435993][ T3515] udevd[3515]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 62.447583][ T3536] udevd[3536]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 62.459054][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 62.501724][ T4540] netlink: 12 bytes leftover after parsing attributes in process `syz.6.279'. [ 62.531499][ T4542] netlink: 'syz.2.281': attribute type 3 has an invalid length. [ 62.619815][ T4546] loop5: detected capacity change from 0 to 128 [ 62.655062][ T4546] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.655770][ T4552] loop6: detected capacity change from 0 to 1024 [ 62.694836][ T4552] EXT4-fs: Ignoring removed bh option [ 62.709984][ T4552] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 62.734712][ T12] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.745895][ T4552] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.900463][ T4215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.932134][ T4571] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.973582][ T4571] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.991225][ T4574] netlink: 64 bytes leftover after parsing attributes in process `syz.5.288'. [ 63.108848][ T4576] loop5: detected capacity change from 0 to 512 [ 63.182443][ T4576] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.487719][ T4571] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.772299][ T4573] loop6: detected capacity change from 0 to 8192 [ 63.823147][ T4571] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.987379][ T1572] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.010675][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 64.010693][ T29] audit: type=1400 audit(2000000013.740:6901): avc: denied { remount } for pid=4570 comm="syz.6.290" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 64.050029][ T4591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.294'. [ 64.069302][ T1572] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.082755][ T4592] pim6reg: entered allmulticast mode [ 64.086906][ T29] audit: type=1400 audit(2000000013.810:6902): avc: denied { ioctl } for pid=4570 comm="syz.6.290" path="socket:[9018]" dev="sockfs" ino=9018 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.114731][ T4154] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.115110][ T4592] pim6reg: left allmulticast mode [ 64.132120][ T1572] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.248939][ T1572] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.305057][ T4598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'. [ 64.320498][ T29] audit: type=1400 audit(2000000014.050:6903): avc: denied { write } for pid=4596 comm="syz.5.295" path="socket:[9334]" dev="sockfs" ino=9334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.349586][ T29] audit: type=1400 audit(2000000014.080:6904): avc: denied { associate } for pid=4595 comm="syz.0.297" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.438587][ T4601] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 64.578817][ T4610] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 64.682204][ T29] audit: type=1326 audit(2000000014.410:6905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4615 comm="syz.6.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2e21efc9 code=0x7ffc0000 [ 64.709440][ T4617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=4617 comm=syz.2.301 [ 64.758008][ T29] audit: type=1326 audit(2000000014.410:6906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4615 comm="syz.6.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2e21efc9 code=0x7ffc0000 [ 64.781396][ T29] audit: type=1326 audit(2000000014.410:6907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4615 comm="syz.6.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac2e21efc9 code=0x7ffc0000 [ 64.804893][ T29] audit: type=1326 audit(2000000014.410:6908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4615 comm="syz.6.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2e21efc9 code=0x7ffc0000 [ 64.828581][ T29] audit: type=1326 audit(2000000014.410:6909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4615 comm="syz.6.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2e21efc9 code=0x7ffc0000 [ 64.851976][ T29] audit: type=1326 audit(2000000014.430:6910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4615 comm="syz.6.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fac2e21efc9 code=0x7ffc0000 [ 64.984440][ T3305] printk: udevd: 17 output lines suppressed due to ratelimiting [ 65.361035][ T4639] team0: Port device team_slave_0 removed [ 65.663550][ T4653] process 'gtp' launched './file0' with NULL argv: empty string added [ 66.255980][ T4669] lo speed is unknown, defaulting to 1000 [ 66.262002][ T4671] netlink: 'syz.5.327': attribute type 12 has an invalid length. [ 66.270361][ T4669] lo speed is unknown, defaulting to 1000 [ 66.309782][ T4669] lo speed is unknown, defaulting to 1000 [ 66.320429][ T4669] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 66.335484][ T4685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.332'. [ 66.365676][ T4684] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20001 [ 66.375601][ T4682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.332'. [ 66.405413][ T4685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.416930][ T4669] lo speed is unknown, defaulting to 1000 [ 66.423535][ T4669] lo speed is unknown, defaulting to 1000 [ 66.429855][ T4685] loop2: detected capacity change from 0 to 164 [ 66.430102][ T4669] lo speed is unknown, defaulting to 1000 [ 66.442743][ T4669] lo speed is unknown, defaulting to 1000 [ 66.449455][ T4669] lo speed is unknown, defaulting to 1000 [ 66.499256][ T4698] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 66.528185][ T4700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 66.559268][ T4700] lo speed is unknown, defaulting to 1000 [ 66.682511][ T4717] loop0: detected capacity change from 0 to 1024 [ 66.690038][ T4717] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.703607][ T4717] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 66.724202][ T4717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.746678][ T4720] SELinux: Context system_u:object_r:dhcpd_state_t:s0 is not valid (left unmapped). [ 66.774064][ T4725] FAULT_INJECTION: forcing a failure. [ 66.774064][ T4725] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 66.787512][ T4725] CPU: 0 UID: 0 PID: 4725 Comm: syz.2.348 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.787549][ T4725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 66.787562][ T4725] Call Trace: [ 66.787568][ T4725] [ 66.787574][ T4725] __dump_stack+0x1d/0x30 [ 66.787608][ T4725] dump_stack_lvl+0xe8/0x140 [ 66.787635][ T4725] dump_stack+0x15/0x1b [ 66.787655][ T4725] should_fail_ex+0x265/0x280 [ 66.787699][ T4725] should_fail_alloc_page+0xf2/0x100 [ 66.787799][ T4725] __alloc_frozen_pages_noprof+0xff/0x360 [ 66.787838][ T4725] alloc_pages_mpol+0xb3/0x260 [ 66.787933][ T4725] alloc_pages_noprof+0x90/0x130 [ 66.787955][ T4725] __pmd_alloc+0x47/0x420 [ 66.787984][ T4725] handle_mm_fault+0x19d4/0x2be0 [ 66.788014][ T4725] ? check_vma_flags+0x26e/0x340 [ 66.788039][ T4725] __get_user_pages+0x102a/0x1ed0 [ 66.788133][ T4725] get_user_pages_remote+0x1d5/0x6c0 [ 66.788180][ T4725] ? down_read+0x77/0xe0 [ 66.788208][ T4725] get_arg_page+0x8e/0x1e0 [ 66.788302][ T4725] copy_string_kernel+0x12c/0x1f0 [ 66.788329][ T4725] do_execveat_common+0x5ad/0x750 [ 66.788353][ T4725] ? getname_flags+0x154/0x3b0 [ 66.788385][ T4725] __x64_sys_execveat+0x73/0x90 [ 66.788428][ T4725] x64_sys_call+0x1fec/0x3000 [ 66.788455][ T4725] do_syscall_64+0xd2/0x200 [ 66.788479][ T4725] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.788506][ T4725] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 66.788530][ T4725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.788627][ T4725] RIP: 0033:0x7f04e301efc9 [ 66.788647][ T4725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.788665][ T4725] RSP: 002b:00007f04e1a87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 66.788683][ T4725] RAX: ffffffffffffffda RBX: 00007f04e3275fa0 RCX: 00007f04e301efc9 [ 66.788698][ T4725] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 66.788714][ T4725] RBP: 00007f04e1a87090 R08: 0000000000000000 R09: 0000000000000000 [ 66.788730][ T4725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.788802][ T4725] R13: 00007f04e3276038 R14: 00007f04e3275fa0 R15: 00007ffef0916568 [ 66.788825][ T4725] [ 67.137108][ T4732] IPv6: NLM_F_CREATE should be specified when creating new route [ 67.157963][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.272297][ T4740] team0: Port device team_slave_0 removed [ 67.297481][ T4742] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 67.320642][ T4737] lo speed is unknown, defaulting to 1000 [ 67.460795][ T4753] IPv6: sit1: Disabled Multicast RS [ 67.488648][ T4755] loop0: detected capacity change from 0 to 512 [ 67.543052][ T4760] loop3: detected capacity change from 0 to 1024 [ 67.584755][ T4755] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0. [ 67.628017][ T4760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.666207][ T4777] loop2: detected capacity change from 0 to 1024 [ 67.683122][ T4777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.689442][ T4760] vlan2: entered allmulticast mode [ 67.714873][ T4780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.366'. [ 67.746707][ T4779] geneve1: entered promiscuous mode [ 67.752170][ T4779] geneve1: entered allmulticast mode [ 67.775279][ T4784] loop6: detected capacity change from 0 to 512 [ 67.784296][ T4784] EXT4-fs: test_dummy_encryption option not supported [ 67.802912][ T4777] EXT4-fs (loop2): shut down requested (2) [ 67.811960][ T4777] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 67.824681][ T4792] netlink: 40 bytes leftover after parsing attributes in process `syz.5.371'. [ 67.845625][ T4777] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 67.860722][ T4794] loop6: detected capacity change from 0 to 512 [ 67.880540][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.888079][ T4792] syz.5.371 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 67.908797][ T4794] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.929789][ T4794] EXT4-fs (loop6): orphan cleanup on readonly fs [ 67.938484][ T1572] Bluetooth: hci0: Frame reassembly failed (-84) [ 67.945276][ T4794] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.368: Failed to acquire dquot type 1 [ 67.956870][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.960618][ T4792] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 67.983629][ T4794] EXT4-fs (loop6): 1 truncate cleaned up [ 67.990836][ T4794] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.025946][ T4215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.111173][ T4807] loop3: detected capacity change from 0 to 1024 [ 68.121369][ T4807] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.146356][ T4807] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e041c01c, mo2=0002] [ 68.160090][ T4807] System zones: 0-1, 3-36 [ 68.168336][ T4807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.198103][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.219671][ T4819] netlink: 830 bytes leftover after parsing attributes in process `syz.5.379'. [ 68.228772][ T4819] bond_slave_0: entered promiscuous mode [ 68.234435][ T4819] bond_slave_1: entered promiscuous mode [ 68.266865][ T4823] loop2: detected capacity change from 0 to 2048 [ 68.279145][ T4823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.291925][ T4823] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.382: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 68.309040][ T4829] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.382: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 68.348155][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.374290][ T4833] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 68.438681][ T4841] FAULT_INJECTION: forcing a failure. [ 68.438681][ T4841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.451934][ T4841] CPU: 1 UID: 0 PID: 4841 Comm: syz.2.388 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.451972][ T4841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 68.452006][ T4841] Call Trace: [ 68.452013][ T4841] [ 68.452022][ T4841] __dump_stack+0x1d/0x30 [ 68.452063][ T4841] dump_stack_lvl+0xe8/0x140 [ 68.452089][ T4841] dump_stack+0x15/0x1b [ 68.452110][ T4841] should_fail_ex+0x265/0x280 [ 68.452196][ T4841] should_fail+0xb/0x20 [ 68.452235][ T4841] should_fail_usercopy+0x1a/0x20 [ 68.452334][ T4841] _copy_to_user+0x20/0xa0 [ 68.452439][ T4841] simple_read_from_buffer+0xb5/0x130 [ 68.452466][ T4841] proc_fail_nth_read+0x10e/0x150 [ 68.452577][ T4841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 68.452666][ T4841] vfs_read+0x1a8/0x770 [ 68.452689][ T4841] ? __rcu_read_unlock+0x4f/0x70 [ 68.452717][ T4841] ? __fget_files+0x184/0x1c0 [ 68.452758][ T4841] ksys_read+0xda/0x1a0 [ 68.452788][ T4841] __x64_sys_read+0x40/0x50 [ 68.452814][ T4841] x64_sys_call+0x27c0/0x3000 [ 68.452837][ T4841] do_syscall_64+0xd2/0x200 [ 68.452865][ T4841] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 68.452988][ T4841] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 68.453018][ T4841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.453046][ T4841] RIP: 0033:0x7f04e301d9dc [ 68.453126][ T4841] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 68.453144][ T4841] RSP: 002b:00007f04e1a87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.453211][ T4841] RAX: ffffffffffffffda RBX: 00007f04e3275fa0 RCX: 00007f04e301d9dc [ 68.453229][ T4841] RDX: 000000000000000f RSI: 00007f04e1a870a0 RDI: 0000000000000004 [ 68.453245][ T4841] RBP: 00007f04e1a87090 R08: 0000000000000000 R09: 0000000000000000 [ 68.453260][ T4841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.453274][ T4841] R13: 00007f04e3276038 R14: 00007f04e3275fa0 R15: 00007ffef0916568 [ 68.453294][ T4841] [ 68.678689][ T4843] FAULT_INJECTION: forcing a failure. [ 68.678689][ T4843] name failslab, interval 1, probability 0, space 0, times 0 [ 68.691580][ T4843] CPU: 1 UID: 0 PID: 4843 Comm: syz.2.389 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.691612][ T4843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 68.691695][ T4843] Call Trace: [ 68.691703][ T4843] [ 68.691712][ T4843] __dump_stack+0x1d/0x30 [ 68.691733][ T4843] dump_stack_lvl+0xe8/0x140 [ 68.691752][ T4843] dump_stack+0x15/0x1b [ 68.691768][ T4843] should_fail_ex+0x265/0x280 [ 68.691809][ T4843] ? __rdma_create_id+0x49/0x390 [ 68.691882][ T4843] should_failslab+0x8c/0xb0 [ 68.691909][ T4843] __kmalloc_cache_noprof+0x4c/0x4a0 [ 68.691962][ T4843] ? __pfx_rds_rdma_cm_event_handler+0x10/0x10 [ 68.691998][ T4843] __rdma_create_id+0x49/0x390 [ 68.692032][ T4843] ? __pfx_rds_rdma_cm_event_handler+0x10/0x10 [ 68.692075][ T4843] __rdma_create_kernel_id+0x3c/0x80 [ 68.692246][ T4843] ? __pfx_rds_ib_laddr_check+0x10/0x10 [ 68.692290][ T4843] rds_ib_laddr_check+0x8d/0x300 [ 68.692335][ T4843] ? __pfx_rds_ib_laddr_check+0x10/0x10 [ 68.692431][ T4843] rds_bind+0x431/0xf40 [ 68.692472][ T4843] __sys_bind+0x1d1/0x2a0 [ 68.692549][ T4843] __x64_sys_bind+0x3f/0x50 [ 68.692577][ T4843] x64_sys_call+0x2b72/0x3000 [ 68.692602][ T4843] do_syscall_64+0xd2/0x200 [ 68.692753][ T4843] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 68.692781][ T4843] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 68.692855][ T4843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.692876][ T4843] RIP: 0033:0x7f04e301efc9 [ 68.692893][ T4843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.692916][ T4843] RSP: 002b:00007f04e1a87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 68.692939][ T4843] RAX: ffffffffffffffda RBX: 00007f04e3275fa0 RCX: 00007f04e301efc9 [ 68.693043][ T4843] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000006 [ 68.693058][ T4843] RBP: 00007f04e1a87090 R08: 0000000000000000 R09: 0000000000000000 [ 68.693074][ T4843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.693088][ T4843] R13: 00007f04e3276038 R14: 00007f04e3275fa0 R15: 00007ffef0916568 [ 68.693156][ T4843] [ 69.044606][ T4851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'. [ 69.130930][ T29] kauditd_printk_skb: 498 callbacks suppressed [ 69.130946][ T29] audit: type=1400 audit(2000000018.860:7403): avc: denied { connect } for pid=4852 comm="syz.6.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.294091][ T4867] netlink: 68 bytes leftover after parsing attributes in process `syz.3.399'. [ 69.299702][ T4868] netlink: 68 bytes leftover after parsing attributes in process `syz.3.399'. [ 69.325776][ T29] audit: type=1400 audit(2000000019.050:7404): avc: denied { create } for pid=4866 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 69.345264][ T29] audit: type=1400 audit(2000000019.050:7405): avc: denied { write } for pid=4866 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 69.364651][ T29] audit: type=1400 audit(2000000019.050:7406): avc: denied { setopt } for pid=4866 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 69.402673][ T29] audit: type=1326 audit(2000000019.130:7407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.2.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e301efc9 code=0x7ffc0000 [ 69.434224][ T4879] tun0: tun_chr_ioctl cmd 1074025681 [ 69.441760][ T29] audit: type=1326 audit(2000000019.130:7409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.2.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e301efc9 code=0x7ffc0000 [ 69.465193][ T29] audit: type=1326 audit(2000000019.130:7408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.2.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e301efc9 code=0x7ffc0000 [ 69.488658][ T29] audit: type=1326 audit(2000000019.150:7410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.2.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e301efc9 code=0x7ffc0000 [ 69.512182][ T29] audit: type=1326 audit(2000000019.150:7411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.2.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e301efc9 code=0x7ffc0000 [ 69.535735][ T29] audit: type=1326 audit(2000000019.150:7412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.2.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04e301efc9 code=0x7ffc0000 [ 69.600785][ T4886] loop2: detected capacity change from 0 to 512 [ 69.625472][ T4886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.638216][ T4886] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.638555][ T4890] loop5: detected capacity change from 0 to 128 [ 69.682743][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.786388][ T4907] futex_wake_op: syz.2.411 tries to shift op by 144; fix this program [ 69.795459][ T4907] netlink: 5452 bytes leftover after parsing attributes in process `syz.2.411'. [ 69.997504][ T4799] Bluetooth: hci0: command 0x1003 tx timeout [ 70.003665][ T3523] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.138848][ T4934] loop5: detected capacity change from 0 to 1024 [ 70.847389][ T4951] loop3: detected capacity change from 0 to 512 [ 70.922244][ T4951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.007692][ T4951] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.063279][ T4951] IPv6: Can't replace route, no match found [ 71.129488][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.262443][ T4963] loop3: detected capacity change from 0 to 512 [ 71.314162][ T4963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.326913][ T4963] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.360737][ T4961] xt_hashlimit: max too large, truncated to 1048576 [ 71.432910][ T4971] loop6: detected capacity change from 0 to 512 [ 71.481797][ T4971] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 71.497841][ T4971] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 71.507685][ T4971] EXT4-fs (loop6): group descriptors corrupted! [ 71.509245][ T4969] EXT4-fs (loop3): shut down requested (0) [ 71.594111][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.630958][ T4982] loop6: detected capacity change from 0 to 1024 [ 71.638194][ T4982] EXT4-fs: inline encryption not supported [ 71.654747][ T4982] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.668088][ T4982] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.699604][ T4934] syz.5.422 (4934) used greatest stack depth: 7304 bytes left [ 71.715373][ T4988] __nla_validate_parse: 3 callbacks suppressed [ 71.715394][ T4988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'. [ 71.753411][ T4993] loop6: detected capacity change from 0 to 2048 [ 71.765499][ T4997] loop3: detected capacity change from 0 to 128 [ 71.795839][ T4993] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.842702][ T4215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.846049][ T4997] bio_check_eod: 3989 callbacks suppressed [ 71.846072][ T4997] syz.3.442: attempt to access beyond end of device [ 71.846072][ T4997] loop3: rw=2049, sector=145, nr_sectors = 480 limit=128 [ 71.873343][ T4997] syz.3.442: attempt to access beyond end of device [ 71.873343][ T4997] loop3: rw=2049, sector=633, nr_sectors = 8 limit=128 [ 71.886924][ T4997] syz.3.442: attempt to access beyond end of device [ 71.886924][ T4997] loop3: rw=2049, sector=649, nr_sectors = 8 limit=128 [ 71.900696][ T4997] syz.3.442: attempt to access beyond end of device [ 71.900696][ T4997] loop3: rw=2049, sector=665, nr_sectors = 8 limit=128 [ 71.919600][ T4997] syz.3.442: attempt to access beyond end of device [ 71.919600][ T4997] loop3: rw=2049, sector=681, nr_sectors = 8 limit=128 [ 72.004879][ T5021] loop3: detected capacity change from 0 to 512 [ 72.020941][ T5023] netlink: 8 bytes leftover after parsing attributes in process `syz.6.450'. [ 72.052374][ T5023] netlink: 'syz.6.450': attribute type 3 has an invalid length. [ 72.066843][ T5021] EXT4-fs: Ignoring removed oldalloc option [ 72.072915][ T5021] EXT4-fs: inline encryption not supported [ 72.078884][ T5021] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.085908][ T5021] EXT4-fs (loop3): Invalid log block size: 32 [ 72.212063][ T5034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.453'. [ 72.225059][ T5041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'. [ 72.233928][ T5041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'. [ 72.264972][ T5044] loop3: detected capacity change from 0 to 512 [ 72.300321][ T5044] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.457: bad orphan inode 11862016 [ 72.321716][ T5044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 72.341148][ T5044] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.380388][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 72.426207][ T5049] lo speed is unknown, defaulting to 1000 [ 72.585581][ T5064] lo speed is unknown, defaulting to 1000 [ 72.708287][ T5074] netlink: 12 bytes leftover after parsing attributes in process `syz.6.467'. [ 72.754123][ T5083] loop6: detected capacity change from 0 to 1024 [ 72.770349][ T5083] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.815158][ T4215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.847024][ T5092] loop6: detected capacity change from 0 to 512 [ 72.855052][ T5092] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.862948][ T5092] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 72.874268][ T5092] EXT4-fs (loop6): 1 truncate cleaned up [ 72.880483][ T5092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.895902][ T5092] netlink: 'syz.6.472': attribute type 39 has an invalid length. [ 72.952414][ T5097] loop5: detected capacity change from 0 to 128 [ 73.008939][ T5101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 73.021435][ T5101] gretap0: entered promiscuous mode [ 73.026781][ T5101] macsec1: entered promiscuous mode [ 73.032153][ T5101] macsec1: entered allmulticast mode [ 73.037520][ T5101] gretap0: entered allmulticast mode [ 73.045253][ T5101] gretap0: left allmulticast mode [ 73.050854][ T5101] gretap0: left promiscuous mode [ 73.075177][ T4215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.131702][ T5107] loop3: detected capacity change from 0 to 512 [ 73.139567][ T5107] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.152167][ T5107] EXT4-fs (loop3): orphan cleanup on readonly fs [ 73.159487][ T5107] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.477: bg 0: block 248: padding at end of block bitmap is not set [ 73.174138][ T5107] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.477: Failed to acquire dquot type 1 [ 73.187566][ T5107] EXT4-fs (loop3): 1 truncate cleaned up [ 73.194175][ T5107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.209592][ T5113] loop5: detected capacity change from 0 to 512 [ 73.217440][ T5113] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 73.228691][ T5107] EXT4-fs (loop3): shut down requested (0) [ 73.235213][ T5107] binfmt_misc: register: failed to install interpreter file ./file0 [ 73.253655][ T5113] EXT4-fs (loop5): failed to initialize system zone (-117) [ 73.263746][ T5113] EXT4-fs (loop5): mount failed [ 73.322712][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.372784][ T5120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.480'. [ 73.497823][ T5133] loop6: detected capacity change from 0 to 256 [ 73.511478][ T5131] loop3: detected capacity change from 0 to 1024 [ 73.518443][ T5131] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.544903][ T5131] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.587124][ T5131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.643113][ T5131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.483'. [ 73.686879][ T5149] loop2: detected capacity change from 0 to 1024 [ 73.694709][ T5149] EXT4-fs: Ignoring removed bh option [ 73.706612][ T5149] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 73.784050][ T5149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.807397][ T5149] atomic_op ffff888104bc5928 conn xmit_atomic 0000000000000000 [ 73.955758][ T5160] netlink: 12 bytes leftover after parsing attributes in process `syz.5.492'. [ 74.253842][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.675911][ T5175] FAULT_INJECTION: forcing a failure. [ 74.675911][ T5175] name failslab, interval 1, probability 0, space 0, times 0 [ 74.688778][ T5175] CPU: 1 UID: 0 PID: 5175 Comm: syz.5.497 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.688886][ T5175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 74.688903][ T5175] Call Trace: [ 74.688909][ T5175] [ 74.688917][ T5175] __dump_stack+0x1d/0x30 [ 74.688946][ T5175] dump_stack_lvl+0xe8/0x140 [ 74.688973][ T5175] dump_stack+0x15/0x1b [ 74.688996][ T5175] should_fail_ex+0x265/0x280 [ 74.689062][ T5175] ? alloc_netdev_mqs+0x7da/0xa50 [ 74.689135][ T5175] should_failslab+0x8c/0xb0 [ 74.689172][ T5175] __kmalloc_cache_noprof+0x4c/0x4a0 [ 74.689249][ T5175] alloc_netdev_mqs+0x7da/0xa50 [ 74.689289][ T5175] rtnl_create_link+0x239/0x710 [ 74.689319][ T5175] rtnl_newlink_create+0x14c/0x620 [ 74.689404][ T5175] ? security_capable+0x83/0x90 [ 74.689450][ T5175] ? netlink_ns_capable+0x86/0xa0 [ 74.689484][ T5175] rtnl_newlink+0xf29/0x12d0 [ 74.689560][ T5175] ? bpf_get_current_ancestor_cgroup_id+0xd5/0xf0 [ 74.689604][ T5175] ? __rcu_read_unlock+0x34/0x70 [ 74.689647][ T5175] ? bpf_trace_run3+0x12c/0x1d0 [ 74.689685][ T5175] ? __memcg_slab_free_hook+0x135/0x230 [ 74.689826][ T5175] ? __rcu_read_unlock+0x4f/0x70 [ 74.689858][ T5175] ? avc_has_perm_noaudit+0x1b1/0x200 [ 74.689913][ T5175] ? cred_has_capability+0x210/0x280 [ 74.689989][ T5175] ? selinux_capable+0x31/0x40 [ 74.690016][ T5175] ? security_capable+0x83/0x90 [ 74.690053][ T5175] ? ns_capable+0x7d/0xb0 [ 74.690126][ T5175] ? __pfx_rtnl_newlink+0x10/0x10 [ 74.690170][ T5175] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 74.690266][ T5175] netlink_rcv_skb+0x123/0x220 [ 74.690297][ T5175] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 74.690342][ T5175] rtnetlink_rcv+0x1c/0x30 [ 74.690530][ T5175] netlink_unicast+0x5c0/0x690 [ 74.690569][ T5175] netlink_sendmsg+0x58b/0x6b0 [ 74.690608][ T5175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.690739][ T5175] __sock_sendmsg+0x145/0x180 [ 74.690765][ T5175] ____sys_sendmsg+0x31e/0x4e0 [ 74.690798][ T5175] ___sys_sendmsg+0x17b/0x1d0 [ 74.690853][ T5175] __x64_sys_sendmsg+0xd4/0x160 [ 74.690963][ T5175] x64_sys_call+0x191e/0x3000 [ 74.690993][ T5175] do_syscall_64+0xd2/0x200 [ 74.691026][ T5175] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 74.691060][ T5175] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 74.691096][ T5175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.691199][ T5175] RIP: 0033:0x7efe7940efc9 [ 74.691248][ T5175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.691268][ T5175] RSP: 002b:00007efe77e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.691293][ T5175] RAX: ffffffffffffffda RBX: 00007efe79665fa0 RCX: 00007efe7940efc9 [ 74.691362][ T5175] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 74.691377][ T5175] RBP: 00007efe77e77090 R08: 0000000000000000 R09: 0000000000000000 [ 74.691390][ T5175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.691403][ T5175] R13: 00007efe79666038 R14: 00007efe79665fa0 R15: 00007ffcd3809e38 [ 74.691428][ T5175] [ 75.065385][ T29] kauditd_printk_skb: 621 callbacks suppressed [ 75.065406][ T29] audit: type=1326 audit(2000000024.790:8032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.5.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7940efc9 code=0x7ffc0000 [ 75.142658][ T29] audit: type=1326 audit(2000000024.830:8033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.5.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efe7940efc9 code=0x7ffc0000 [ 75.166125][ T29] audit: type=1326 audit(2000000024.830:8034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.5.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7940efc9 code=0x7ffc0000 [ 75.189615][ T29] audit: type=1326 audit(2000000024.830:8035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5178 comm="syz.5.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe7940efc9 code=0x7ffc0000 [ 75.213136][ T5184] loop0: detected capacity change from 0 to 4096 [ 75.226879][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.240844][ T5184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.292830][ T29] audit: type=1400 audit(2000000025.000:8036): avc: denied { read write } for pid=5188 comm="syz.5.502" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.317266][ T29] audit: type=1400 audit(2000000025.000:8037): avc: denied { open } for pid=5188 comm="syz.5.502" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.341232][ T29] audit: type=1400 audit(2000000025.000:8038): avc: denied { ioctl } for pid=5188 comm="syz.5.502" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.366760][ T29] audit: type=1400 audit(2000000025.000:8039): avc: denied { bind } for pid=5183 comm="syz.0.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.386077][ T29] audit: type=1400 audit(2000000025.000:8040): avc: denied { name_bind } for pid=5183 comm="syz.0.500" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 75.407925][ T29] audit: type=1400 audit(2000000025.000:8041): avc: denied { node_bind } for pid=5183 comm="syz.0.500" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 75.495951][ T5195] loop6: detected capacity change from 0 to 1024 [ 75.600820][ T5195] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 75.674940][ T5213] FAULT_INJECTION: forcing a failure. [ 75.674940][ T5213] name failslab, interval 1, probability 0, space 0, times 0 [ 75.687744][ T5213] CPU: 1 UID: 0 PID: 5213 Comm: syz.5.509 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.687780][ T5213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 75.687858][ T5213] Call Trace: [ 75.687865][ T5213] [ 75.687872][ T5213] __dump_stack+0x1d/0x30 [ 75.687942][ T5213] dump_stack_lvl+0xe8/0x140 [ 75.687969][ T5213] dump_stack+0x15/0x1b [ 75.687991][ T5213] should_fail_ex+0x265/0x280 [ 75.688039][ T5213] should_failslab+0x8c/0xb0 [ 75.688067][ T5213] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 75.688188][ T5213] ? __alloc_skb+0x101/0x320 [ 75.688277][ T5213] __alloc_skb+0x101/0x320 [ 75.688301][ T5213] ? audit_log_start+0x342/0x720 [ 75.688329][ T5213] audit_log_start+0x3a0/0x720 [ 75.688378][ T5213] ? kstrtouint+0x76/0xc0 [ 75.688491][ T5213] audit_seccomp+0x48/0x100 [ 75.688579][ T5213] ? __seccomp_filter+0x82d/0x1250 [ 75.688606][ T5213] __seccomp_filter+0x83e/0x1250 [ 75.688699][ T5213] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 75.688809][ T5213] ? vfs_write+0x7e8/0x960 [ 75.688850][ T5213] __secure_computing+0x82/0x150 [ 75.688884][ T5213] syscall_trace_enter+0xcf/0x1e0 [ 75.688978][ T5213] do_syscall_64+0xac/0x200 [ 75.689069][ T5213] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 75.689105][ T5213] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 75.689158][ T5213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.689180][ T5213] RIP: 0033:0x7efe7940efc9 [ 75.689200][ T5213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.689224][ T5213] RSP: 002b:00007efe77e77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 75.689249][ T5213] RAX: ffffffffffffffda RBX: 00007efe79665fa0 RCX: 00007efe7940efc9 [ 75.689321][ T5213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.689338][ T5213] RBP: 00007efe77e77090 R08: 0000000000000000 R09: 0000000000000000 [ 75.689354][ T5213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.689440][ T5213] R13: 00007efe79666038 R14: 00007efe79665fa0 R15: 00007ffcd3809e38 [ 75.689468][ T5213] [ 75.695270][ T5195] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.987543][ T4956] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 76.144024][ T4215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 76.419897][ T5252] loop3: detected capacity change from 0 to 164 [ 76.434988][ T5252] ISOFS: unable to read i-node block [ 76.450637][ T5252] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 76.517109][ T5267] loop3: detected capacity change from 0 to 164 [ 76.662616][ T5278] xt_CT: You must specify a L4 protocol and not use inversions on it [ 76.829130][ T5297] loop3: detected capacity change from 0 to 1024 [ 76.868485][ T5297] EXT4-fs: inline encryption not supported [ 76.876238][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.899989][ T5297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.947888][ T36] hid_parser_main: 18 callbacks suppressed [ 76.947907][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 76.965182][ T36] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 76.968226][ T5311] __nla_validate_parse: 1 callbacks suppressed [ 76.968257][ T5311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.522'. [ 77.531733][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.745152][ T4215] ================================================================== [ 77.753298][ T4215] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 77.761238][ T4215] [ 77.763576][ T4215] read-write to 0xffff88811a4c90d0 of 8 bytes by task 5315 on cpu 1: [ 77.771649][ T4215] shmem_add_to_page_cache+0x414/0x530 [ 77.777155][ T4215] shmem_get_folio_gfp+0x4e8/0xd60 [ 77.782293][ T4215] shmem_write_begin+0xa8/0x190 [ 77.787172][ T4215] generic_perform_write+0x184/0x490 [ 77.792486][ T4215] shmem_file_write_iter+0xc5/0xf0 [ 77.797616][ T4215] __kernel_write_iter+0x2d6/0x540 [ 77.802745][ T4215] dump_user_range+0x61e/0x8f0 [ 77.807525][ T4215] elf_core_dump+0x1de7/0x1f80 [ 77.812312][ T4215] coredump_write+0xb12/0xe30 [ 77.817004][ T4215] vfs_coredump+0x143a/0x20d0 [ 77.821697][ T4215] get_signal+0xd84/0xf70 [ 77.826039][ T4215] arch_do_signal_or_restart+0x96/0x440 [ 77.831599][ T4215] irqentry_exit_to_user_mode+0x5b/0xa0 [ 77.837160][ T4215] irqentry_exit+0x12/0x50 [ 77.841599][ T4215] asm_exc_page_fault+0x26/0x30 [ 77.846471][ T4215] [ 77.848808][ T4215] read to 0xffff88811a4c90d0 of 8 bytes by task 4215 on cpu 0: [ 77.856366][ T4215] shmem_getattr+0x68/0x200 [ 77.860890][ T4215] vfs_getattr_nosec+0x146/0x1e0 [ 77.865855][ T4215] vfs_statx+0x113/0x390 [ 77.870138][ T4215] vfs_fstatat+0x115/0x170 [ 77.874578][ T4215] __se_sys_newfstatat+0x55/0x260 [ 77.879632][ T4215] __x64_sys_newfstatat+0x55/0x70 [ 77.884711][ T4215] x64_sys_call+0x135a/0x3000 [ 77.889409][ T4215] do_syscall_64+0xd2/0x200 [ 77.893933][ T4215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.899843][ T4215] [ 77.902171][ T4215] value changed: 0x0000000000001783 -> 0x0000000000001784 [ 77.909283][ T4215] [ 77.911615][ T4215] Reported by Kernel Concurrency Sanitizer on: [ 77.917916][ T4215] CPU: 0 UID: 0 PID: 4215 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.927824][ T4215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 77.937891][ T4215] ================================================================== [ 77.964896][ T5355] loop6: detected capacity change from 0 to 164 [ 78.006157][ T5355] FAULT_INJECTION: forcing a failure. [ 78.006157][ T5355] name failslab, interval 1, probability 0, space 0, times 0 [ 78.019083][ T5355] CPU: 1 UID: 0 PID: 5355 Comm: syz.6.532 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.019119][ T5355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 78.019137][ T5355] Call Trace: [ 78.019144][ T5355] [ 78.019153][ T5355] __dump_stack+0x1d/0x30 [ 78.019179][ T5355] dump_stack_lvl+0xe8/0x140 [ 78.019199][ T5355] dump_stack+0x15/0x1b [ 78.019285][ T5355] should_fail_ex+0x265/0x280 [ 78.019389][ T5355] should_failslab+0x8c/0xb0 [ 78.019419][ T5355] kmem_cache_alloc_noprof+0x50/0x480 [ 78.019446][ T5355] ? security_file_alloc+0x32/0x100 [ 78.019475][ T5355] security_file_alloc+0x32/0x100 [ 78.019501][ T5355] init_file+0x5c/0x1d0 [ 78.019593][ T5355] alloc_empty_file+0x8b/0x200 [ 78.019634][ T5355] path_openat+0x68/0x2170 [ 78.019659][ T5355] ? _parse_integer_limit+0x170/0x190 [ 78.019706][ T5355] ? kstrtoull+0x111/0x140 [ 78.019805][ T5355] ? kstrtouint+0x76/0xc0 [ 78.019863][ T5355] do_filp_open+0x109/0x230 [ 78.019896][ T5355] do_sys_openat2+0xa6/0x110 [ 78.019942][ T5355] __x64_sys_openat+0xf2/0x120 [ 78.019988][ T5355] x64_sys_call+0x2eab/0x3000 [ 78.020022][ T5355] do_syscall_64+0xd2/0x200 [ 78.020045][ T5355] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.020161][ T5355] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 78.020192][ T5355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.020221][ T5355] RIP: 0033:0x7fac2e21efc9 [ 78.020275][ T5355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.020299][ T5355] RSP: 002b:00007fac2cc7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 78.020331][ T5355] RAX: ffffffffffffffda RBX: 00007fac2e475fa0 RCX: 00007fac2e21efc9 [ 78.020348][ T5355] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 78.020365][ T5355] RBP: 00007fac2cc7f090 R08: 0000000000000000 R09: 0000000000000000 [ 78.020414][ T5355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.020431][ T5355] R13: 00007fac2e476038 R14: 00007fac2e475fa0 R15: 00007fff0e1d2938 [ 78.020528][ T5355] [ 78.247815][ T5366] vlan2: entered promiscuous mode [ 78.253043][ T5366] vlan2: entered allmulticast mode [ 78.258359][ T5366] hsr_slave_1: entered allmulticast mode [ 78.288045][ T5360] FAULT_INJECTION: forcing a failure. [ 78.288045][ T5360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.301203][ T5360] CPU: 1 UID: 0 PID: 5360 Comm: syz.3.529 Not tainted syzkaller #0 PREEMPT(voluntary) [ 78.301239][ T5360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 78.301261][ T5360] Call Trace: [ 78.301271][ T5360] [ 78.301330][ T5360] __dump_stack+0x1d/0x30 [ 78.301353][ T5360] dump_stack_lvl+0xe8/0x140 [ 78.301372][ T5360] dump_stack+0x15/0x1b [ 78.301392][ T5360] should_fail_ex+0x265/0x280 [ 78.301437][ T5360] should_fail+0xb/0x20 [ 78.301615][ T5360] should_fail_usercopy+0x1a/0x20 [ 78.301640][ T5360] _copy_from_iter+0xd2/0xe80 [ 78.301683][ T5360] ? netlink_sendmsg+0x430/0x6b0 [ 78.301725][ T5360] ? kcsan_setup_watchpoint+0x415/0x430 [ 78.301761][ T5360] ? netlink_sendmsg+0x430/0x6b0 [ 78.301823][ T5360] netlink_sendmsg+0x471/0x6b0 [ 78.302005][ T5360] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.302038][ T5360] __sock_sendmsg+0x145/0x180 [ 78.302104][ T5360] ____sys_sendmsg+0x31e/0x4e0 [ 78.302175][ T5360] ___sys_sendmsg+0x17b/0x1d0 [ 78.302230][ T5360] __x64_sys_sendmsg+0xd4/0x160 [ 78.302276][ T5360] x64_sys_call+0x191e/0x3000 [ 78.302357][ T5360] do_syscall_64+0xd2/0x200 [ 78.302394][ T5360] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.302431][ T5360] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 78.302495][ T5360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.302521][ T5360] RIP: 0033:0x7fe11c1eefc9 [ 78.302537][ T5360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.302597][ T5360] RSP: 002b:00007fe11ac4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.302621][ T5360] RAX: ffffffffffffffda RBX: 00007fe11c445fa0 RCX: 00007fe11c1eefc9 [ 78.302638][ T5360] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000000a [ 78.302654][ T5360] RBP: 00007fe11ac4f090 R08: 0000000000000000 R09: 0000000000000000 [ 78.302670][ T5360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.302684][ T5360] R13: 00007fe11c446038 R14: 00007fe11c445fa0 R15: 00007ffd4d96b5f8 [ 78.302734][ T5360]