last executing test programs: 6m42.886602745s ago: executing program 32 (id=1401): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='\x15\x00', 0x0) close(r0) 6m41.981744095s ago: executing program 33 (id=1421): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000001000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) unshare(0x6a040000) 6m27.671875843s ago: executing program 34 (id=1686): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m19.986951724s ago: executing program 35 (id=1795): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff80700000001000000000000", 0x1b) 6m17.895062662s ago: executing program 36 (id=1818): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ffb}]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800003000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 6m17.749539766s ago: executing program 37 (id=1822): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r0, 0x0, 0x1000000000000000}, 0x18) setuid(0xee01) 6m7.674673115s ago: executing program 38 (id=1873): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000900000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x82a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x80, 0x4, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/126, 0x7e}], 0x1}) io_uring_enter(r5, 0x847ba, 0x79c, 0xe, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x3c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000540)={0x5, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r10}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@ifindex=r9, r0, 0x35, 0x34, 0x0, @void, @void, @void, @value=r10}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5m56.760072667s ago: executing program 39 (id=1980): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007"], 0x0, 0xc}, 0x94) r2 = open(&(0x7f00000009c0)='./file1\x00', 0x0, 0xa9) copy_file_range(r2, 0x0, r2, &(0x7f0000000080)=0xff80000000000000, 0x1, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x0, 0x40, 0x44d1, 0x6, {{0x26, 0x4, 0x1, 0x6, 0x98, 0x66, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@lsrr={0x83, 0x13, 0x97, [@private=0xa010102, @multicast2, @remote, @broadcast]}, @timestamp_addr={0x44, 0x24, 0x8c, 0x1, 0x4, [{@multicast2}, {@loopback, 0x3}, {@empty, 0x3b2}, {@remote, 0x2e35fc8b}]}, @generic={0x44, 0x2}, @lsrr={0x83, 0x1f, 0x5e, [@broadcast, @loopback, @rand_addr=0x64010100, @broadcast, @rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0xf}, 0x5}, {@rand_addr=0x64010102, 0xd305}, {@loopback, 0x5}, {@rand_addr=0x64010100, 0xde}, {@loopback, 0x1}]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000680)={@empty, 0x0}, &(0x7f00000006c0)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000980)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000a80)=ANY=[@ANYBLOB="10010000", @ANYRES16=r3, @ANYBLOB="00042dbd7000fddbdf2511000000580001801400020076657468305f6d6163767461700000001400020076657468305f766972745f776966690008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="14000200766972745f7769666930000000000000080003000100000020000180080003000100000014000200626f6e645f736c6176655f3000000000380001800800030002000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="089b7b9e54000000141502006475002d79300000000000175f00000000004c0001801400020077673000000000feff817f87cefd85aa140000000000000008000300030000000800", @ANYRES32=r5, @ANYBLOB="08000300010000001400020070696d3672656700000000000000000008000100", @ANYRES32, @ANYBLOB], 0x110}}, 0x20004000) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd60"], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="fe56392aef74c153dfb59549a152210abb461611da2b179ebbd95946ad756735c1aeaddf6bc0093797c1"], 0x28}}, 0x2000c058) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000280), 0x4) accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x1000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 4m51.394301332s ago: executing program 40 (id=2781): ptrace(0x11, 0x0) ptrace$getregset(0x4204, 0x0, 0x405, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) getpriority(0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom(r4, 0x0, 0x0, 0x22, 0x0, 0x0) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x1, 0x0, 0x2}}, 0x18) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x28, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x18}}}}}, 0x28}}, 0x44000) syz_usb_connect(0x5, 0x25, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0x7, 0x2}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20010}, 0x98) socket$can_j1939(0x1d, 0x2, 0x7) 4m33.747887491s ago: executing program 41 (id=2988): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) setresuid(0xee01, 0x0, 0x0) (async) timer_create(0x3, 0x0, &(0x7f00000003c0)) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) (rerun: 32) timer_delete(0x0) (async) syz_read_part_table(0x5df, &(0x7f0000000000)="$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") (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) (async, rerun: 32) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (rerun: 32) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0128cb002cbd70001e2206"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 4m6.410956774s ago: executing program 42 (id=3285): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) eventfd(0x9) 3m26.306479755s ago: executing program 43 (id=3904): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x4525, 0x1000, 0x1, 0x12d}, &(0x7f0000000440)=0x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8200}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x20, 0x0, r0, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) 2m18.586600637s ago: executing program 44 (id=4780): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) r0 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0xfe) 2m16.063102515s ago: executing program 45 (id=4796): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00'], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="c50f000000000000000011"], 0x24}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000001d00)={0x11f8, r3, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x11e4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x8}, @NL80211_NAN_FUNC_SRF={0x10, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7f}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x11b8, 0xe, 0x0, 0x1, [{0x3b, 0x0, "1d0e61113d587ca75b9c13058a8ce46c7b03992954143019f8fff91c42493be97c35ed3fb5bb15321bed4c33611e5ef402b87070290eae"}, {0x1004, 0x0, "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"}, {0xd3, 0x0, "cac5ec195d97717984a12f62913211d201acba76e2923cf0c563c4db0759ff41a333643f6158beeb7aed1ad3a1e2227984e6b5c7794c40159db84bcbca5a7997f29e3393464396f6c1e7d3036eddb4e74abaec804b85c82aef11d5596c2dcccdda373b75dd20c2e6394b55b959dec3cd0b6a0fc5708947cb39c04bc782f63a8f97ca1e4b3c8cf74c03355a1fc53d2b4b73caed1aca7029992308920dd0a1f930ac2b629984cd806712b92da4529d40af8cd0d462e9e0a68e5949d350fe10e8a300c65113b22b453f044b60d399c414"}, {0x45, 0x0, "30e6cce347241633a48d762525eb6b4dcf4b5830ab42244fdda79228c81e9c2a694541f56b9272d3d0c11cadb13bd1ae329c3b523d4208d5a0332af7aa98cf7992"}, {0x56, 0x0, "76e2c9ee8eced9cbe130bc6f67868f5d5fc3f428f786af2b1d3a8397f131f5430e8b5366ddfa90ba8928dcb67966315b9291338d778d1b82abca329c13993cddd793b23aeeceaf4a0f3c11eab951f8bf6a52"}]}]}]}, 0x11f8}, 0x1, 0x0, 0x0, 0x40044}, 0x81) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2132, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$evdev(&(0x7f000001fa80), 0x0, 0x3f) ioctl$EVIOCSCLOCKID(r7, 0x40084504, &(0x7f0000ffcffc)) 1m45.079030958s ago: executing program 4 (id=5247): r0 = socket(0x10, 0x80003, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='kfree\x00', r2}, 0x18) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}]}, 0x68}, 0x1, 0x7}, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040006c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='./file0\x00') r4 = socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) poll(0x0, 0x0, 0x3ff) sendto$inet(r5, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0xda90) close_range(r0, 0xffffffffffffffff, 0x1000000000000000) 1m44.118764792s ago: executing program 4 (id=5259): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) 1m41.035002536s ago: executing program 4 (id=5293): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = socket(0x10, 0x3, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bind$unix(r3, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) ptrace$getregs(0xe, r6, 0x16, &(0x7f0000000200)=""/117) ptrace$setsig(0x4203, r6, 0x7, &(0x7f0000000300)={0x36, 0x704, 0x37c4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r8 = gettid() process_vm_writev(r8, &(0x7f0000000580)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000640)=[{&(0x7f0000000740)=""/241, 0xfffffffffffffe5b}, {&(0x7f0000001400)=""/4096}], 0x1, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000005304010000000000000000000500000a1400"], 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r8], 0x48) syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x4a602) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='bcache_invalidate\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m41.034554236s ago: executing program 46 (id=5293): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = socket(0x10, 0x3, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bind$unix(r3, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) ptrace$getregs(0xe, r6, 0x16, &(0x7f0000000200)=""/117) ptrace$setsig(0x4203, r6, 0x7, &(0x7f0000000300)={0x36, 0x704, 0x37c4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r8 = gettid() process_vm_writev(r8, &(0x7f0000000580)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000640)=[{&(0x7f0000000740)=""/241, 0xfffffffffffffe5b}, {&(0x7f0000001400)=""/4096}], 0x1, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000005304010000000000000000000500000a1400"], 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r8], 0x48) syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x4a602) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='bcache_invalidate\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m37.494721755s ago: executing program 47 (id=5321): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') 1m31.270476408s ago: executing program 48 (id=5371): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000e00), 0x1, 0x570, &(0x7f0000001500)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000480)=ANY=[], 0xfe37, 0x0) (fail_nth: 5) 1m29.12557091s ago: executing program 49 (id=5384): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_nanosleep(0x0, 0x1, &(0x7f0000000280)={0x77359400}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r2}, 0x18) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000, 0x0, 0x0, 0x401, 0x0, 0x4507}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 1m22.026798949s ago: executing program 50 (id=5406): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000240), 0x3, 0x4e6, &(0x7f0000001240)="$eJzs3d9rXFkdAPDvnSRt2qZNqj7UgrVoJS3amaSxbfChRhB9Kljre4zJJIRMMiEzaZtQJMU/QBB/oU8+6YPgswjSP0GEgr6LLLuU3bbLsg+7O8tM7mzT2ZlkQpNMmvl84PTec+7N/Z4z0zkz557LvQF0rYsRMRERPRFxJSIG0/JMmmJjM1X3e/7s4XQ1JVGp3H03iSQtqx8rSZen0j/rj4gf/zDiZ8nn45bW1hemCoX8SprPlReXc6W19avzi1Nz+bn80sTY6I3xm+PXx0f2rK23vv/Wb3/55x/c+ue37v9v8p3LP69WayDdtrUd7dhoc7/NpvfVXou63ohY2U2wQ6wnbU9fpysCAEBbqr/xvxARX4uIF39o3OpXHQAAABwFle8OxEdJRKVSqZyplwEAAABHSqZ2DWySyabXAgxEJpPNbl7D+6U4mSkUS+VvzhZXl2Y2r5Udir7M7HwhP5JeKzwUfUk1P1pbf5m/1pAfi4izEfHrwRO1fHa6WJjp8LkPAAAA6BanGsb/7w9ujv8BAACAI2ao0xUAAAAA9p3xPwAAABx9Lcf/Se/BVgQAAADYDz+6fbuaKvXnX8/cW1tdKN67OpMvLWQXV6ez08WV5excsThXu2ff4k7HKxSLy9+OpdUHuXK+VM6V1tYnF4urS+XJ2nO9J/OeKAgAAAAH7+xXH/83iYiN75yopapj6bY2xuoT+1s7YD9ldrd7sl/1AA5eT6crAHSMC3yhe5mPB3YY2P+mIb/L0wYAAMBhMPzl15r/Nx8IbzADeehe5v+he5n/h+5l/h+63PGdd+lvteFfbRzfWUIAADgUBmopyWTTucCByGSy2YjTtccC9CWz84X8SESciYj/DPYdr+ZHO11pAAAAAAAAAAAAAAAAAAAAAAAAAHjDVCpJVAAAAIAjLSLzdpI+omt48NJA4/mBY8mHg7VlRNz/493fPZgql1dGq+XvfVZe/n1afq0TZzAAAACARvVxen0cDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB76fmzh9P1dJBxn34vIoaaxe+N/tqy/++DEXHyRRK9W/4uiYiePYi/8SgizjWLn1SrFUMfbNaiMX4mIk4cRPxoHf/UHsSHbva42v9MNPv8ZeJibdn889ebptf19GKr/i9T7/9q/Vyz/u90mzHOP/lbrmX8RxHne5v3P/X4yWv2vz/9yfp6q22VP0UMN/3+SV6JlSsvLudKa+tX5xen5vJz+aWxsdEb4zfHr4+P5GbnC/n036YxfvWVf3yyXftPtog/tEP7L7XZ/o+fPHj2xW3iX/568/f/3Dbxq6/9N9Lvger24fr6xub6Vhf++u8LDUXHtsafadH+nd7/y222/8qdX/y/zV0BgANQWltfmCoU8itWjuxK7wHEqv9/OiRN7uqVv2wtuZO+Mbs+Tuf6JAAAYH+8/NHf6ZoAAAAAAAAAAAAAAAAAAABA93rlpl89EbHXdyM7/uqdBfo711QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG19GgAA//9UPsbW") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) lseek(r0, 0x7f, 0x1) getdents(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) 1m21.446634556s ago: executing program 51 (id=5411): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000001d80)) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x1000000000000000) 1m15.92655683s ago: executing program 52 (id=5424): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1m8.30806617s ago: executing program 7 (id=5437): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES16=r3, @ANYBLOB="01c21668f6d1d66edb251c00000018000180"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1ff}, 0x1100, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x300) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xb7}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4b}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 1m8.268576424s ago: executing program 7 (id=5438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r0, r0, 0x0, 0x40000f63c) 1m7.394122971s ago: executing program 7 (id=5440): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000380)={[{@dioread_nolock}, {@nojournal_checksum}, {@resuid}, {@user_xattr}, {@grpquota}, {@lazytime}, {@abort}, {@dioread_nolock}, {@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x4e3e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x3, 0x55f, &(0x7f0000000c80)="$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") r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0x0, 0x1001f0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) pwritev2(r2, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x10, 0x6, 0xfffd) 1m7.231329846s ago: executing program 7 (id=5442): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='kfree\x00', r0}, 0x18) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) 1m7.159269464s ago: executing program 7 (id=5443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)='/', 0x1}], 0x1}}], 0x2, 0x0) close(r1) 1m6.633489376s ago: executing program 7 (id=5445): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$UHID_CREATE(r0, &(0x7f0000000900)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 1m6.610393528s ago: executing program 53 (id=5445): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$UHID_CREATE(r0, &(0x7f0000000900)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 1m6.109905787s ago: executing program 4 (id=5412): socket(0x10, 0x80003, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) 1m6.045519753s ago: executing program 4 (id=5455): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01c21668f6d1d66edb251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1ff}, 0x1100, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x300) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xb7}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4b}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 1m5.412286696s ago: executing program 4 (id=5462): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r3 = socket$inet(0x2, 0x40807, 0xfffffffe) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r8}, 0x10) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000580)={0x1, {{0x2, 0x4e24, @multicast2}}}, 0x88) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b40)={@cgroup, 0x15, 0x1, 0x8000, &(0x7f0000000540)=[0x0], 0x1, 0x0, &(0x7f0000000880)=[0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1f00000010000000", @ANYRES32, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="66725d3a08138d66b9ac6c1e668f0f4c61d437b1be611d4855ea9760b5560f6a34de0ef019b042762a94932329cdbd7e8cbec1f4000000000000000000000000000020fb063cafbf3c2745110b343fcf6acdbe5eae9d2da0f4f7223b47a4f34f746f566757d263cce4cdecd1603156a0b26ed834c532a2cb46c5a9151ce9bfde0472d459e1ffd3a6", @ANYRES64=r9], 0x20) r11 = socket(0x10, 0x803, 0x0) getsockname$packet(r11, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r12, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@ifindex=r12, r2, 0x37, 0x0, 0xffffffffffffffff, @void, @value=r2, @void, @void, r9}, 0x20) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 1m5.393618728s ago: executing program 54 (id=5462): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r3 = socket$inet(0x2, 0x40807, 0xfffffffe) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r8}, 0x10) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000580)={0x1, {{0x2, 0x4e24, @multicast2}}}, 0x88) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b40)={@cgroup, 0x15, 0x1, 0x8000, &(0x7f0000000540)=[0x0], 0x1, 0x0, &(0x7f0000000880)=[0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000bc0), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1f00000010000000", @ANYRES32, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="66725d3a08138d66b9ac6c1e668f0f4c61d437b1be611d4855ea9760b5560f6a34de0ef019b042762a94932329cdbd7e8cbec1f4000000000000000000000000000020fb063cafbf3c2745110b343fcf6acdbe5eae9d2da0f4f7223b47a4f34f746f566757d263cce4cdecd1603156a0b26ed834c532a2cb46c5a9151ce9bfde0472d459e1ffd3a6", @ANYRES64=r9], 0x20) r11 = socket(0x10, 0x803, 0x0) getsockname$packet(r11, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r12, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@ifindex=r12, r2, 0x37, 0x0, 0xffffffffffffffff, @void, @value=r2, @void, @void, r9}, 0x20) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 58.355107561s ago: executing program 3 (id=5506): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') 58.250704521s ago: executing program 3 (id=5507): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000380)={[{@dioread_nolock}, {@nojournal_checksum}, {@resuid}, {@user_xattr}, {@grpquota}, {@lazytime}, {@abort}, {@dioread_nolock}, {@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x4e3e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x3, 0x55f, &(0x7f0000000c80)="$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") r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r2, 0x0, 0x0, 0x1001f0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) pwritev2(r3, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x10, 0x6, 0xfffd) 58.145494582s ago: executing program 3 (id=5510): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30000000000800014000000001140000"], 0xd4}}, 0x8818) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0, 0x3}, 0x8) inotify_init1(0x800) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4084000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'wg2\x00', &(0x7f0000000140)=@ethtool_dump={0x3f, 0x2, 0x4, 0x98, "e1c6061764d424dc6a657ce4116634d012e0e6f0e071ea9060e44afd038ea6c7f1cd025a719b7347e97fb863e1f60a30461f6f594f5784ec3103e57abcb74d7dffe1531236bc8110e374a55ca22e9ad5dda7f986d3335649d1fbed1fa85f66c0ac78c4222117924edec07fdfe92a84749591cb4f5542c19a0309037213e3128b78ee14665a9f539552995bd37038d152e48ad27c89202bcd"}}) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0xc) 57.255712089s ago: executing program 3 (id=5511): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='kfree\x00', r0}, 0x18) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) 57.234101122s ago: executing program 3 (id=5512): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x5, 0xfffffffffffffffc, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000540)='./file1\x00', 0x800, 0x100, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1020048, &(0x7f0000000b00)={[{@journal_checksum}, {@mb_optimize_scan}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@uid_gt={'uid>', r5}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@euid_eq={'euid', 0x3d, r5}}, {@fowner_eq}]}, 0x5, 0x504, &(0x7f0000002580)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES16, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC=0x0], 0x1, 0x2b8, &(0x7f00000005c0)="$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") rename(&(0x7f00000042c0)='./file0\x00', &(0x7f0000002bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 56.63959436s ago: executing program 3 (id=5515): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x2}, 0x8ec0}], 0x1, 0x40002002, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r1, 0x1, 0x10, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 56.622335182s ago: executing program 55 (id=5515): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x2}, 0x8ec0}], 0x1, 0x40002002, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r1, 0x1, 0x10, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 45.993198839s ago: executing program 9 (id=5564): syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={&(0x7f00000000c0)="559c8d8c4e45337f27404660a8df4783ed234a9a29da0814bb6ca593ea3813e654759db960a4a0af588d646addc47332516e340612fffbe1b726b02e4b151c85434761428b05ff663954aacab456a4ccd1f6f6dce1b37b99d4534191c9b12047a818b705f87419c1cdf9fc78f90228933872099381fae1923d6196e9bbb85cffd53e7f61857ec58a1c0ee3957a1978c422049f939eefe41af4420eff6296c74ec0fcee3516851781203d72fc915603cf51dbd99ef8fcfcfe9a3aa6eaf214b391fdcf94f837a8f37c2acc", &(0x7f0000000500)=""/236, &(0x7f0000000380)="4bcbedf84b130f4552638de15face6d0e522ebdb056754afa915bcc63320ffb0b55572a87fc69c44689479289041e65feb38c87be9fa5858a22bab2c3e5efc19d3fb025749d97e7b9d7726b06fdb8614bf9e4711cebeef23a6d72da2a43358cd5aebf97166af52558a5b728a9fcd74ffe2be35ec6979892fa5bee31e6b019f365d7d", &(0x7f00000001c0)="046c1f7d07fdbb00215f88171c05bf317d86ec462e79a3a44b46ef839b2073b8094d10c40a9d0cd2cd85b272989de70dd9466932153069b7dc", 0x7fff, r0}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') r2 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) sync_file_range(r4, 0x0, 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffc, 0x86, 0xc, @buffer={0x0, 0xf9, &(0x7f0000000940)=""/249}, &(0x7f0000000a40)="19099435e374fd89804a813810538230acb892aed5f5007b43f5caf606d7c3f1db7471650a4740bc1011abbf89c6b36345c14f48ab87d52dd74461411d30abf0448e82a2113ddf600c5e69940621e37a752a3655cb25a227f291afafdb39a3a6597fb84bdbb145046e0af2c91221c00be948cf45264df23e2e4c903e9c9ba6ddfa0b7ce40aa2", &(0x7f0000000b00)=""/253, 0x6, 0x44, 0x1, &(0x7f00000007c0)}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r6, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = msgget$private(0x0, 0x12) msgctl$IPC_RMID(r7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) setitimer(0x1, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000600)={{r9, r10/1000+10000}, {0x77359400}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) r11 = memfd_create(&(0x7f0000000800)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\xb4\v\x92\xd2\x99\xb80x0, 0x0, 0x40, 0x44d1, 0x6, {{0x26, 0x4, 0x1, 0x6, 0x98, 0x66, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@lsrr={0x83, 0x13, 0x97, [@private=0xa010102, @multicast2, @remote, @broadcast]}, @timestamp_addr={0x44, 0x24, 0x8c, 0x1, 0x4, [{@multicast2}, {@loopback, 0x3}, {@empty, 0x3b2}, {@remote, 0x2e35fc8b}]}, @generic={0x44, 0x2}, @lsrr={0x83, 0x1f, 0x5e, [@broadcast, @loopback, @rand_addr=0x64010100, @broadcast, @rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x2c, 0x12, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0xf}, 0x5}, {@rand_addr=0x64010102, 0xd305}, {@loopback, 0x5}, {@rand_addr=0x64010100, 0xde}, {@loopback, 0x1}]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000680)={@empty, 0x0}, &(0x7f00000006c0)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000980)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000a80)=ANY=[@ANYBLOB="10010000", @ANYRES16=r2, @ANYBLOB="00042dbd7000fddbdf2511000000580001801400020076657468305f6d6163767461700000001400020076657468305f766972745f776966690008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="14000200766972745f7769666930000000000000080003000100000020000180080003000100000014000200626f6e645f736c6176655f3000000000380001800800030002000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="089b7b9e54000000141502006475002d79300000000000175f00000000004c0001801400020077673000000000feff817f87cefd85aa1400000000000000080003000300000008000100", @ANYRES32=r4, @ANYBLOB="08000300010000001400020070696d3672656700000000000000000008000100", @ANYRES32, @ANYBLOB], 0x110}}, 0x20004000) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd60"], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="fe56392aef74c153dfb59549a152210abb461611da2b179ebbd95946ad756735c1aeaddf6bc0093797c1"], 0x28}}, 0x2000c058) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000280), 0x4) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x1000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 44.290706027s ago: executing program 9 (id=5585): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x6, 0x0, &(0x7f00000000c0)="b9e203076008", 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) 44.290445197s ago: executing program 56 (id=5585): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x6, 0x0, &(0x7f00000000c0)="b9e203076008", 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) 39.901322549s ago: executing program 6 (id=5625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01002b78d60002dcdf2504000000f9d35afd1f3365cd45110fa28234dccffcb51b6bc7846d860828b2d927accec87eeb12308c9b06bf0a98d0d3b72927a48f969a178a47"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) uname(0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0)={[0x1b94]}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000008400000084000000040000000000000001000085f0b300000f00000000000000ff7f00000d00000006000093000000000300000204000000190000000e0000000e002000ffff00000c00000003000000050000006a285a6502952481035616e12ea39d070d00000009000000080000000500000068070000050000000b000000f1008dcc250000030000000b000000000000070000000004000000000000080400000000"], &(0x7f00000001c0)=""/2, 0xa0, 0x2, 0x1, 0x8022}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x1ffffffffffffffd}, 0x18) pipe2(&(0x7f0000001cc0), 0x800) set_robust_list(&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x1, &(0x7f00000000c0)={&(0x7f0000000080)}}, 0x18) r4 = socket$inet(0x10, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xe, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x2, 0x12, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xfffffbff}]}}]}, 0xb4}}, 0x0) r7 = gettid() fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x1, r7}) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) readv(r9, &(0x7f0000000300)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) 39.025098526s ago: executing program 6 (id=5627): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x2930, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0xb4, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x50, 0x16, 0x0, 0x0, {{0x7}, {0x4}, {0x25, 0x6, "f67c2ef361019b6d760871c3a3edb53dda1bd059de49a7e020dde54eee476144e8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x200, 0x1, [@m_connmark={0x168, 0x1c, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfe, 0x5, 0x4, 0x7f, 0xfff}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xfffffff9, 0x2, 0xffffff6d, 0xffff}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6d0885b9, 0x6, 0x1, 0x4, 0x3}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcf, 0x8, 0xfffffffffffffff6, 0x4, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x1, 0x0, 0x2fd453c0}, 0x78ce}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x184, 0x7, 0x1ff, 0x4}, 0xc3e}}]}, {0x8e, 0x6, "841ba7a5ef9c1b3008cb11427955b29b23726469532179b6f16da35471af6bad315acfd087f8bf7fd881a61095ca0c4ddd1ef376aa30c49c3915bf82b14661c33a8c997e3b9ac9adfeb419625ba6780adae2d0298cbde5642f2d0f90bf7cb9c713706276b8b83dd297033ffe5f4cec016bca0e8424410f7d37c4be3a0afd3bec470486810a0b60866303"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x94, 0x12, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x46, 0x6, "36f8fb3c472ba1f7747159b94cd4af9864508f29708d7632a0d45bca7c01ce687fc381dd1415cd728e491d132a9f32b7504cb8a4efd54fc2977e4d5fc9bc85da2bfe"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x2334, 0x1, [@m_simple={0x1080, 0x10, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '/dev/ttyS3\x00'}, @TCA_DEF_DATA={0xc, 0x3, '^]@\\#*+\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x3a7, 0x6, 0xd3a74dc, 0xce}}, @TCA_DEF_DATA={0xf, 0x3, 'tunnel_key\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'A\\#/{^\x00'}]}, {0x1004, 0x6, "7d0e96c934be92ec70457b7e6adf2f9437f6e8c7bfb2705f0e49d758604474e03a1fa88f28ab35722c5ec0884b05582c1dc7dd5933ea91cad0c6dd4d9d1675a221af98108a779ee2505aa7a71c771a8a4525bdbe340d37fe82c8942dcbc0c4d5aa8bb7faba4688d24d6889b46e147fb71dc61519ccf640ad9a06612b3e462bd19608bc4fc4369a4d17a5f46fdf28229138a9eab36ddf40d7aa7b339cfafd523b812815c99853c34e654f43c5174678fc17a48b7051a78338d1c61779ee8465ac9d6a5affb3a56de03980a9376c3af2712035007c8383b7d372162fd8cff794f2e6edd6eca210020ee9d45e8f8e25c693343079f8fe375f9c033d46652d51804433ebf0ab23671d12b33432084001f7a7d4bbe02dcc73bcf1395c47e649786354d54774208b7eed7a5d49351e5ce7c57fec9aa60c92a40e7e91986757d6bb8227ceeb7bfb12d22e6e8361794ea52f95be6198a89c8c66c9ade43096c2f3f11b558da87b6cba458d2deb9cb598c570fbee45b272ee3cf03e840f94942aabe385d9716a9ac4b13147d0d70a93d85edf1b869b130a8ab744f91c2b2cbbc1e26d7140a463481c6bbe2bf87c9951835e927ba09b4ae59aa3c351db1ac15a541f893fbde1945dfb1a9da9a1656b035e7960b0f6582f5ac443986db884af00d52c371a0bc3a67b46b599be726eccda8bdc99e5310838595c6b52cdbac72ad0fd619aa050ee9cb61039bdb3741859b8666287cd70e94131f1c493f2330db9469d2a2b296d2878bcbed40a1bc7d3330d4b05912e8c8e87d4c5a0e8216116b24bc167b4812d4be5e4c50ad301d2bb1ce3e9ad8e3188b349e1d3896509a8d9783218d0944c13cdf861dc5a1e533af35faf00a22385524b75703a1f2aa59c77c3f416dc3951360eee419b9972636ae3d01ddf2f040fa3a04ec3ceaf43fb1796b55831eed3813c363323940256274977d3d4d838fcf8b76562217c2aa3bdaec011c61c442367262b5344a0e12c969f44a376c9689e415d84f7ad29f15a4b43a7c79641a5a53146ff147e1efadde6855d781edffd4fc852b4ad5ae925f67168eea268d5882fd466591d02f1b02fa1320a0befe744d997b8f47a0c07b7bdf6853b30d2a7eac8336ada4340e49632732cb4b6f1b2d71c9d4aa328f440428bde8ddd020bdd429a841479657476d5a3f70b367441dae62e47b65ec5dee2fd6a7005100182103b2dd26474a4f5053ba778bcdd0c81721ac73b20cead252e5017108c963a46f97806775a99bf95fbb90da503e5ace251fda2b83dd1b5fad340a8f1f5034a27f39bb12bdd8e1b4ad6a0ddb17e781004fe608491e2d4ded0b0fbcc030b790d96c7c95451855fe1cfdcc2b7d1a84a76a98c8d4011acd89e4181911fb0a534d8cd22acee77b2c71ebb5f5a382b224e3a9ff520c02ccc59099f3662f3fa11b11939004d6f8f6db5fdcac5a751eeed023f26c76704cf70b13fb8a5b5010abbf3645f0f718397784c517526a5615e5cf13e8f4c079bbf8c993407837d04eaf8dbb48b1deaf22860f01e6faada01fe4d59b88de87628cb8c4dd2c1e0c9a25dbf360671a375867e365214d617a0b1de895ec868e497089dbba5a695ba982dda867524a9ab9e443563998b6cfa396bdee4c0a4864b8aa69206e26e8436e4da6ebbb5316d49057fcf0423b67a05a7417aac11e634d481cc3adf2770efd33caa868bf7ab29d492ad975edb36bb2bcf4e06f76b290d38eb4fa79cfbd01cee066854486b3f8c86c5de76209a1a39daf4f48a937551b8fd26bc9118018aed6ba2564fc1d7a66c8ec8a1fd62007d9ea28d8a3d71e485f172fd4526f5d0d779f46964ffaffec95c6bebce2afac3f6df99d24ba14e5e6a2ec8aeb2e01b70fa7b6681f0a40524888034f138e1bea11853026163894870f994896cb345dd0e4a0795a04c69edf0c28d16174b8e25aa4fc4710f6ad467ca26eeb67d0c3f73b05e1b8dd497371ab9307053accb7378ffe68b2cec0c598e3d66d781c83b8ed88c8dcbae8618f9bce6cc81c9e60ebb0c6b56e459d9dbe6a530f70c54784d352eca0298776f18468aad93f76f015431af841d762a7ab4676497781e439bcecd660c00650b42dfdb9d32b122853e63a9405c90cbd5fcac6b39f54e908a287e1c48d595ee7982e5e98ede9d4453af529a20344b618e4954d4c8d1dba5cd135a84d140d02d996e9195b67f7a4dbac64fcb86d69fb33cac3a0d4a25a855e9acfc7b0298047870b982f1d5272c8cdab72664a73a2c5ad69fac13f240c47da1f51d053bc8414fb6f55b743a61a9fae1f8fb21fadad810aee68f396c2d178af41ae6bb406563f579731a25c8cc2a355f3915858cc42684c1ee33f42859487c77ee6b570cad07690830d7043543c984c173f09c7ff6fb38a6af8565537474b4f8f1b19b08df2c36aefc369b1caba29b81daf6838742a01939294da1a45316788e779f10d75619d70f57543bdc884023bc88d03266f179fb9e7721c49b41b8fdac2cd1698cafe0c6b0b06b68216b6398950af88240fe4f9b95bafd91fb741271c520ea32c190231e9d38d0dfcb73fbaf387aabb95f08fbfbfce8748800e08db339096debc656f28ebaa400837989b22e1ac8231d151cd2df6d6544166726df29b396493e66322797fd2cef6eea99ac524542f27f05b866e3dc4032cd58c0521cf7271ef1f1d254cd7912e63e3835898275c344e17e3744fcc7c514698432faf3e3111a30f586408c06b1933918b0d97d6eafd02af9250109ca6bb91f752ed752f074b8ceaac9fd90d9f219735616018acb4480d74657a39e4618d09d66439a58188e1a6934e65e2eeed160685ad5c369255aea180fbde146c41bb1e378435fc1ecf817a8bef4bd2782b770ddab68c381e3bbe7ddd5e3933aa08c9610991878b710e33f274d4297c70aad01883f8f6b81731a5199b6de064d98519f347644913f4b074811c6606d073edcc411bab20213f19cb3ae485722c78a670f3a79c7193c5798e56bf2ab0a4b62524fd2f4046b33d805306973b193b5e15100b740c63f7a669fc7c4c0d6e500526dd6e94dd30e0de246f2a5c790869079b4203063e08a732f723e477a83afb5b64ab6ea90b0bfd4aa0976c26b21e1162cb2c48579dc2d7a738cb40bf33a74b7ff26e0f4811f29b94bec95b3a983d9ac76692c85a06da0f6a5b2ffc03ca94d1c12603e99699078f9922e13a62e5a6b201d22c588c1a3523b5891b2f7c61726ea779b20e62641c72035dd94969fb92d64d7071cc3511f1cbc729557f0bd02194236d627b3bc3bb4fa920667c769ee5cd1f0584fa6dc5607faf9132a28f0d0b615a5ed8c7cbdb7684ec71b39ae023f5c0c7e60a0605372afaf3fc3063f5d281ed278f5cf30a6dc5faf46501b25694246a00660e44a4707763153c238f2f996cf30eeb131cc2b3b7577f4115827ccbcd2e2e9c7f6d7c9da8647175032b8fbba1e40347a3899b9150fa43b528f54644c621c1bfb601d1170d9726af348dcf593b9de421b20af1f262f72bd650bbac45a1d51f832f438b5d43b21e16add8685fd5153bf5ca764ba2af016b9e9937ef781a614e126c9c2cc63845c0bac5e092d6ee771d2b05bde389b21c0ea28bbab1cc721f15631bb9515fe94b895edab3f5f9c490756f07a72da53aae800f26d9d4860a0605b07738df65694cd88ac709baec81c4ba250c0a97ca0bf2c55e42b3ae5d1167a3157d005c01c795446dec4f8a3c066dec3ef3d4bc817f4936a27a1db22f162be5f0e0569491e946f92867768680009514e07e824d9b389e94ba45ceed100e468828de6a811bd7ac17e3c231e883ac311bfadd9b189cbed78e3cafe7a101d82a8a844b4b160d252663d20be82ff6f97c56f6ace54227ca3b2789b5cbb8e88489a3043d361755ea09512852acc90a95a70bfce1c410cc3e11d67d30fa5170b8dca08df8c0b45449d1f88f7300d01a7375c5f98115a728b372e65816eca2b0e8414239636d5bb6516944c9f33afe5917e211836253db53fb7dfa52ba054c33948c07083761be07a494f9affb3a946957db2c099a0dd1e6f4f26fb9c539ef619e8396d68d8824dcedb18bd07dbf2510cbc8d16513df747883dae31db7463b1d1243ee6e0b38f6be5d36629c2175edd3c33999486c2c1a4fd182775f94ee157c4d1faa99daec57ae1ae82fc75cd4cbe87158a550f0aa35f790b42ddb8eb265ee44741715f0d2c24397a2d3bea0a5ca32ef0fa9e77755b8ebf8199b7584627c4460f9d2554b5155c98aef774b08d56525db9374c6110fe9cebd595a76badf688638c4437b5a6e51c920bf96e9a8c0a5f354cc2454078452154e9d972184b955964c35258bfb622cb4cfea222ae5e635de4edc72f444656fbead8d3fa585af80903e377530c6fdb11f060984983b22652148d081d17e73046d09003392e7eab2bedaa5fd98a5c6c40a2cc5ad259a6800cde8abaeac946111d6f8fc64079b3f8b973fe12bed2e753f5db40d39bdd1ad400fbd87b2e61538de315cdd359965f5fbe7e9c8fa00814b91838caa0d3e594fcaa7310744a69472a653a0e036728afb31ed50246e12614cac0d9cd5220a1b08ee6c5c30a31afabd64318cde554dcc52d4d06ec4f08a4e1be79222f131f2ec1ae28ce975ea50d788fc8e581f99cd19f5e5636c53cc5320921bc17ac54d1ca8a35314c744bf1106630b1090aefc46c159c28e1def406faf2d81873bb26fa309a4b04f12933bd2614d89f6efe773e7f69ececa57f1e0b02a5bcb49c80ea592425eba16473a2456f4e7b9ff30ec86c5828c931e0df96e7a9232d75e3ef19fa6a3b7f52624a09f7ebe4cff878d132dc4023d18e91f2ae51219e01763303dc667429998a38941648e40f9c92acbbe6fe3c32de0e49bc48fea47d33082c6568d30d40a6f43c315d2940e53329675ec53d27848b1592ad7ddc23eb95f84052cc0a431a01c0da6218981f1d5b52fe87ff2e950562600a03a9ebe43e16bb177ff7a76b3aa36a819f80d6cb6685bc914aa50d6e101873fac841fb54d3f37077687e6f691d5de66cc01b4ccfd6699bc859890cbcf1e81a788de5abff3c8a6a2c3646d9cec9b9cb19db7d6c7b5580989a0d727f40575e92138f4e87723b70714d667328cbd6bb4aa6ddcb7f1c0142a78a312855061bad4e2ea8ab58eb556a0eaaed7c62f96388ff7ea224d75fef44815fbd613146ff95e416b4a2c8ae0daf1cf71bf4e03aa380b67c5822f3987799ec4e07fd34c06c329c6dafe822b8c0218df2450469b06284f29b51d960e6d5c30398309e9652b96b939e9b0ae785ad26d5f5c2311fe3a79069a04d97462334090488079346bd3bd374beed21eb8072123793d223dd486a055d3885310b3e71222c89ebd98e07cbf92107104089eb847ebe87321e8ba16aba8c836f13aa427e382e7e7acfa71e1d3c32e8b2a241609a9742691a7a2bbc4bd7addd83bf9457d580a337128b239ffc16bfb769e4214d3acea3c7ae2ca141ef802c2a71345c00010456f3470245c72a2cf210e2a2fe893dbd5954df02f3df3b4cf9c37a9abbbf1c07731999b1e978968c6add72a91ec93808b83c85b792cb9103860e4a72c8dd87ad1e1b6e597349279026359a642599542c356d3961225aab0e961010f45870335f159bbab15d927a9464d132388383134ba6f3b22a08d2d20ccedda893f5cb55a69ea7279f7143b536225c4f9fb8e525ab3d07646d076f56c60c09d43606fb1d05bff279d05f1026784f198184d68871794f91f1bee6ceaebf3652643a816e1eade61d4d70450f2d804c"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0x1070, 0x11, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x68d}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x6f8}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x108, 0xb, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffffffff, 0x4, 0x0, 0xe, 0x8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x205e9d0d}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x20000000}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x394}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8001}]}, {0x83, 0x6, "4b83815ca32788021aae50e52109ec43d7d8df1fac22548cead179e467e8a689c1691715c7c965c2d262b09ba17d127c5c6e2edd8e28f5216c33e245655a1cb51ffdc68b3369302dffafd68d3c91e2ffa52818c65468562066419f3efd40aca7b4c364d42f13117d35d3b56983f5eda4e81c78ceeca7a197a55c05bdd0806c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x138, 0x18, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x4}, {0x330, 0x1, [@m_connmark={0xa0, 0x10, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd61, 0x5, 0xffffffffdffffff8, 0x2db1, 0x401}, 0x9}}]}, {0x54, 0x6, "2f928d289abc7461c925ed5a0a607790b7de1c8a4e2c9147ae9974e017ccc3eab40880e59b94cae8750c7d5f808daaa9be2a6a255df17ec5190b46a8b5fba31777acb1b8dc635dbd4f86f98429453219"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x1a0, 0x9, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x81, 0x5, 0x4dbe, 0x6}, 0x7f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0x7fffffff, 0x5, 0x100, 0x7}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x135fb87d, 0x8d, 0x3, 0x1, 0xd}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x800, 0x712, 0x7, 0x8000}, 0x241}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1a, 0x7, 0x8, 0x8, 0x6}, 0xfff9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x2, 0xe}, 0x9}}]}, {0xc8, 0x6, "6f500f762438578a07b795f943fcd16714a38e3f5fdd009b63a49a9217dc1c455e5cfa84b3c046713a0d3454d33f08a006642f308a60c920febd2be9b3f0e6c973bac1c8c93c79807e0f41a4f675a127f6d062df39b10cddcba6eacedfae96f31651cd61026d1930ace234866607fb1bbd7a3465edd06a4937124b524ee1860dae90b3168f88c6f3b374c3f91b2502945ad077e40a2b0b37e27457cd13fe06c41aef56cf4236759cc5d4284b6d3c05d0631da23f589caa5e71698ec6a72172e8fab0a3d7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0x80, 0x17, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x2b, 0x6, "41f19546482b70512913e68081fe39657b8de899a4deeaa42d72eab19798ffb319ec4b4f48bc5f"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x6c, 0x1d, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x254f, 0x3}}]}, {0x32, 0x6, "479075641520688c7f5ce0b3fb7e1dbf57a266157b0f3ba8654af45c7b85b95001de075acd0c40fb7a16b2741d95"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x2930}}, 0x8000) unshare(0x62040200) fsopen(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff000000007110b9"], &(0x7f0000000480)='GPL\x00'}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, 0x0, &(0x7f0000000300)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, 0x0, &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, 0xffffffffffffffff, 0x4040099d}}, 0x48) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 38.26305949s ago: executing program 6 (id=5634): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) getdents(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x2) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) 37.983047068s ago: executing program 6 (id=5638): socket(0x10, 0x80003, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) 37.947940601s ago: executing program 6 (id=5639): socket(0x1d, 0x2, 0x6) unshare(0x10010080) fsopen(0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x10001, 0xee72}, 0x0, 0x10000, 0x8, 0x1, 0x7, 0x20005, 0xb, 0x0, 0x8, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000140)={&(0x7f0000000100)=""/32, 0x20}) lstat(&(0x7f0000002000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000140)=0xe5f, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000002060119000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274000000"], 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000500010007f0ca8d6743328eb89413000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e2200"/102], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r4) sendmmsg$sock(r2, &(0x7f0000000400)=[{{&(0x7f0000000380)=@pptp={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x47}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000004c0)="5b6a5cc78f5d00c97e94c1bc8ed04f051c4839414e6a67655ef37f3c226516b71e7e2e8c022f8d78fd851cd14dd69874a09ae615d269734c42fcd76517a2358697b3e361c885ba556c445cb2acf16cadbaa65f39ec692ece1433c849ad5a822499611a54c4ec93a1e1a543c530c69e84cd2fcd37213cd08a4f0c3bd1631e3b48cd485afb48bbaa6f305054d8dcbd87f26fb8dfc185e8381024d943c1d9d4f0e27f2755393c5a151e6b2d35b2ffc574d7518cf91910aa10c16e4c2d7ab76aac366ffe5d7ca0c9de3391308a12336aa2001092ac08973cb053bb1a33df104aaad92cbb62525dd3cca2fc045cc0615fcdfbaf0eb3bf02f8f2", 0xf7}], 0x1, &(0x7f0000000300)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x8f2}}], 0x30}}], 0x1, 0x4800) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 37.492931466s ago: executing program 6 (id=5647): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01c21668f6d1d66edb251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1ff}, 0x1100, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x300) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xb7}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4b}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 37.468130929s ago: executing program 57 (id=5647): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01c21668f6d1d66edb251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1ff}, 0x1100, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x300) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xb7}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4b}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 955.051726ms ago: executing program 2 (id=6245): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000240)=0x14) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r2 = socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 954.548626ms ago: executing program 5 (id=6247): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 913.22208ms ago: executing program 5 (id=6248): socket$isdn_base(0x22, 0x3, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000f00)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000240)={0x0, 0x7, 0x2, 0x0, 0x5de}) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000080)}, {&(0x7f0000000480)="86d0f724", 0x4}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3, 0x0, 0xfffffffffffffffd}, 0x18) socket$unix(0x1, 0x1, 0x0) r4 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x9, 0x0) r5 = signalfd4(r0, &(0x7f0000000080)={[0x5]}, 0x8, 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x8001, 0x1, 0xfffffffd}}) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x48) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r8, 0x4008240b, 0x0) pwrite64(r8, &(0x7f0000000100)='2', 0x1, 0x1fecd) fallocate(r6, 0x0, 0x6, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0xc, r6, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) fcntl$lock(r7, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x6}) 678.304743ms ago: executing program 5 (id=6251): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800100000400"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x18) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000200)={&(0x7f000065b000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/210, 0xd2, 0x1, &(0x7f0000000400)=""/56, 0x38}, &(0x7f00000002c0)=0x40) getpriority(0x3, 0x0) r5 = syz_io_uring_setup(0x4553, &(0x7f0000000240)={0x0, 0x59fc, 0x80, 0x3, 0xbd7f7ffd}, &(0x7f0000000480), &(0x7f0000000080)) r6 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_enter(r6, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x853e, 0x2, 0x3, 0xc4, 0x0, r6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) 545.107436ms ago: executing program 5 (id=6254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb57ae0fffc5a2a630b00c145", 0x18, 0xffffffffffffffff) 527.217698ms ago: executing program 0 (id=6256): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000009000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x149a82, 0x0) writev(r3, &(0x7f0000001a00)=[{&(0x7f0000000080)='b', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r5, 0xffffffffffffffff, 0x7, 0x0, @void}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r5], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$getregset(0x4205, r7, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) getsockopt$inet_tcp_buf(r2, 0x6, 0x1c, 0x0, &(0x7f0000000040)) lchown(0x0, 0x0, 0x0) 525.354908ms ago: executing program 5 (id=6257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf"], 0x14}}, 0x0) 470.903424ms ago: executing program 5 (id=6259): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30000000000800014000000001140000"], 0xd4}}, 0x8818) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'wg2\x00', &(0x7f0000000140)=@ethtool_dump={0x3f, 0x2, 0x4, 0x98, "e1c6061764d424dc6a657ce4116634d012e0e6f0e071ea9060e44afd038ea6c7f1cd025a719b7347e97fb863e1f60a30461f6f594f5784ec3103e57abcb74d7dffe1531236bc8110e374a55ca22e9ad5dda7f986d3335649d1fbed1fa85f66c0ac78c4222117924edec07fdfe92a84749591cb4f5542c19a0309037213e3128b78ee14665a9f539552995bd37038d152e48ad27c89202bcd"}}) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0xc) 465.413134ms ago: executing program 1 (id=6261): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000009000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) lchown(0x0, 0x0, 0x0) (fail_nth: 1) 452.150096ms ago: executing program 0 (id=6262): syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={&(0x7f00000000c0)="559c8d8c4e45337f27404660a8df4783ed234a9a29da0814bb6ca593ea3813e654759db960a4a0af588d646addc47332516e340612fffbe1b726b02e4b151c85434761428b05ff663954aacab456a4ccd1f6f6dce1b37b99d4534191c9b12047a818b705f87419c1cdf9fc78f90228933872099381fae1923d6196e9bbb85cffd53e7f61857ec58a1c0ee3957a1978c422049f939eefe41af4420eff6296c74ec0fcee3516851781203d72fc915603cf51dbd99ef8fcfcfe9a3aa6eaf214b391fdcf94f837a8f37c2acc", &(0x7f0000000500)=""/236, &(0x7f0000000380)="4bcbedf84b130f4552638de15face6d0e522ebdb056754afa915bcc63320ffb0b55572a87fc69c44689479289041e65feb38c87be9fa5858a22bab2c3e5efc19d3fb025749d97e7b9d7726b06fdb8614bf9e4711cebeef23a6d72da2a43358cd5aebf97166af52558a5b728a9fcd74ffe2be35ec6979892fa5bee31e6b019f365d7d", &(0x7f00000001c0)="046c1f7d07fdbb00215f88171c05bf317d86ec462e79a3a44b46ef839b2073b8094d10c40a9d0cd2cd85b272989de70dd9466932153069b7dc", 0x7fff, r0}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') r2 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) sync_file_range(r4, 0x0, 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffc, 0x86, 0xc, @buffer={0x0, 0xf9, &(0x7f0000000940)=""/249}, &(0x7f0000000a40)="19099435e374fd89804a813810538230acb892aed5f5007b43f5caf606d7c3f1db7471650a4740bc1011abbf89c6b36345c14f48ab87d52dd74461411d30abf0448e82a2113ddf600c5e69940621e37a752a3655cb25a227f291afafdb39a3a6597fb84bdbb145046e0af2c91221c00be948cf45264df23e2e4c903e9c9ba6ddfa0b7ce40aa2", &(0x7f0000000b00)=""/253, 0x6, 0x44, 0x1, &(0x7f00000007c0)}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r6, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r7 = msgget$private(0x0, 0x12) msgctl$IPC_RMID(r7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) setitimer(0x1, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000600)={{r9, r10/1000+10000}, {0x77359400}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) r11 = memfd_create(&(0x7f0000000800)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\xb4\v\x92\xd2\x99\xb8r2}, './file0\x00'}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x2}, 0x18) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r7 = getpid() r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r9, 0x0, 0x4, 0x0, 0x0) sendto$inet(r9, &(0x7f0000000240)='\a', 0x1, 0x40, &(0x7f00000002c0)={0x2, 0x4e21, @remote}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r11, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, r5, 0x0, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0c098685c75c421ebe1ebc6591a0bef9d5040000", @ANYRES32=r12, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="030000008000"/28], 0x50) epoll_wait(r3, &(0x7f0000000100)=[{}, {}, {}], 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) 84.461082ms ago: executing program 2 (id=6277): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0xae8}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000021c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x8}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="94e524c235a37660", @ANYRES32=r0, @ANYRESOCT=r2], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept$unix(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000000)=0x6e) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x23}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0xc, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x6, 0x8, 0x20002, 0xb, 0x0, 0xbc, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x2}, 0x10) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r8, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x4c, r9, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x14, 0x8, &(0x7f0000000040)=@raw=[@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xdcab}}], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) 83.699202ms ago: executing program 0 (id=6278): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) fcntl$setlease(r1, 0x400, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000700)='kfree\x00', r0, 0x0, 0x7}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) futex_waitv(&(0x7f0000001640)=[{0x1000, &(0x7f00000000c0)=0x81, 0x82}, {0x2, &(0x7f0000000140)=0x8000000000000000, 0x82}, {0x5cd7dc9e, &(0x7f0000000180)=0xfffffffffffffbc8, 0x2}, {0x1, &(0x7f00000001c0)=0x8, 0x82}, {0x264, &(0x7f0000000200)=0x5, 0x2}, {0x1000, &(0x7f0000000240)=0x32, 0x2}, {0xfffffffffffff4a2, &(0x7f0000000280)=0xfff, 0x82}, {0x7, &(0x7f00000002c0), 0x2}, {0x400, &(0x7f0000000300)=0x5, 0x82}, {0x5, &(0x7f0000000340)=0x7f, 0x2}, {0x6, &(0x7f0000000380)=0x4, 0x82}, {0x2, &(0x7f0000000440)=0x972b}, {0x9, &(0x7f0000000480)=0xf530, 0x82}, {0x8000000000000000, &(0x7f0000000500)=0x4400000000000000, 0x2}, {0x8000, &(0x7f0000000580)=0x6, 0x2}, {0xa3af, &(0x7f00000005c0)=0x1, 0x2}, {0x7fffffffffffffff, &(0x7f0000000600)=0x7, 0x2}, {0x4a, &(0x7f0000000640)=0xd, 0x2}, {0xffffffff, &(0x7f0000000680)=0x10000, 0x2}, {0x200, &(0x7f00000006c0)=0x6, 0x2}, {0x3, &(0x7f0000000740)=0x4f, 0x82}, {0x0, &(0x7f0000000780)=0x6, 0x82}, {0x2, &(0x7f00000007c0)=0x6, 0x82}, {0x344, &(0x7f0000000800)=0xffffffff, 0x82}, {0x7ff, &(0x7f0000000840)=0x1000, 0x82}, {0xa1d, &(0x7f0000000880)=0xbe4, 0x82}, {0x81, &(0x7f00000008c0)=0xe, 0x82}, {0x7, &(0x7f00000009c0)=0xfb5, 0x82}, {0x120000, &(0x7f0000000a00)=0x2, 0x2}, {0x1, &(0x7f0000000a40), 0x2}, {0x6, &(0x7f0000000a80)=0x3, 0x2}, {0x8, &(0x7f0000000ac0)=0x6, 0x82}, {0x8, &(0x7f0000000b00)=0x3, 0x2}, {0xffff, &(0x7f0000000b40)=0x7, 0x82}, {0x0, &(0x7f0000000b80)=0xfffffffffffffffd, 0x82}, {0x401, &(0x7f0000000bc0)=0x2, 0x2}, {0x2, &(0x7f0000000c00)=0xf8, 0x2}, {0x80000001, &(0x7f0000000c40)=0x7ff, 0x2}, {0xe, &(0x7f0000000c80)=0xffff}, {0xffffffffffffffb0, &(0x7f0000000cc0)=0x6, 0x82}, {0x0, &(0x7f0000000d00)=0x9, 0x82}, {0xfffffffffffffffb, &(0x7f0000000d40)=0x3, 0x2}, {0x0, &(0x7f0000000d80)=0xb1ac718, 0x82}, {0xfffffffffffffffc, &(0x7f0000000dc0)=0x4, 0x82}, {0x3, &(0x7f0000000e00)=0x1024, 0x2}, {0x4, &(0x7f0000000e40)=0x4, 0x2}, {0xffffffffffffff18, &(0x7f0000000e80)=0x3, 0x2}, {0x7, &(0x7f0000000ec0)=0x8, 0x82}, {0x100000001, &(0x7f0000000f00)=0x7, 0x2}, {0x7ff, &(0x7f0000000f40)=0x100, 0x2}, {0x5, &(0x7f0000000f80)=0x80000000800, 0x2}, {0xf68, &(0x7f0000000fc0)=0x2, 0x82}, {0x1, &(0x7f0000001000), 0x2}, {0x47c, &(0x7f0000001040)=0x100000001, 0x2}, {0x3, &(0x7f0000001080)=0x8, 0x82}, {0x4, &(0x7f00000010c0)=0x4, 0x82}, {0xf, &(0x7f0000001100)=0x3, 0x82}, {0x3, &(0x7f0000001140)=0x2, 0x82}, {0x0, &(0x7f0000001180)=0x605, 0x82}, {0x2, &(0x7f00000011c0), 0x82}, {0x1, &(0x7f0000001200)=0x5, 0x82}, {0x2, &(0x7f0000001240)=0x3, 0x82}, {0x1, &(0x7f0000001280), 0x2}, {0x401, &(0x7f00000012c0)=0xffffffffffffffff, 0x2}, {0x2, &(0x7f0000001300)=0x39cd, 0x82}, {0xe2, &(0x7f0000001340)=0x2, 0x82}, {0xfe, &(0x7f0000001380)=0x400, 0x82}, {0x5, &(0x7f00000013c0)=0x7fffffff, 0x82}, {0x7, &(0x7f0000001400)=0x4, 0x82}, {0xf, &(0x7f0000001440)=0x8, 0x2}, {0x0, &(0x7f0000001480)=0x9, 0x82}, {0x4, 0x0, 0x82}, {0x1, &(0x7f0000001500)=0x2, 0x2}, {0x6, &(0x7f0000001540)=0x1, 0x2}, {0x9, &(0x7f0000001580)=0x3, 0x2}, {0x1, &(0x7f00000015c0)=0x8, 0x2}, {0x5, &(0x7f0000001600)=0x80000001, 0x82}], 0x4d, 0x0, &(0x7f0000001dc0), 0x1) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @broadcast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)=@gettfilter={0x44, 0x2e, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0x8, 0x10}, {0x9, 0x2}}, [{0x8, 0xb, 0xffff}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8804}, 0x8000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x1000000000000000) 45.402286ms ago: executing program 8 (id=6279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb57ae0fffc5a2a630b00c145", 0x18, 0xffffffffffffffff) 45.148266ms ago: executing program 2 (id=6280): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 44.784976ms ago: executing program 0 (id=6281): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x39}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0xffa1) 37.268037ms ago: executing program 8 (id=6282): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(r3, &(0x7f0000000300)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/198) 922.87µs ago: executing program 0 (id=6283): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01c21668f6d1d66edb251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1ff}, 0x1100, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf25"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x300) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xb7}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4b}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 619.96µs ago: executing program 0 (id=6284): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000240)=0x14) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r2 = socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 210.31µs ago: executing program 2 (id=6285): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$cgroup_int(r0, &(0x7f0000000040)=0x922, 0x12) 0s ago: executing program 8 (id=6286): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 32][T20639] Tainted: [W]=WARN [ 451.677241][T20639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 451.677263][T20639] Call Trace: [ 451.677270][T20639] [ 451.677278][T20639] __dump_stack+0x1d/0x30 [ 451.677301][T20639] dump_stack_lvl+0xe8/0x140 [ 451.677341][T20639] dump_stack+0x15/0x1b [ 451.677360][T20639] should_fail_ex+0x265/0x280 [ 451.677423][T20639] ? pagemap_read+0x184/0x5e0 [ 451.677454][T20639] should_failslab+0x8c/0xb0 [ 451.677488][T20639] __kmalloc_cache_noprof+0x4c/0x4a0 [ 451.677541][T20639] pagemap_read+0x184/0x5e0 [ 451.677571][T20639] ? __pfx_pagemap_read+0x10/0x10 [ 451.677657][T20639] vfs_read+0x1a5/0x770 [ 451.677682][T20639] ? __fget_files+0x184/0x1c0 [ 451.677712][T20639] ? __rcu_read_unlock+0x4f/0x70 [ 451.677746][T20639] ? __fget_files+0x184/0x1c0 [ 451.677837][T20639] __x64_sys_pread64+0xfd/0x150 [ 451.677867][T20639] x64_sys_call+0x29e6/0x3000 [ 451.677895][T20639] do_syscall_64+0xd2/0x200 [ 451.677929][T20639] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 451.677979][T20639] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 451.678005][T20639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.678033][T20639] RIP: 0033:0x7f1d5c22eec9 [ 451.678049][T20639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.678115][T20639] RSP: 002b:00007f1d5ac97038 EFLAGS: 00000246 [ 451.678115][T20545] team0: Port device team_slave_0 added [ 451.678132][T20639] ORIG_RAX: 0000000000000011 [ 451.678143][T20639] RAX: ffffffffffffffda RBX: 00007f1d5c485fa0 RCX: 00007f1d5c22eec9 [ 451.678158][T20639] RDX: 0000000000019000 RSI: 0000200000000200 RDI: 0000000000000003 [ 451.678174][T20639] RBP: 00007f1d5ac97090 R08: 0000000000000000 R09: 0000000000000000 [ 451.678190][T20639] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.678209][T20639] R13: 00007f1d5c486038 R14: 00007f1d5c485fa0 R15: 00007ffd136cf498 [ 451.678279][T20639] [ 451.889292][T20545] team0: Port device team_slave_1 added [ 451.962937][T20650] loop1: detected capacity change from 0 to 2048 [ 451.977771][T20650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.990112][T20650] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 451.990182][T20653] loop3: detected capacity change from 0 to 1024 [ 452.001601][ T37] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.007800][T20653] EXT4-fs: Ignoring removed nomblk_io_submit option [ 452.026469][T20653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.055483][T20117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.107104][T20236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.213380][T20659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5498'. [ 452.385667][ T37] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.525636][T20631] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.567824][T20545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.574927][T20545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.601008][T20545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.626849][T20471] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 452.785673][ T37] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.835215][T20545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.842215][T20545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.868453][T20545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.882759][T20471] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 452.990927][T20686] loop3: detected capacity change from 0 to 512 [ 453.000291][T20686] loop3: detected capacity change from 0 to 128 [ 453.010255][T20686] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 453.023360][T20686] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 453.034391][T20686] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 453.043171][T20686] FAT-fs (loop3): Filesystem has been set read-only [ 453.050903][T20631] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.086471][T20471] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 453.127107][T20471] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 453.326859][T20545] hsr_slave_0: entered promiscuous mode [ 453.335598][T20545] hsr_slave_1: entered promiscuous mode [ 453.341629][T20545] debugfs: 'hsr0' already exists in 'hsr' [ 453.347442][T20545] Cannot create hsr debugfs directory [ 453.371670][T20700] loop3: detected capacity change from 0 to 1024 [ 453.381205][T20700] EXT4-fs: Ignoring removed nomblk_io_submit option [ 453.396648][T20703] loop1: detected capacity change from 0 to 1024 [ 453.403363][T20703] EXT4-fs: Ignoring removed orlov option [ 453.410637][T20700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.416966][T20703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.475562][T20117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.487255][T20236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.525103][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 453.525184][ T29] audit: type=1400 audit(1760091721.566:19143): avc: denied { write } for pid=20709 comm="syz.1.5509" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 453.555473][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.566756][ T29] audit: type=1400 audit(1760091721.606:19144): avc: denied { ioctl } for pid=20711 comm="syz.3.5510" path="socket:[84748]" dev="sockfs" ino=84748 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 453.682811][T20717] loop1: detected capacity change from 0 to 512 [ 453.691080][T20717] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 453.699503][T20717] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 453.708693][T20631] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.719660][T20717] EXT4-fs (loop1): 1 truncate cleaned up [ 453.726917][T20717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.740763][T20717] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.5509: Logical block already allocated [ 453.753242][T20717] EXT4-fs (loop1): Remounting filesystem read-only [ 453.915402][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.135887][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.192612][ T263] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.203560][T20471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.245597][T20545] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.395682][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.524882][ T1715] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.565369][T20545] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.845226][T20117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.863499][ T29] audit: type=1400 audit(1760091722.896:19145): avc: denied { create } for pid=20721 comm="syz.1.5513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 454.883234][ T29] audit: type=1400 audit(1760091722.896:19146): avc: denied { setopt } for pid=20721 comm="syz.1.5513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 454.902891][ T29] audit: type=1400 audit(1760091722.906:19147): avc: denied { bind } for pid=20721 comm="syz.1.5513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 454.930753][ T5208] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.955450][T20545] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.998203][ T263] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.010970][T20471] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.030561][ T263] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.037771][ T263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.081512][T20730] loop8: detected capacity change from 0 to 1024 [ 455.088612][T20730] EXT4-fs: Ignoring removed orlov option [ 455.095500][T20545] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.116491][T20730] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.137439][ T263] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.144639][ T263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.168588][T20471] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 455.179353][T20471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 455.192457][T20343] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.251086][ T37] bridge_slave_1: left allmulticast mode [ 455.257231][ T37] bridge_slave_1: left promiscuous mode [ 455.263032][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.283204][ T29] audit: type=1326 audit(1760091723.316:19148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20749 comm="syz.8.5521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 455.307097][ T29] audit: type=1326 audit(1760091723.316:19149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20749 comm="syz.8.5521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 455.330829][ T29] audit: type=1326 audit(1760091723.326:19150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20749 comm="syz.8.5521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 455.355075][ T37] bridge_slave_0: left allmulticast mode [ 455.355124][ T29] audit: type=1326 audit(1760091723.376:19151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20749 comm="syz.8.5521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 455.360828][ T37] bridge_slave_0: left promiscuous mode [ 455.384428][ T29] audit: type=1326 audit(1760091723.376:19152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20749 comm="syz.8.5521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 455.413984][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.421283][T20751] loop8: detected capacity change from 0 to 512 [ 455.436923][T20751] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.449652][T20751] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.460876][ T37] bridge_slave_1: left allmulticast mode [ 455.466609][ T37] bridge_slave_1: left promiscuous mode [ 455.472345][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.485105][T20756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5522'. [ 455.505808][T20343] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.524914][ T37] bridge_slave_0: left allmulticast mode [ 455.530588][ T37] bridge_slave_0: left promiscuous mode [ 455.536398][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.575315][ T37] bridge_slave_1: left allmulticast mode [ 455.581253][ T37] bridge_slave_1: left promiscuous mode [ 455.587008][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.639283][T20759] IPv6: Can't replace route, no match found [ 455.645510][ T37] bridge_slave_0: left allmulticast mode [ 455.651710][ T37] bridge_slave_0: left promiscuous mode [ 455.657453][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.334873][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.414926][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.457392][ T37] bond0 (unregistering): Released all slaves [ 456.554869][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.634840][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.675495][ T37] bond0 (unregistering): Released all slaves [ 456.785053][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.864973][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.905413][ T37] bond0 (unregistering): Released all slaves [ 456.937186][T20756] bridge_slave_1: left allmulticast mode [ 456.943072][T20756] bridge_slave_1: left promiscuous mode [ 456.948719][T20756] FAULT_INJECTION: forcing a failure. [ 456.948719][T20756] name failslab, interval 1, probability 0, space 0, times 0 [ 456.961421][T20756] CPU: 0 UID: 0 PID: 20756 Comm: syz.1.5522 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 456.961470][T20756] Tainted: [W]=WARN [ 456.961480][T20756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 456.961497][T20756] Call Trace: [ 456.961506][T20756] [ 456.961515][T20756] __dump_stack+0x1d/0x30 [ 456.961542][T20756] dump_stack_lvl+0xe8/0x140 [ 456.961709][T20756] dump_stack+0x15/0x1b [ 456.961763][T20756] should_fail_ex+0x265/0x280 [ 456.961799][T20756] should_failslab+0x8c/0xb0 [ 456.961827][T20756] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 456.961911][T20756] ? __alloc_skb+0x101/0x320 [ 456.962027][T20756] __alloc_skb+0x101/0x320 [ 456.962060][T20756] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 456.962103][T20756] rtmsg_ifinfo+0x6d/0x110 [ 456.962144][T20756] __dev_notify_flags+0x76/0x1a0 [ 456.962211][T20756] __dev_set_promiscuity+0x1d8/0x450 [ 456.962239][T20756] netif_set_promiscuity+0x39/0x90 [ 456.962262][T20756] dev_set_promiscuity+0xc1/0x170 [ 456.962286][T20756] del_nbp+0xc7/0x790 [ 456.962334][T20756] br_dev_delete+0x4e/0xe0 [ 456.962366][T20756] ? __pfx_br_dev_delete+0x10/0x10 [ 456.962403][T20756] rtnl_dellink+0x3bd/0x550 [ 456.962520][T20756] ? selinux_capable+0x31/0x40 [ 456.962542][T20756] ? security_capable+0x83/0x90 [ 456.962595][T20756] ? ns_capable+0x7d/0xb0 [ 456.962617][T20756] ? __pfx_rtnl_dellink+0x10/0x10 [ 456.962651][T20756] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 456.962699][T20756] netlink_rcv_skb+0x120/0x220 [ 456.962738][T20756] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 456.962786][T20756] rtnetlink_rcv+0x1c/0x30 [ 456.962914][T20756] netlink_unicast+0x5c0/0x690 [ 456.962950][T20756] netlink_sendmsg+0x58b/0x6b0 [ 456.962992][T20756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.963109][T20756] __sock_sendmsg+0x142/0x180 [ 456.963137][T20756] sock_write_iter+0x1a7/0x1f0 [ 456.963185][T20756] ? __pfx_sock_write_iter+0x10/0x10 [ 456.963255][T20756] vfs_write+0x527/0x960 [ 456.963310][T20756] ksys_write+0xda/0x1a0 [ 456.963342][T20756] __x64_sys_write+0x40/0x50 [ 456.963376][T20756] x64_sys_call+0x2802/0x3000 [ 456.963397][T20756] do_syscall_64+0xd2/0x200 [ 456.963422][T20756] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 456.963465][T20756] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 456.963492][T20756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.963555][T20756] RIP: 0033:0x7f1d5c22eec9 [ 456.963574][T20756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.963597][T20756] RSP: 002b:00007f1d5ac76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 456.963617][T20756] RAX: ffffffffffffffda RBX: 00007f1d5c486090 RCX: 00007f1d5c22eec9 [ 456.963632][T20756] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000007 [ 456.963649][T20756] RBP: 00007f1d5ac76090 R08: 0000000000000000 R09: 0000000000000000 [ 456.963769][T20756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.963784][T20756] R13: 00007f1d5c486128 R14: 00007f1d5c486090 R15: 00007ffd136cf498 [ 456.963802][T20756] [ 456.963831][T20756] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.315061][T20756] bridge_slave_0: left allmulticast mode [ 457.320780][T20756] bridge_slave_0: left promiscuous mode [ 457.326613][T20756] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.554664][T20758] ªªªªªª: renamed from vlan0 (while UP) [ 457.607336][T20471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.704543][ T37] hsr_slave_0: left promiscuous mode [ 457.744560][ T37] hsr_slave_1: left promiscuous mode [ 457.750389][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.757872][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.795146][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.802608][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.934599][ T37] hsr_slave_0: left promiscuous mode [ 457.944683][ T37] hsr_slave_1: left promiscuous mode [ 457.950399][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.957827][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.004898][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.012504][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.164807][ T37] hsr_slave_0: left promiscuous mode [ 458.184619][ T37] hsr_slave_1: left promiscuous mode [ 458.190301][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.197768][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.244935][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.252482][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.295075][ T37] veth1_macvtap: left promiscuous mode [ 458.300682][ T37] veth0_macvtap: left promiscuous mode [ 458.306308][ T37] veth1_vlan: left promiscuous mode [ 458.311556][ T37] veth0_vlan: left promiscuous mode [ 458.424575][ T37] veth1_macvtap: left promiscuous mode [ 458.430215][ T37] veth0_macvtap: left promiscuous mode [ 458.435844][ T37] veth1_vlan: left promiscuous mode [ 458.441136][ T37] veth0_vlan: left promiscuous mode [ 458.569299][T20776] loop8: detected capacity change from 0 to 1024 [ 458.576068][T20776] EXT4-fs: Ignoring removed orlov option [ 458.584649][ T37] veth1_macvtap: left promiscuous mode [ 458.590270][ T37] veth0_macvtap: left promiscuous mode [ 458.595904][ T37] veth1_vlan: left promiscuous mode [ 458.597589][T20776] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.601301][ T37] veth0_vlan: left promiscuous mode [ 458.665206][T20343] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.015319][ T37] team0 (unregistering): Port device team_slave_1 removed [ 459.054932][ T37] team0 (unregistering): Port device team_slave_0 removed [ 459.194831][ T37] team0 (unregistering): Port device team_slave_1 removed [ 459.224706][ T37] team0 (unregistering): Port device team_slave_0 removed [ 459.364701][ T37] team0 (unregistering): Port device team_slave_1 removed [ 459.424806][ T37] team0 (unregistering): Port device team_slave_0 removed [ 459.490637][T20545] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 459.517665][T20545] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 459.575665][T20772] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.675423][T20786] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.714754][T20727] lo speed is unknown, defaulting to 1000 [ 459.720582][T20545] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 459.805584][T20772] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.865755][T20786] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.905829][T20545] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 459.975418][T20786] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.055597][T20772] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.125471][T20786] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.205804][T20772] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.309384][T20545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.325441][ T5208] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.342222][T20471] veth0_vlan: entered promiscuous mode [ 460.351814][ T5216] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.360436][T20727] chnl_net:caif_netlink_parms(): no params data found [ 460.382141][ T1715] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.449894][ T5208] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.459580][T20545] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.472218][T20471] veth1_vlan: entered promiscuous mode [ 460.495450][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 460.495469][ T29] audit: type=1400 audit(1760091728.536:19172): avc: denied { create } for pid=20809 comm="syz.8.5531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 460.522293][ T29] audit: type=1400 audit(1760091728.536:19173): avc: denied { ioctl } for pid=20809 comm="syz.8.5531" path="socket:[87180]" dev="sockfs" ino=87180 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 460.547977][T20812] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5531'. [ 460.635940][T20727] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.643138][T20727] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.650358][T20727] bridge_slave_0: entered allmulticast mode [ 460.656941][T20727] bridge_slave_0: entered promiscuous mode [ 460.666223][T20812] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5531'. [ 460.675393][T20727] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.682489][T20727] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.689738][T20727] bridge_slave_1: entered allmulticast mode [ 460.696301][T20727] bridge_slave_1: entered promiscuous mode [ 460.777702][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.784836][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.833584][T20816] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5533'. [ 460.876848][T20727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.889684][T20727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.900106][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.907254][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.921271][ T29] audit: type=1400 audit(1760091728.956:19174): avc: denied { bind } for pid=20817 comm="syz.8.5534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 460.944052][ T29] audit: type=1400 audit(1760091728.956:19175): avc: denied { write } for pid=20817 comm="syz.8.5534" path="socket:[87218]" dev="sockfs" ino=87218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 460.949448][T20818] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 460.978072][ T29] audit: type=1400 audit(1760091729.016:19176): avc: denied { relabelto } for pid=20817 comm="syz.8.5534" name="cgroup.procs" dev="cgroup" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 460.984617][ T1715] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.005838][ T29] audit: type=1400 audit(1760091729.016:19177): avc: denied { associate } for pid=20817 comm="syz.8.5534" name="cgroup.procs" dev="cgroup" ino=788 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 461.043084][ T29] audit: type=1400 audit(1760091729.056:19178): avc: denied { bind } for pid=20817 comm="syz.8.5534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 461.115025][ T1715] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.199216][T20471] veth0_macvtap: entered promiscuous mode [ 461.214218][T20545] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 461.224767][T20545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 461.237798][ T1715] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.246611][ T1715] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.256365][T20727] team0: Port device team_slave_0 added [ 461.257397][ T29] audit: type=1400 audit(1760091729.296:19179): avc: denied { connect } for pid=20820 comm="syz.1.5535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 461.283385][ T29] audit: type=1400 audit(1760091729.296:19180): avc: denied { write } for pid=20820 comm="syz.1.5535" path="socket:[86459]" dev="sockfs" ino=86459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 461.315836][T20471] veth1_macvtap: entered promiscuous mode [ 461.324966][T20727] team0: Port device team_slave_1 added [ 461.359907][ T29] audit: type=1400 audit(1760091729.396:19181): avc: granted { setsecparam } for pid=20822 comm="syz.1.5536" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 461.361195][T20824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 461.386579][T20824] IPv6: NLM_F_CREATE should be set when creating new route [ 461.393796][T20824] IPv6: NLM_F_CREATE should be set when creating new route [ 461.495687][T20727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.502793][T20727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.528783][T20727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.540377][T20727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.547493][T20727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.573596][T20727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.588192][T20471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.601414][T20471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.633184][T20831] 9pnet_fd: Insufficient options for proto=fd [ 461.767330][T20727] hsr_slave_0: entered promiscuous mode [ 461.773447][T20727] hsr_slave_1: entered promiscuous mode [ 461.833780][T20834] netlink: 'syz.1.5538': attribute type 1 has an invalid length. [ 461.841789][T20834] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5538'. [ 461.920494][ T5216] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.936158][ T5216] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.948072][T20545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.961955][ T5216] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.015633][ T5216] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.447558][T20545] veth0_vlan: entered promiscuous mode [ 462.528373][T20545] veth1_vlan: entered promiscuous mode [ 462.544758][T20545] veth0_macvtap: entered promiscuous mode [ 462.552172][T20545] veth1_macvtap: entered promiscuous mode [ 462.563854][T20545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.575647][T20545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.587502][ T263] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.626194][ T263] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.635657][ T263] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.015723][ T37] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.103132][ T263] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.112020][T20861] netlink: 'syz.1.5542': attribute type 29 has an invalid length. [ 463.195833][ T37] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.235158][T20872] loop8: detected capacity change from 0 to 256 [ 463.241813][T20872] vfat: Unknown parameter 'norodir' [ 463.291334][T20878] loop8: detected capacity change from 0 to 2048 [ 463.316225][T20878] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.334434][T20878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.345786][ T37] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.416983][T20883] lo speed is unknown, defaulting to 1000 [ 463.637637][ T37] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.673126][T20889] loop9: detected capacity change from 0 to 512 [ 463.683764][T20889] loop9: detected capacity change from 0 to 128 [ 463.690890][T20889] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 463.711145][T20889] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 463.720630][T20878] loop8: detected capacity change from 0 to 512 [ 463.723207][T20889] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 463.735630][T20889] FAT-fs (loop9): Filesystem has been set read-only [ 463.755685][T20727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 463.765866][T20878] EXT4-fs error (device loop8): ext4_do_update_inode:5624: inode #16: comm syz.8.5548: corrupted inode contents [ 463.778457][T20878] EXT4-fs error (device loop8): ext4_dirty_inode:6509: inode #16: comm syz.8.5548: mark_inode_dirty error [ 463.793312][T20878] EXT4-fs error (device loop8): ext4_do_update_inode:5624: inode #16: comm syz.8.5548: corrupted inode contents [ 463.817964][T20727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 463.825382][T20878] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.5548: mark_inode_dirty error [ 463.843607][T20878] EXT4-fs error (device loop8): ext4_do_update_inode:5624: inode #16: comm syz.8.5548: corrupted inode contents [ 463.856167][T20878] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 463.866244][T20878] EXT4-fs error (device loop8): ext4_do_update_inode:5624: inode #16: comm syz.8.5548: corrupted inode contents [ 463.880748][T20727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 463.888071][T20878] EXT4-fs error (device loop8): ext4_truncate:4637: inode #16: comm syz.8.5548: mark_inode_dirty error [ 463.902481][T20878] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 463.930322][T20727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 463.937662][T20878] EXT4-fs (loop8): 1 truncate cleaned up [ 463.944042][T20878] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.957646][T20878] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.994698][ T5216] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:9: Failed to release dquot type 1 [ 464.015149][T20878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.029484][T20897] sd 0:0:1:0: device reset [ 464.080180][T20727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.093396][ T37] bridge_slave_1: left allmulticast mode [ 464.099193][ T37] bridge_slave_1: left promiscuous mode [ 464.104961][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.147917][T20911] SELinux: failed to load policy [ 464.174801][ T37] bridge_slave_0: left allmulticast mode [ 464.180559][ T37] bridge_slave_0: left promiscuous mode [ 464.186443][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.292442][T20925] loop8: detected capacity change from 0 to 128 [ 464.404727][T20925] syz.8.5560: attempt to access beyond end of device [ 464.404727][T20925] loop8: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 464.418363][T20925] syz.8.5560: attempt to access beyond end of device [ 464.418363][T20925] loop8: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 464.457034][T20925] syz.8.5560: attempt to access beyond end of device [ 464.457034][T20925] loop8: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 464.471411][T20927] sock: sock_set_timeout: `syz.8.5560' (pid 20927) tries to set negative timeout [ 464.497395][T20925] syz.8.5560: attempt to access beyond end of device [ 464.497395][T20925] loop8: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 464.511842][T20925] syz.8.5560: attempt to access beyond end of device [ 464.511842][T20925] loop8: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 464.525542][T20925] syz.8.5560: attempt to access beyond end of device [ 464.525542][T20925] loop8: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 464.546199][T20925] syz.8.5560: attempt to access beyond end of device [ 464.546199][T20925] loop8: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 464.568046][T20925] syz.8.5560: attempt to access beyond end of device [ 464.568046][T20925] loop8: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 464.581702][T20925] syz.8.5560: attempt to access beyond end of device [ 464.581702][T20925] loop8: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 464.596470][T20925] syz.8.5560: attempt to access beyond end of device [ 464.596470][T20925] loop8: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 464.654869][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.698500][T20931] loop8: detected capacity change from 0 to 512 [ 464.708536][T20931] loop8: detected capacity change from 0 to 128 [ 464.714877][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.715686][T20931] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 464.737931][T20931] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 464.805570][ T37] bond0 (unregistering): Released all slaves [ 464.889302][T20931] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 464.898023][T20931] FAT-fs (loop8): Filesystem has been set read-only [ 464.917960][T20727] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.951103][T20911] syz.6.5555 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 464.965297][T20911] CPU: 1 UID: 0 PID: 20911 Comm: syz.6.5555 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 464.965344][T20911] Tainted: [W]=WARN [ 464.965353][T20911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 464.965399][T20911] Call Trace: [ 464.965408][T20911] [ 464.965421][T20911] __dump_stack+0x1d/0x30 [ 464.965482][T20911] dump_stack_lvl+0xe8/0x140 [ 464.965509][T20911] dump_stack+0x15/0x1b [ 464.965541][T20911] dump_header+0x81/0x220 [ 464.965587][T20911] oom_kill_process+0x342/0x400 [ 464.965624][T20911] out_of_memory+0x979/0xb80 [ 464.965713][T20911] try_charge_memcg+0x5e6/0x9e0 [ 464.965759][T20911] obj_cgroup_charge_pages+0xa6/0x150 [ 464.965810][T20911] __memcg_kmem_charge_page+0x9f/0x170 [ 464.965961][T20911] __alloc_frozen_pages_noprof+0x188/0x360 [ 464.965999][T20911] alloc_pages_mpol+0xb3/0x260 [ 464.966027][T20911] alloc_pages_noprof+0x90/0x130 [ 464.966055][T20911] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 464.966173][T20911] ? mas_max_gap+0x2b4/0x390 [ 464.966214][T20911] __kvmalloc_node_noprof+0x483/0x670 [ 464.966332][T20911] ? ip_set_alloc+0x24/0x30 [ 464.966410][T20911] ? ip_set_alloc+0x24/0x30 [ 464.966436][T20911] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 464.966480][T20911] ip_set_alloc+0x24/0x30 [ 464.966572][T20911] hash_netiface_create+0x282/0x740 [ 464.966643][T20911] ? __pfx_hash_netiface_create+0x10/0x10 [ 464.966683][T20911] ip_set_create+0x3cc/0x970 [ 464.966739][T20911] ? __nla_parse+0x40/0x60 [ 464.966840][T20911] nfnetlink_rcv_msg+0x4c6/0x590 [ 464.966902][T20911] netlink_rcv_skb+0x120/0x220 [ 464.966937][T20911] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 464.967005][T20911] nfnetlink_rcv+0x167/0x16c0 [ 464.967034][T20911] ? kmem_cache_free+0xe4/0x3d0 [ 464.967069][T20911] ? __kfree_skb+0x109/0x150 [ 464.967103][T20911] ? nlmon_xmit+0x4f/0x60 [ 464.967135][T20911] ? consume_skb+0x49/0x150 [ 464.967215][T20911] ? nlmon_xmit+0x4f/0x60 [ 464.967247][T20911] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 464.967305][T20911] ? __dev_queue_xmit+0x1200/0x2000 [ 464.967345][T20911] ? __dev_queue_xmit+0x182/0x2000 [ 464.967388][T20911] ? ref_tracker_free+0x37d/0x3e0 [ 464.967445][T20911] ? __netlink_deliver_tap+0x4dc/0x500 [ 464.967509][T20911] netlink_unicast+0x5c0/0x690 [ 464.967547][T20911] netlink_sendmsg+0x58b/0x6b0 [ 464.967613][T20911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.967645][T20911] __sock_sendmsg+0x142/0x180 [ 464.967674][T20911] ____sys_sendmsg+0x31e/0x4e0 [ 464.967780][T20911] ___sys_sendmsg+0x17b/0x1d0 [ 464.967956][T20911] __x64_sys_sendmsg+0xd4/0x160 [ 464.968026][T20911] x64_sys_call+0x191e/0x3000 [ 464.968057][T20911] do_syscall_64+0xd2/0x200 [ 464.968091][T20911] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 464.968202][T20911] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 464.968225][T20911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.968255][T20911] RIP: 0033:0x7f1f3ff2eec9 [ 464.968277][T20911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.968303][T20911] RSP: 002b:00007f1f3e98f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.968332][T20911] RAX: ffffffffffffffda RBX: 00007f1f40185fa0 RCX: 00007f1f3ff2eec9 [ 464.968351][T20911] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 464.968369][T20911] RBP: 00007f1f3ffb1f91 R08: 0000000000000000 R09: 0000000000000000 [ 464.968387][T20911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.968402][T20911] R13: 00007f1f40186038 R14: 00007f1f40185fa0 R15: 00007ffca9638508 [ 464.968428][T20911] [ 464.968438][T20911] memory: usage 307200kB, limit 307200kB, failcnt 154 [ 465.261138][T20937] loop9: detected capacity change from 0 to 2048 [ 465.268662][T20911] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 465.338959][T20937] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.341848][T20911] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 465.361686][T20911] Memory cgroup stats for /syz6: [ 465.363530][T20911] cache 0 [ 465.371537][T20911] rss 4096 [ 465.374697][T20911] shmem 0 [ 465.377771][T20911] mapped_file 0 [ 465.381244][T20911] dirty 0 [ 465.384270][T20911] writeback 4096 [ 465.387985][T20911] workingset_refault_anon 13 [ 465.392581][T20911] workingset_refault_file 0 [ 465.397219][T20911] swap 192512 [ 465.400584][T20911] swapcached 12288 [ 465.404636][T20911] pgpgin 176880 [ 465.408170][T20911] pgpgout 176876 [ 465.411813][T20911] pgfault 191866 [ 465.416128][T20911] pgmajfault 7 [ 465.419530][T20911] inactive_anon 12288 [ 465.423564][T20911] active_anon 0 [ 465.427485][T20911] inactive_file 4096 [ 465.431390][T20911] active_file 0 [ 465.434913][T20911] unevictable 0 [ 465.438387][T20911] hierarchical_memory_limit 314572800 [ 465.443800][T20911] hierarchical_memsw_limit 9223372036854771712 [ 465.450004][T20911] total_cache 0 [ 465.453564][T20911] total_rss 4096 [ 465.457153][T20911] total_shmem 0 [ 465.460636][T20911] total_mapped_file 0 [ 465.464722][T20911] total_dirty 0 [ 465.468188][T20911] total_writeback 4096 [ 465.472291][T20911] total_workingset_refault_anon 13 [ 465.477438][T20911] total_workingset_refault_file 0 [ 465.482471][T20911] total_swap 192512 [ 465.486510][T20911] total_swapcached 12288 [ 465.490780][T20911] total_pgpgin 176880 [ 465.494815][T20911] total_pgpgout 176876 [ 465.498959][T20911] total_pgfault 191866 [ 465.503181][T20911] total_pgmajfault 7 [ 465.507225][T20911] total_inactive_anon 12288 [ 465.511747][T20911] total_active_anon 0 [ 465.511955][T20937] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.5562: bg 0: block 2: invalid block bitmap [ 465.515797][T20911] total_inactive_file 4096 [ 465.532664][T20911] total_active_file 0 [ 465.534859][T20937] EXT4-fs (loop9): Remounting filesystem read-only [ 465.536687][T20911] total_unevictable 0 [ 465.536726][T20911] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.5555,pid=20910,uid=0 [ 465.562075][T20911] Memory cgroup out of memory: Killed process 20910 (syz.6.5555) total-vm:96064kB, anon-rss:1132kB, file-rss:22460kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 465.610972][T20941] x_tables: ip_tables: ah match: only valid for protocol 51 [ 465.625048][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 465.625110][ T29] audit: type=1400 audit(1760091733.656:19231): avc: denied { ioctl } for pid=20940 comm="syz.8.5563" path="socket:[87694]" dev="sockfs" ino=87694 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 465.631798][T20471] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.656311][ T29] audit: type=1400 audit(1760091733.656:19232): avc: denied { bind } for pid=20940 comm="syz.8.5563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 465.684881][ T29] audit: type=1326 audit(1760091733.656:19233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20940 comm="syz.8.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 465.708501][ T29] audit: type=1326 audit(1760091733.656:19234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20940 comm="syz.8.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 465.732253][ T29] audit: type=1326 audit(1760091733.656:19235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20940 comm="syz.8.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 465.756087][ T29] audit: type=1326 audit(1760091733.656:19236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20940 comm="syz.8.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 465.779727][ T29] audit: type=1326 audit(1760091733.656:19237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20940 comm="syz.8.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 465.803507][ T29] audit: type=1326 audit(1760091733.656:19238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20940 comm="syz.8.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd10673d617 code=0x7ffc0000 [ 465.823823][T20941] Cannot find add_set index 0 as target [ 465.827277][ T29] audit: type=1326 audit(1760091733.656:19239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20940 comm="syz.8.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 465.856343][ T29] audit: type=1326 audit(1760091733.656:19240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20940 comm="syz.8.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 465.892803][T20944] loop8: detected capacity change from 0 to 1024 [ 465.899859][T20944] EXT4-fs: Ignoring removed nomblk_io_submit option [ 465.916700][T20944] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.948910][T20950] 9pnet_fd: Insufficient options for proto=fd [ 465.968581][T20932] pim6reg: entered allmulticast mode [ 465.974195][T20933] pim6reg: left allmulticast mode [ 465.981764][T20343] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.007260][T20952] loop8: detected capacity change from 0 to 512 [ 466.017573][T20952] loop8: detected capacity change from 0 to 128 [ 466.024513][T20952] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 466.039919][ T5208] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.044793][T20952] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 466.047138][ T5208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.059352][T20952] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 466.072135][T20952] FAT-fs (loop8): Filesystem has been set read-only [ 466.076868][ T5208] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.086163][ T5208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.100437][T20928] lo speed is unknown, defaulting to 1000 [ 466.204676][ T37] hsr_slave_0: left promiscuous mode [ 466.239173][T20964] netlink: 'syz.8.5569': attribute type 1 has an invalid length. [ 466.246989][T20964] netlink: 224 bytes leftover after parsing attributes in process `syz.8.5569'. [ 466.247039][ T37] hsr_slave_1: left promiscuous mode [ 466.261833][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.269547][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.315021][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.322539][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.351619][T20968] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5572'. [ 466.365590][T20968] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5572'. [ 466.374726][T20968] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5572'. [ 466.384913][ T37] veth1_macvtap: left promiscuous mode [ 466.390419][ T37] veth0_macvtap: left promiscuous mode [ 466.395958][ T37] veth1_vlan: left promiscuous mode [ 466.401189][ T37] veth0_vlan: left promiscuous mode [ 466.735569][ T37] team0 (unregistering): Port device team_slave_1 removed [ 466.776495][ T37] team0 (unregistering): Port device team_slave_0 removed [ 466.852381][ T23] lo speed is unknown, defaulting to 1000 [ 466.858226][ T23] infiniband syz0: ib_query_port failed (-19) [ 466.859833][T20727] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 466.874815][T20727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 467.008220][T20727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.057470][T20980] sd 0:0:1:0: device reset [ 467.122522][T20994] loop6: detected capacity change from 0 to 1024 [ 467.136787][T20994] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.285647][T20545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.372309][T20727] veth0_vlan: entered promiscuous mode [ 467.382119][T20727] veth1_vlan: entered promiscuous mode [ 467.397905][T20727] veth0_macvtap: entered promiscuous mode [ 467.407921][T20727] veth1_macvtap: entered promiscuous mode [ 467.425415][T20727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.437370][T20727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.457685][ T5208] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.526322][ T5208] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.537054][ T5208] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.566270][ T5208] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.655377][T21021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5588'. [ 467.683640][T21009] chnl_net:caif_netlink_parms(): no params data found [ 467.768459][T21046] loop1: detected capacity change from 0 to 1024 [ 467.775418][T21046] EXT4-fs: Ignoring removed nomblk_io_submit option [ 467.785612][T21043] veth0: entered promiscuous mode [ 467.792031][T21046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.876926][T20117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.445318][ T37] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.554778][T21048] veth0: left promiscuous mode [ 468.725436][ T37] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.767298][T21064] pim6reg: entered allmulticast mode [ 468.776002][T21066] pim6reg: entered allmulticast mode [ 468.782971][T21067] pim6reg: left allmulticast mode [ 468.945427][ T37] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.125671][T21009] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.132918][T21009] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.140202][T21009] bridge_slave_0: entered allmulticast mode [ 469.146911][T21009] bridge_slave_0: entered promiscuous mode [ 469.153865][T21009] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.161115][T21009] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.168484][T21009] bridge_slave_1: entered allmulticast mode [ 469.175140][T21009] bridge_slave_1: entered promiscuous mode [ 469.220587][T21080] FAULT_INJECTION: forcing a failure. [ 469.220587][T21080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.233787][T21080] CPU: 1 UID: 0 PID: 21080 Comm: syz.8.5602 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 469.233826][T21080] Tainted: [W]=WARN [ 469.233835][T21080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 469.233850][T21080] Call Trace: [ 469.233859][T21080] [ 469.233868][T21080] __dump_stack+0x1d/0x30 [ 469.233893][T21080] dump_stack_lvl+0xe8/0x140 [ 469.233969][T21080] dump_stack+0x15/0x1b [ 469.233990][T21080] should_fail_ex+0x265/0x280 [ 469.234062][T21080] should_fail+0xb/0x20 [ 469.234100][T21080] should_fail_usercopy+0x1a/0x20 [ 469.234125][T21080] _copy_to_user+0x20/0xa0 [ 469.234299][T21080] con_get_trans_old+0x1f4/0x240 [ 469.234359][T21080] vt_ioctl+0xf26/0x18a0 [ 469.234380][T21080] ? tty_jobctrl_ioctl+0x29e/0x810 [ 469.234416][T21080] tty_ioctl+0x7d8/0xb80 [ 469.234484][T21080] ? __pfx_tty_ioctl+0x10/0x10 [ 469.234510][T21080] __se_sys_ioctl+0xce/0x140 [ 469.234529][T21080] __x64_sys_ioctl+0x43/0x50 [ 469.234547][T21080] x64_sys_call+0x1816/0x3000 [ 469.234577][T21080] do_syscall_64+0xd2/0x200 [ 469.234609][T21080] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 469.234652][T21080] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 469.234680][T21080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.234708][T21080] RIP: 0033:0x7fd10673eec9 [ 469.234724][T21080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.234742][T21080] RSP: 002b:00007fd10519f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 469.234767][T21080] RAX: ffffffffffffffda RBX: 00007fd106995fa0 RCX: 00007fd10673eec9 [ 469.234782][T21080] RDX: ffffffffffffffff RSI: 0000000000004b40 RDI: 0000000000000003 [ 469.234796][T21080] RBP: 00007fd10519f090 R08: 0000000000000000 R09: 0000000000000000 [ 469.234809][T21080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.234824][T21080] R13: 00007fd106996038 R14: 00007fd106995fa0 R15: 00007fff7c8e5998 [ 469.234866][T21080] [ 469.515480][ T37] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.547228][T21087] loop6: detected capacity change from 0 to 1024 [ 469.553834][T21087] EXT4-fs: Ignoring removed orlov option [ 469.567165][T21087] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.625415][T20545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.696748][T21009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.706706][T21059] pim6reg: left allmulticast mode [ 469.766661][T21009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.843427][T21100] x_tables: ip_tables: ah match: only valid for protocol 51 [ 469.866237][T21102] loop1: detected capacity change from 0 to 2048 [ 469.895270][T21102] Alternate GPT is invalid, using primary GPT. [ 469.901716][T21102] loop1: p1 p2 p3 [ 469.904327][T21103] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5610'. [ 469.975931][T21009] team0: Port device team_slave_0 added [ 470.104215][T21009] team0: Port device team_slave_1 added [ 470.173495][T21118] netlink: 'syz.6.5615': attribute type 1 has an invalid length. [ 470.181385][T21118] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5615'. [ 470.255614][T21009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.262636][T21009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.288791][T21009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.361906][T21009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.368984][T21009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.395029][T21009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.568025][T21009] hsr_slave_0: entered promiscuous mode [ 470.574341][T21009] hsr_slave_1: entered promiscuous mode [ 470.581518][T21009] debugfs: 'hsr0' already exists in 'hsr' [ 470.587329][T21009] Cannot create hsr debugfs directory [ 470.592954][ T37] bridge_slave_1: left allmulticast mode [ 470.598661][ T37] bridge_slave_1: left promiscuous mode [ 470.604487][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.685424][ T37] bridge_slave_0: left allmulticast mode [ 470.691289][ T37] bridge_slave_0: left promiscuous mode [ 470.697144][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.077640][T21126] sd 0:0:1:0: device reset [ 471.096995][T21126] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 471.124849][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.133472][T21126] block device autoloading is deprecated and will be removed. [ 471.205057][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.245711][ T37] bond0 (unregistering): Released all slaves [ 471.452027][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 471.452048][ T29] audit: type=1326 audit(1760091739.486:19417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21142 comm="syz.6.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3ff2eec9 code=0x7ffc0000 [ 471.483446][ T29] audit: type=1326 audit(1760091739.486:19418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21142 comm="syz.6.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3ff2eec9 code=0x7ffc0000 [ 471.507372][ T29] audit: type=1326 audit(1760091739.526:19419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21142 comm="syz.6.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f3ff2eec9 code=0x7ffc0000 [ 471.531126][ T29] audit: type=1326 audit(1760091739.526:19420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21142 comm="syz.6.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3ff2eec9 code=0x7ffc0000 [ 471.556184][ T29] audit: type=1326 audit(1760091739.526:19421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21142 comm="syz.6.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3ff2eec9 code=0x7ffc0000 [ 471.579994][ T29] audit: type=1326 audit(1760091739.526:19422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21142 comm="syz.6.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f3ff2eec9 code=0x7ffc0000 [ 471.603613][ T29] audit: type=1326 audit(1760091739.526:19423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21142 comm="syz.6.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3ff2eec9 code=0x7ffc0000 [ 471.627379][ T29] audit: type=1326 audit(1760091739.526:19424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21142 comm="syz.6.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f3ff2eec9 code=0x7ffc0000 [ 471.651076][ T29] audit: type=1326 audit(1760091739.526:19425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21142 comm="syz.6.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3ff2eec9 code=0x7ffc0000 [ 471.674759][ T29] audit: type=1326 audit(1760091739.526:19426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21142 comm="syz.6.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f3ff2eec9 code=0x7ffc0000 [ 471.761385][T21130] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.954520][ T37] hsr_slave_0: left promiscuous mode [ 471.994677][ T37] hsr_slave_1: left promiscuous mode [ 472.000521][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.008033][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.075079][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.082571][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.134681][ T37] veth1_macvtap: left promiscuous mode [ 472.140299][ T37] veth0_macvtap: left promiscuous mode [ 472.146334][ T37] veth1_vlan: left promiscuous mode [ 472.152827][ T37] veth0_vlan: left promiscuous mode [ 472.444922][ T37] team0 (unregistering): Port device team_slave_1 removed [ 472.484793][ T37] team0 (unregistering): Port device team_slave_0 removed [ 472.675808][T21130] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.945387][T21130] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.055616][T21158] sd 0:0:1:0: device reset [ 473.185854][T21130] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.213580][T21165] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5630'. [ 473.267256][T21168] loop1: detected capacity change from 0 to 512 [ 473.378761][T21179] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5632'. [ 473.393483][ T5216] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.395503][T21179] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5632'. [ 473.410756][T21179] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5632'. [ 473.418075][ T5216] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.437368][T21182] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5635'. [ 473.447826][T21182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5635'. [ 473.456787][T21182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5635'. [ 473.620563][ T1715] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.634895][ T263] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.720638][T21009] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 473.745272][T21200] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5642'. [ 473.747230][T21009] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 473.912686][T21204] sd 0:0:1:0: device reset [ 473.972634][T21210] loop8: detected capacity change from 0 to 512 [ 474.063935][T21212] loop8: detected capacity change from 0 to 1024 [ 474.064533][T21009] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 474.076294][T21212] EXT4-fs: Ignoring removed nomblk_io_submit option [ 474.105333][T21009] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 474.115070][T21212] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.257018][T21009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.338550][T21009] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.426597][T20343] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.436737][T21231] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.537310][T21236] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.556370][T21241] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5653'. [ 474.575912][ T263] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.583271][ T263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.595450][ T5216] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.602630][ T5216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.635439][T21231] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.685660][T21236] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.745397][T21231] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.815913][T21236] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.895649][T21231] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.955572][T21236] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.188949][T21258] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5657'. [ 475.436104][ T5208] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.452827][T21009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.474357][ T5208] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.545604][ T37] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.598480][T21225] chnl_net:caif_netlink_parms(): no params data found [ 475.611293][ T5208] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.619924][ T5208] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.745523][ T37] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.794668][ T5208] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.815517][T21270] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.923951][ T5208] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.025681][ T37] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.105495][T21270] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.146614][ T5208] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.285660][ T37] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.324917][ T5208] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.365483][T21270] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.468181][T21291] pim6reg: entered allmulticast mode [ 476.481192][T21294] pim6reg: left allmulticast mode [ 476.565669][T21270] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.614683][T21225] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.621866][T21225] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.629165][T21225] bridge_slave_0: entered allmulticast mode [ 476.636120][T21225] bridge_slave_0: entered promiscuous mode [ 476.653649][T21225] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.660820][T21225] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.668089][T21225] bridge_slave_1: entered allmulticast mode [ 476.670773][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 476.670855][ T29] audit: type=1326 audit(1760091744.706:19472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21297 comm="syz.8.5664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 476.675043][T21225] bridge_slave_1: entered promiscuous mode [ 476.690579][ T29] audit: type=1326 audit(1760091744.716:19473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21297 comm="syz.8.5664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 476.733328][ T29] audit: type=1326 audit(1760091744.716:19474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21297 comm="syz.8.5664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 476.757082][ T29] audit: type=1326 audit(1760091744.716:19475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21297 comm="syz.8.5664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 476.780859][ T29] audit: type=1326 audit(1760091744.716:19476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21297 comm="syz.8.5664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 476.804602][ T29] audit: type=1326 audit(1760091744.716:19477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21297 comm="syz.8.5664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 476.828199][ T29] audit: type=1326 audit(1760091744.716:19478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21297 comm="syz.8.5664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 476.851987][ T29] audit: type=1326 audit(1760091744.716:19479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21297 comm="syz.8.5664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 476.875619][ T29] audit: type=1326 audit(1760091744.716:19480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21297 comm="syz.8.5664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 476.899282][ T29] audit: type=1326 audit(1760091744.716:19481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21297 comm="syz.8.5664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 476.985420][T21009] veth0_vlan: entered promiscuous mode [ 476.993242][T21009] veth1_vlan: entered promiscuous mode [ 477.075812][T21301] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.118059][T21225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.131363][T21225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.225547][T21301] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.425672][T21301] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.465833][T21225] team0: Port device team_slave_0 added [ 477.472563][T21009] veth0_macvtap: entered promiscuous mode [ 477.480320][T21009] veth1_macvtap: entered promiscuous mode [ 477.488179][T21225] team0: Port device team_slave_1 added [ 477.516054][T21312] loop1: detected capacity change from 0 to 1024 [ 477.522924][T21312] EXT4-fs: Ignoring removed nomblk_io_submit option [ 477.536277][T21312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.565317][ T37] bridge_slave_1: left allmulticast mode [ 477.571050][ T37] bridge_slave_1: left promiscuous mode [ 477.576746][T20117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.586422][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.655132][ T37] bridge_slave_0: left allmulticast mode [ 477.660861][ T37] bridge_slave_0: left promiscuous mode [ 477.666661][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.676882][T21317] netlink: 'syz.1.5671': attribute type 1 has an invalid length. [ 478.055072][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.134977][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.155551][ T37] bond0 (unregistering): Released all slaves [ 478.216388][T21301] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.305621][T21225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.312860][T21225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.339122][T21225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.354884][T21225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.361876][T21225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.388272][T21225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.405422][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.418286][ T5208] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.429874][T21009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.440912][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.554692][ T37] hsr_slave_0: left promiscuous mode [ 478.584590][ T37] hsr_slave_1: left promiscuous mode [ 478.590320][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.597767][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.635087][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.642595][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.714780][ T37] veth1_macvtap: left promiscuous mode [ 478.720478][ T37] veth0_macvtap: left promiscuous mode [ 478.726085][ T37] veth1_vlan: left promiscuous mode [ 478.731361][ T37] veth0_vlan: left promiscuous mode [ 478.984822][ T37] team0 (unregistering): Port device team_slave_1 removed [ 479.034757][ T37] team0 (unregistering): Port device team_slave_0 removed [ 479.167482][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.178903][T21322] pim6reg: entered allmulticast mode [ 479.184608][T21323] pim6reg: left allmulticast mode [ 479.255389][T21009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.337462][T21225] hsr_slave_0: entered promiscuous mode [ 479.343823][T21225] hsr_slave_1: entered promiscuous mode [ 479.350312][T21225] debugfs: 'hsr0' already exists in 'hsr' [ 479.356260][T21225] Cannot create hsr debugfs directory [ 479.372602][ T5216] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.454944][ T5216] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.463839][ T5216] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.508865][T21333] __nla_validate_parse: 4 callbacks suppressed [ 479.508888][T21333] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5676'. [ 479.560750][ T5216] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.569737][ T5216] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.579313][ T5216] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.593282][ T5216] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.721540][T21340] 9pnet_fd: Insufficient options for proto=fd [ 479.743022][T21342] loop8: detected capacity change from 0 to 1024 [ 479.750007][T21342] EXT4-fs: Ignoring removed nomblk_io_submit option [ 479.757854][ T5216] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.776352][T21342] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.848143][T20343] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.876524][T21352] loop8: detected capacity change from 0 to 1024 [ 479.886480][T21352] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 479.900292][T21352] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.915647][T21352] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: block 3: comm syz.8.5680: lblock 3 mapped to illegal pblock 3 (length 1) [ 479.930698][T21352] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 479.943296][T21352] EXT4-fs (loop8): This should not happen!! Data will be lost [ 479.943296][T21352] [ 479.955331][T21352] EXT4-fs error (device loop8): ext4_free_blocks:6706: comm syz.8.5680: Freeing blocks not in datazone - block = 3, count = 1 [ 480.005589][T21352] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.275603][T21352] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.395555][T21352] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.441697][T21225] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 480.460848][T21365] sd 0:0:1:0: device reset [ 480.515516][T21352] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.544718][T21225] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 480.596325][T21225] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 480.639092][T21225] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 480.706583][T21225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.718043][T21225] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.737773][T21225] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 480.748221][T21225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 480.800819][T21379] loop5: detected capacity change from 0 to 512 [ 480.876320][ T1715] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.883443][ T1715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.892508][ T1715] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.899711][ T1715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.089362][T21225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.275353][T21225] veth0_vlan: entered promiscuous mode [ 481.289560][T21225] veth1_vlan: entered promiscuous mode [ 481.306431][T21225] veth0_macvtap: entered promiscuous mode [ 481.313594][T21225] veth1_macvtap: entered promiscuous mode [ 481.325330][T21225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.337816][T21225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.349055][ T1715] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.416652][ T1715] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.457899][ T1715] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.538520][ T1715] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.588665][T21415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5696'. [ 481.856016][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 481.856031][ T29] audit: type=1400 audit(1760091749.896:19881): avc: granted { setsecparam } for pid=21434 comm="syz.5.5704" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 481.992696][T21444] netlink: 'syz.1.5707': attribute type 1 has an invalid length. [ 482.000728][T21444] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5707'. [ 482.124248][T21447] pim6reg: entered allmulticast mode [ 482.618037][T21345] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 482.686714][ T29] audit: type=1400 audit(1760091750.726:19882): avc: granted { setsecparam } for pid=21449 comm="syz.0.5709" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 482.746772][T21452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5710'. [ 482.818852][T21456] loop1: detected capacity change from 0 to 512 [ 482.836697][T21456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.850172][T21456] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.916213][T20117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.939411][T21467] 9pnet_fd: Insufficient options for proto=fd [ 482.948374][ T29] audit: type=1326 audit(1760091750.986:19883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21462 comm="syz.5.5714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fe2deec9 code=0x7ffc0000 [ 482.972551][ T29] audit: type=1326 audit(1760091750.986:19884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21462 comm="syz.5.5714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f35fe2deec9 code=0x7ffc0000 [ 482.996302][ T29] audit: type=1326 audit(1760091750.986:19885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21462 comm="syz.5.5714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fe2deec9 code=0x7ffc0000 [ 483.020586][ T29] audit: type=1326 audit(1760091750.986:19886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21462 comm="syz.5.5714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f35fe2deec9 code=0x7ffc0000 [ 483.044418][ T29] audit: type=1326 audit(1760091750.986:19887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21462 comm="syz.5.5714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fe2deec9 code=0x7ffc0000 [ 483.068793][ T29] audit: type=1326 audit(1760091750.986:19888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21462 comm="syz.5.5714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35fe2deec9 code=0x7ffc0000 [ 483.102597][ T29] audit: type=1326 audit(1760091751.136:19889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21462 comm="syz.5.5714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fe2deec9 code=0x7ffc0000 [ 483.110723][T21471] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5716'. [ 483.126361][ T29] audit: type=1326 audit(1760091751.136:19890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21462 comm="syz.5.5714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fe2deec9 code=0x7ffc0000 [ 483.233257][T21483] loop5: detected capacity change from 0 to 1024 [ 483.240304][T21483] EXT4-fs: Ignoring removed nomblk_io_submit option [ 483.266741][T21483] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.306654][T21490] netlink: 'syz.1.5723': attribute type 1 has an invalid length. [ 483.314419][T21490] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5723'. [ 483.316660][T21009] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.490518][T21496] loop5: detected capacity change from 0 to 1024 [ 483.497532][T21496] EXT4-fs: Ignoring removed nomblk_io_submit option [ 483.516480][T21496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.576670][T21009] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.660132][ T5208] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.675001][ T5208] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.691674][ T5208] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.709432][ T5208] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.735571][T20343] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 483.837141][T21510] 9pnet_fd: Insufficient options for proto=fd [ 484.476003][T21537] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.642257][T21555] 9pnet_fd: Insufficient options for proto=fd [ 484.680417][T21557] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5740'. [ 484.695812][T21537] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.697409][T21556] netlink: 'syz.1.5743': attribute type 1 has an invalid length. [ 484.714080][T21556] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5743'. [ 484.845669][T21537] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.045758][T21537] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.358931][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.370661][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.382376][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.394269][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.441308][T21581] pimreg: entered allmulticast mode [ 485.467939][T21581] IPv6: Can't replace route, no match found [ 485.534815][T21590] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5750'. [ 485.544860][T21580] pimreg: left allmulticast mode [ 485.552691][T21593] 9pnet_fd: Insufficient options for proto=fd [ 486.696100][T21622] netlink: 'syz.5.5764': attribute type 1 has an invalid length. [ 486.704039][T21622] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5764'. [ 487.193958][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 487.193974][ T29] audit: type=1326 audit(1760091755.226:19979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21641 comm="syz.0.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b1bbeec9 code=0x7ffc0000 [ 487.224312][ T29] audit: type=1326 audit(1760091755.226:19980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21641 comm="syz.0.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b1bbeec9 code=0x7ffc0000 [ 487.248117][ T29] audit: type=1326 audit(1760091755.226:19981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21641 comm="syz.0.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f15b1bbd710 code=0x7ffc0000 [ 487.271936][ T29] audit: type=1326 audit(1760091755.226:19982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21641 comm="syz.0.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b1bbeec9 code=0x7ffc0000 [ 487.295802][ T29] audit: type=1326 audit(1760091755.226:19983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21641 comm="syz.0.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15b1bbeec9 code=0x7ffc0000 [ 487.319815][ T29] audit: type=1326 audit(1760091755.226:19984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21641 comm="syz.0.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b1bbeec9 code=0x7ffc0000 [ 487.343554][ T29] audit: type=1326 audit(1760091755.226:19985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21641 comm="syz.0.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b1bbeec9 code=0x7ffc0000 [ 487.367179][ T29] audit: type=1326 audit(1760091755.226:19986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21641 comm="syz.0.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f15b1bbeec9 code=0x7ffc0000 [ 487.391219][ T29] audit: type=1326 audit(1760091755.226:19987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21641 comm="syz.0.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b1bbeec9 code=0x7ffc0000 [ 487.391265][ T29] audit: type=1326 audit(1760091755.226:19988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21641 comm="syz.0.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f15b1bbeec9 code=0x7ffc0000 [ 487.442661][T21651] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.515689][T21647] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.565925][T21651] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.656519][T21647] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.689888][T21671] 9pnet_fd: Insufficient options for proto=fd [ 487.715982][T21651] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.727539][T21664] sd 0:0:1:0: device reset [ 487.785686][T21647] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.876149][T21651] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.976000][T21647] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.102104][ T12] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.116968][ T12] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.129199][ T1715] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.144568][ T1715] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.160324][ T1715] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.183297][ T1715] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.192980][T21689] netlink: 'syz.0.5786': attribute type 1 has an invalid length. [ 488.200773][T21689] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5786'. [ 488.212958][ T1715] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.222807][ T1715] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.241022][T21693] loop5: detected capacity change from 0 to 1024 [ 488.248484][T21693] EXT4-fs: Ignoring removed nomblk_io_submit option [ 488.270769][T21693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.356959][T21009] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.381349][T21704] netlink: 'syz.5.5791': attribute type 29 has an invalid length. [ 488.392150][T21704] netlink: 'syz.5.5791': attribute type 29 has an invalid length. [ 488.401058][T21704] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5791'. [ 488.410406][T21704] unsupported nla_type 58 [ 488.740071][T21726] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5798'. [ 489.446462][T21746] sd 0:0:1:0: device reset [ 489.765578][T21780] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.862459][T21767] sd 0:0:1:0: device reset [ 489.895564][T21780] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.916181][T21785] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5821'. [ 489.985549][T21780] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.115598][T21780] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.185615][T21804] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.306162][T21804] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.395698][T21804] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.495985][T21804] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.619368][T21824] sd 0:0:1:0: device reset [ 490.930507][T21835] pim6reg: entered allmulticast mode [ 491.321302][T21840] 9pnet_fd: Insufficient options for proto=fd [ 491.729877][ T37] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.753623][ T37] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.782477][ T37] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.801999][ T37] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.986920][T21873] 9pnet_fd: Insufficient options for proto=fd [ 492.200178][ T1715] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.225871][ T1715] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.244359][ T1715] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.259187][ T1715] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.289899][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 492.289918][ T29] audit: type=1400 audit(1760091760.326:20064): avc: granted { setsecparam } for pid=21884 comm="syz.1.5857" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 492.446880][T21893] 9pnet_fd: Insufficient options for proto=fd [ 492.456404][ T29] audit: type=1326 audit(1760091760.496:20065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21889 comm="syz.1.5859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5c22eec9 code=0x7ffc0000 [ 492.480108][ T29] audit: type=1326 audit(1760091760.496:20066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21889 comm="syz.1.5859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f1d5c22eec9 code=0x7ffc0000 [ 492.503659][ T29] audit: type=1326 audit(1760091760.496:20067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21889 comm="syz.1.5859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5c22eec9 code=0x7ffc0000 [ 492.527343][ T29] audit: type=1326 audit(1760091760.496:20068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21889 comm="syz.1.5859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f1d5c22eec9 code=0x7ffc0000 [ 492.551163][ T29] audit: type=1326 audit(1760091760.496:20069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21889 comm="syz.1.5859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5c22eec9 code=0x7ffc0000 [ 492.574968][ T29] audit: type=1326 audit(1760091760.496:20070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21889 comm="syz.1.5859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d5c22eec9 code=0x7ffc0000 [ 492.612506][ T29] audit: type=1326 audit(1760091760.636:20071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21889 comm="syz.1.5859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5c22eec9 code=0x7ffc0000 [ 492.636164][ T29] audit: type=1326 audit(1760091760.636:20072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21889 comm="syz.1.5859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5c22eec9 code=0x7ffc0000 [ 492.727310][T21899] FAULT_INJECTION: forcing a failure. [ 492.727310][T21899] name failslab, interval 1, probability 0, space 0, times 0 [ 492.740001][T21899] CPU: 0 UID: 0 PID: 21899 Comm: syz.1.5862 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 492.740072][T21899] Tainted: [W]=WARN [ 492.740082][T21899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 492.740128][T21899] Call Trace: [ 492.740138][T21899] [ 492.740149][T21899] __dump_stack+0x1d/0x30 [ 492.740176][T21899] dump_stack_lvl+0xe8/0x140 [ 492.740207][T21899] dump_stack+0x15/0x1b [ 492.740294][T21899] should_fail_ex+0x265/0x280 [ 492.740340][T21899] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 492.740369][T21899] should_failslab+0x8c/0xb0 [ 492.740398][T21899] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 492.740450][T21899] ? shmem_alloc_inode+0x34/0x50 [ 492.740479][T21899] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 492.740500][T21899] shmem_alloc_inode+0x34/0x50 [ 492.740519][T21899] alloc_inode+0x3d/0x170 [ 492.740567][T21899] new_inode+0x1d/0xe0 [ 492.740600][T21899] shmem_get_inode+0x244/0x750 [ 492.740630][T21899] __shmem_file_setup+0x113/0x210 [ 492.740669][T21899] shmem_file_setup+0x3b/0x50 [ 492.740734][T21899] __se_sys_memfd_create+0x2c3/0x590 [ 492.740890][T21899] __x64_sys_memfd_create+0x31/0x40 [ 492.740919][T21899] x64_sys_call+0x2ac2/0x3000 [ 492.740944][T21899] do_syscall_64+0xd2/0x200 [ 492.740983][T21899] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 492.741021][T21899] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 492.741061][T21899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.741084][T21899] RIP: 0033:0x7f1d5c22eec9 [ 492.741100][T21899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.741119][T21899] RSP: 002b:00007f1d5ac96e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 492.741138][T21899] RAX: ffffffffffffffda RBX: 000000000000046c RCX: 00007f1d5c22eec9 [ 492.741155][T21899] RDX: 00007f1d5ac96ef0 RSI: 0000000000000000 RDI: 00007f1d5c2b2960 [ 492.741296][T21899] RBP: 0000200000000bc0 R08: 00007f1d5ac96bb7 R09: 00007f1d5ac96e40 [ 492.741309][T21899] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 492.741375][T21899] R13: 00007f1d5ac96ef0 R14: 00007f1d5ac96eb0 R15: 0000200000000740 [ 492.741395][T21899] [ 492.994630][ T29] audit: type=1326 audit(1760091761.006:20073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21897 comm="syz.1.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5c22eec9 code=0x7ffc0000 [ 493.743365][T21936] 9pnet_fd: Insufficient options for proto=fd [ 493.865134][T21946] FAULT_INJECTION: forcing a failure. [ 493.865134][T21946] name failslab, interval 1, probability 0, space 0, times 0 [ 493.877931][T21946] CPU: 1 UID: 0 PID: 21946 Comm: syz.5.5876 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 493.878090][T21946] Tainted: [W]=WARN [ 493.878099][T21946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 493.878116][T21946] Call Trace: [ 493.878124][T21946] [ 493.878135][T21946] __dump_stack+0x1d/0x30 [ 493.878163][T21946] dump_stack_lvl+0xe8/0x140 [ 493.878188][T21946] dump_stack+0x15/0x1b [ 493.878210][T21946] should_fail_ex+0x265/0x280 [ 493.878292][T21946] should_failslab+0x8c/0xb0 [ 493.878336][T21946] kmem_cache_alloc_noprof+0x50/0x480 [ 493.878429][T21946] ? security_file_alloc+0x32/0x100 [ 493.878458][T21946] security_file_alloc+0x32/0x100 [ 493.878522][T21946] init_file+0x5c/0x1d0 [ 493.878560][T21946] alloc_empty_file+0x8b/0x200 [ 493.878650][T21946] alloc_file_pseudo+0xc6/0x160 [ 493.878695][T21946] sock_alloc_file+0x9c/0x1e0 [ 493.878721][T21946] do_accept+0x1e4/0x3a0 [ 493.878819][T21946] __sys_accept4+0xbf/0x140 [ 493.878844][T21946] __x64_sys_accept+0x42/0x50 [ 493.878924][T21946] x64_sys_call+0x212c/0x3000 [ 493.878954][T21946] do_syscall_64+0xd2/0x200 [ 493.878995][T21946] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 493.879030][T21946] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 493.879137][T21946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.879167][T21946] RIP: 0033:0x7f35fe2deec9 [ 493.879187][T21946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.879212][T21946] RSP: 002b:00007f35fcd47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 493.879238][T21946] RAX: ffffffffffffffda RBX: 00007f35fe535fa0 RCX: 00007f35fe2deec9 [ 493.879254][T21946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 493.879270][T21946] RBP: 00007f35fcd47090 R08: 0000000000000000 R09: 0000000000000000 [ 493.879283][T21946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.879295][T21946] R13: 00007f35fe536038 R14: 00007f35fe535fa0 R15: 00007ffff16a5b08 [ 493.879363][T21946] [ 494.122232][T21952] sd 0:0:1:0: device reset [ 494.143396][T21950] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 494.177414][T21956] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5881'. [ 494.229553][T21963] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5893'. [ 494.318080][T21964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5882'. [ 494.327310][T21964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5882'. [ 494.355723][T21968] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.451322][T21991] sd 0:0:1:0: device reset [ 494.490058][T21968] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.569200][T22001] 9pnet_fd: Insufficient options for proto=fd [ 494.579210][T22004] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5898'. [ 494.595879][T21968] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.697117][T21968] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.751263][T22011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5901'. [ 494.766626][T22006] sd 0:0:1:0: device reset [ 494.862496][T22022] sd 0:0:1:0: device reset [ 495.084666][ T3411] IPVS: starting estimator thread 0... [ 495.194731][T22032] IPVS: using max 2304 ests per chain, 115200 per kthread [ 496.086758][T22042] 9pnet_fd: Insufficient options for proto=fd [ 496.380306][T22056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5918'. [ 496.458633][T22060] sd 0:0:1:0: device reset [ 496.464242][T22058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5919'. [ 496.622902][T22074] 9pnet_fd: Insufficient options for proto=fd [ 496.882126][T22083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5927'. [ 496.891419][T22083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5927'. [ 497.066359][T22090] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5930'. [ 497.230625][T22099] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5933'. [ 497.263849][T22094] sd 0:0:1:0: device reset [ 497.569109][T22108] pim6reg: entered allmulticast mode [ 497.670605][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.682148][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.693892][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.705894][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.732212][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 497.732229][ T29] audit: type=1400 audit(1760091765.766:20219): avc: denied { connect } for pid=22115 comm="syz.1.5940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 497.758728][ T29] audit: type=1400 audit(1760091765.766:20220): avc: denied { write } for pid=22115 comm="syz.1.5940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 497.759008][T22117] loop1: detected capacity change from 0 to 2048 [ 497.883409][T22121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5942'. [ 497.989920][T22128] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5945'. [ 498.387267][ T29] audit: type=1326 audit(1760091766.426:20221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22141 comm="syz.2.5950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbdf53eec9 code=0x7ffc0000 [ 498.411711][ T29] audit: type=1326 audit(1760091766.426:20222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22141 comm="syz.2.5950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fcbdf53eec9 code=0x7ffc0000 [ 498.435520][ T29] audit: type=1326 audit(1760091766.426:20223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22141 comm="syz.2.5950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbdf53eec9 code=0x7ffc0000 [ 498.459586][ T29] audit: type=1326 audit(1760091766.456:20224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22141 comm="syz.2.5950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbdf53eec9 code=0x7ffc0000 [ 498.586431][T22158] 9pnet_fd: Insufficient options for proto=fd [ 498.615550][T22159] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5952'. [ 498.624499][T22159] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5952'. [ 498.938693][T22171] sd 0:0:1:0: device reset [ 499.129024][ T29] audit: type=1400 audit(1760091767.166:20225): avc: granted { setsecparam } for pid=22182 comm="syz.5.5963" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 499.354600][T22192] 9pnet_fd: Insufficient options for proto=fd [ 499.875568][ T29] audit: type=1326 audit(1760091767.916:20226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22214 comm="syz.1.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5c22eec9 code=0x7ffc0000 [ 499.899865][ T29] audit: type=1326 audit(1760091767.916:20227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22214 comm="syz.1.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f1d5c22eec9 code=0x7ffc0000 [ 499.923585][ T29] audit: type=1326 audit(1760091767.916:20228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22214 comm="syz.1.5975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5c22eec9 code=0x7ffc0000 [ 500.069310][ T1036] IPVS: starting estimator thread 0... [ 500.282447][T22245] IPVS: using max 2304 ests per chain, 115200 per kthread [ 501.908358][T22304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 502.205987][T22332] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.305479][T22332] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.365819][T22341] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.446205][T22332] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.474355][T22353] sd 0:0:1:0: device reset [ 502.515671][T22341] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.586133][T22332] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.665824][T22341] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.885535][T22341] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.940101][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.951773][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.964336][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.979718][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.022469][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.039027][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.056795][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.065609][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.091655][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 503.091675][ T29] audit: type=1326 audit(1760091771.126:20237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22378 comm="syz.5.6042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fe2deec9 code=0x7ffc0000 [ 503.121432][ T29] audit: type=1326 audit(1760091771.126:20238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22378 comm="syz.5.6042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fe2deec9 code=0x7ffc0000 [ 503.153551][ T29] audit: type=1326 audit(1760091771.126:20239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22378 comm="syz.5.6042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35fe2deec9 code=0x7ffc0000 [ 503.177582][ T29] audit: type=1326 audit(1760091771.126:20240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22378 comm="syz.5.6042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fe2deec9 code=0x7ffc0000 [ 503.185526][T22388] sd 0:0:1:0: device reset [ 503.201571][ T29] audit: type=1326 audit(1760091771.126:20241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22378 comm="syz.5.6042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fe2deec9 code=0x7ffc0000 [ 503.229576][ T29] audit: type=1326 audit(1760091771.136:20242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22378 comm="syz.5.6042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35fe2deec9 code=0x7ffc0000 [ 503.253256][ T29] audit: type=1326 audit(1760091771.136:20243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22378 comm="syz.5.6042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fe2deec9 code=0x7ffc0000 [ 503.277050][ T29] audit: type=1326 audit(1760091771.136:20244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22378 comm="syz.5.6042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35fe2deec9 code=0x7ffc0000 [ 503.310913][ T29] audit: type=1326 audit(1760091771.346:20245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22378 comm="syz.5.6042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35fe2deec9 code=0x7ffc0000 [ 503.335288][ T29] audit: type=1326 audit(1760091771.346:20246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22378 comm="syz.5.6042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f35fe2deec9 code=0x7ffc0000 [ 503.400182][T22396] __nla_validate_parse: 6 callbacks suppressed [ 503.400203][T22396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6047'. [ 503.415377][T22396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6047'. [ 503.464149][T22401] sd 0:0:1:0: device reset [ 503.493904][T22406] sd 0:0:1:0: device reset [ 503.505684][T22404] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.615983][T22404] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.712559][T22425] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6057'. [ 503.721616][T22425] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6057'. [ 503.732361][T22404] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.810972][T22432] sd 0:0:1:0: device reset [ 503.845642][T22404] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.849551][T22436] 9pnet_fd: Insufficient options for proto=fd [ 503.878055][T22436] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 503.930856][T22436] vxcan1: tx address claim with different name [ 503.941346][T22443] 9pnet_fd: Insufficient options for proto=fd [ 503.982693][T22445] sd 0:0:1:0: device reset [ 504.223453][T22459] sd 0:0:1:0: device reset [ 504.385402][T22466] sd 0:0:1:0: device reset [ 504.435397][T22468] sd 0:0:1:0: device reset [ 504.536933][T22478] 9pnet_fd: Insufficient options for proto=fd [ 504.572635][T22481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6081'. [ 504.581582][T22481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6081'. [ 504.735698][T22498] 9pnet_fd: Insufficient options for proto=fd [ 504.800624][T22501] sd 0:0:1:0: device reset [ 504.944320][T22513] FAULT_INJECTION: forcing a failure. [ 504.944320][T22513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.957668][T22513] CPU: 1 UID: 0 PID: 22513 Comm: syz.8.6095 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 504.957754][T22513] Tainted: [W]=WARN [ 504.957761][T22513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 504.957779][T22513] Call Trace: [ 504.957789][T22513] [ 504.957799][T22513] __dump_stack+0x1d/0x30 [ 504.957874][T22513] dump_stack_lvl+0xe8/0x140 [ 504.957900][T22513] dump_stack+0x15/0x1b [ 504.957916][T22513] should_fail_ex+0x265/0x280 [ 504.958016][T22513] should_fail+0xb/0x20 [ 504.958052][T22513] should_fail_usercopy+0x1a/0x20 [ 504.958090][T22513] _copy_to_user+0x20/0xa0 [ 504.958167][T22513] simple_read_from_buffer+0xb5/0x130 [ 504.958254][T22513] proc_fail_nth_read+0x10e/0x150 [ 504.958284][T22513] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 504.958382][T22513] vfs_read+0x1a5/0x770 [ 504.958412][T22513] ? __rcu_read_unlock+0x4f/0x70 [ 504.958590][T22513] ? __fget_files+0x184/0x1c0 [ 504.958623][T22513] ksys_read+0xda/0x1a0 [ 504.958696][T22513] __x64_sys_read+0x40/0x50 [ 504.958727][T22513] x64_sys_call+0x27c0/0x3000 [ 504.958757][T22513] do_syscall_64+0xd2/0x200 [ 504.958801][T22513] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 504.958838][T22513] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 504.958860][T22513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.958897][T22513] RIP: 0033:0x7fd10673d8dc [ 504.958936][T22513] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 504.959017][T22513] RSP: 002b:00007fd10519f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 504.959041][T22513] RAX: ffffffffffffffda RBX: 00007fd106995fa0 RCX: 00007fd10673d8dc [ 504.959056][T22513] RDX: 000000000000000f RSI: 00007fd10519f0a0 RDI: 0000000000000007 [ 504.959075][T22513] RBP: 00007fd10519f090 R08: 0000000000000000 R09: 0000000000000000 [ 504.959087][T22513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.959100][T22513] R13: 00007fd106996038 R14: 00007fd106995fa0 R15: 00007fff7c8e5998 [ 504.959125][T22513] [ 505.237268][T22527] 9pnet_fd: Insufficient options for proto=fd [ 505.360873][T22537] sd 0:0:1:0: device reset [ 505.414604][T22545] 9pnet_fd: Insufficient options for proto=fd [ 505.536210][T22548] netlink: 'syz.0.6107': attribute type 1 has an invalid length. [ 505.544086][T22548] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6107'. [ 505.829458][T22561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6113'. [ 505.938058][T22567] sd 0:0:1:0: device reset [ 506.011865][T22573] 9pnet_fd: Insufficient options for proto=fd [ 506.015824][T22569] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.115980][T22569] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.235450][T22569] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.253202][T22580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6119'. [ 506.262260][T22580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6119'. [ 506.325883][T22587] 9pnet_fd: Insufficient options for proto=fd [ 506.345678][T22569] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.493218][ T31] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.504229][ T31] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.520383][ T31] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.531497][T22608] 9pnet_fd: Insufficient options for proto=fd [ 506.538424][ T31] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.592542][T22615] sd 0:0:1:0: device reset [ 506.689456][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.701756][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.715751][T22626] 9pnet_fd: Insufficient options for proto=fd [ 506.722473][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.736195][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.900318][T22642] sd 0:0:1:0: device reset [ 506.976735][ T3411] kernel write not supported for file /sg0 (pid: 3411 comm: kworker/0:4) [ 507.105550][T22657] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.148152][T22662] 9pnet_fd: Insufficient options for proto=fd [ 507.205584][T22657] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.315525][T22657] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.412857][T22674] sd 0:0:1:0: device reset [ 507.436061][T22657] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.536325][ T3411] kernel write not supported for file /sg0 (pid: 3411 comm: kworker/0:4) [ 507.690179][T22706] sd 0:0:1:0: device reset [ 507.894812][ T3376] kernel write not supported for file /sg0 (pid: 3376 comm: kworker/0:2) [ 508.143337][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 508.143357][ T29] audit: type=1326 audit(1760091776.176:20430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22731 comm="syz.8.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 508.173422][ T29] audit: type=1326 audit(1760091776.176:20431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22731 comm="syz.8.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 508.197136][ T29] audit: type=1326 audit(1760091776.176:20432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22731 comm="syz.8.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 508.220782][ T29] audit: type=1326 audit(1760091776.176:20433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22731 comm="syz.8.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10673eec9 code=0x7ffc0000 [ 508.247033][T22739] sd 0:0:1:0: device reset [ 508.453129][T22745] __nla_validate_parse: 3 callbacks suppressed [ 508.453149][T22745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6186'. [ 508.498971][T22749] loop1: detected capacity change from 0 to 512 [ 508.513631][T22749] EXT4-fs (loop1): orphan cleanup on readonly fs [ 508.525060][T22749] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.6188: EA inode hash validation failed [ 508.540638][T22749] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.6188: corrupted inode contents [ 508.552912][T22749] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #15: comm syz.1.6188: mark_inode_dirty error [ 508.564807][T22749] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.6188: corrupted inode contents [ 508.577168][T22749] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.6188: mark_inode_dirty error [ 508.589418][T22749] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.6188: mark inode dirty (error -117) [ 508.602443][T22749] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 508.611795][T22749] EXT4-fs (loop1): 1 orphan inode deleted [ 508.618545][T22749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 508.637914][T22749] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 508.656018][T22756] 9pnet_fd: Insufficient options for proto=fd [ 508.666789][ T29] audit: type=1326 audit(1760091776.706:20434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22750 comm="syz.0.6189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b1bbeec9 code=0x7ffc0000 [ 508.695721][ T29] audit: type=1326 audit(1760091776.716:20435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22750 comm="syz.0.6189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b1bbeec9 code=0x7ffc0000 [ 508.719497][ T29] audit: type=1326 audit(1760091776.716:20436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22750 comm="syz.0.6189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f15b1bbeec9 code=0x7ffc0000 [ 508.743225][ T29] audit: type=1326 audit(1760091776.716:20437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22750 comm="syz.0.6189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b1bbeec9 code=0x7ffc0000 [ 508.792923][ T29] audit: type=1400 audit(1760091776.826:20438): avc: denied { read } for pid=22761 comm="syz.5.6193" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 508.816616][ T29] audit: type=1400 audit(1760091776.826:20439): avc: denied { open } for pid=22761 comm="syz.5.6193" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 508.841610][T20117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.876851][T22766] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.005400][T22766] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.115762][T22766] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.225427][T22766] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.360372][ T1715] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.371623][ T1715] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.383482][ T1715] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.395849][ T1715] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.674646][T22792] sd 0:0:1:0: device reset [ 509.823065][T22799] sd 0:0:1:0: device reset [ 509.907054][T22806] netlink: 272 bytes leftover after parsing attributes in process `syz.1.6207'. [ 510.090219][T22827] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6217'. [ 510.472004][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.506865][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.534028][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.564607][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.929502][T22898] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22898 comm=syz.0.6249 [ 511.143818][T22923] FAULT_INJECTION: forcing a failure. [ 511.143818][T22923] name failslab, interval 1, probability 0, space 0, times 0 [ 511.156642][T22923] CPU: 1 UID: 0 PID: 22923 Comm: syz.1.6261 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 511.156687][T22923] Tainted: [W]=WARN [ 511.156697][T22923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 511.156714][T22923] Call Trace: [ 511.156723][T22923] [ 511.156759][T22923] __dump_stack+0x1d/0x30 [ 511.156835][T22923] dump_stack_lvl+0xe8/0x140 [ 511.156858][T22923] dump_stack+0x15/0x1b [ 511.156875][T22923] should_fail_ex+0x265/0x280 [ 511.156921][T22923] should_failslab+0x8c/0xb0 [ 511.156957][T22923] kmem_cache_alloc_noprof+0x50/0x480 [ 511.157030][T22923] ? getname_flags+0x80/0x3b0 [ 511.157068][T22923] getname_flags+0x80/0x3b0 [ 511.157105][T22923] user_path_at+0x28/0x130 [ 511.157149][T22923] do_fchownat+0xb0/0x210 [ 511.157216][T22923] __x64_sys_lchown+0x4a/0x60 [ 511.157256][T22923] x64_sys_call+0x2865/0x3000 [ 511.157284][T22923] do_syscall_64+0xd2/0x200 [ 511.157317][T22923] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 511.157352][T22923] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 511.157381][T22923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.157409][T22923] RIP: 0033:0x7f1d5c22eec9 [ 511.157485][T22923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.157510][T22923] RSP: 002b:00007f1d5ac97038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 511.157553][T22923] RAX: ffffffffffffffda RBX: 00007f1d5c485fa0 RCX: 00007f1d5c22eec9 [ 511.157570][T22923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 511.157587][T22923] RBP: 00007f1d5ac97090 R08: 0000000000000000 R09: 0000000000000000 [ 511.157636][T22923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.157653][T22923] R13: 00007f1d5c486038 R14: 00007f1d5c485fa0 R15: 00007ffd136cf498 [ 511.157678][T22923] [ 511.601374][T22973] ================================================================== [ 511.609598][T22973] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 511.616677][T22973] [ 511.619019][T22973] write to 0xffff888108bd5748 of 8 bytes by task 20343 on cpu 0: [ 511.626759][T22973] release_task+0x6f9/0xb60 [ 511.631313][T22973] wait_consider_task+0x114a/0x1660 [ 511.636543][T22973] __do_wait+0xfa/0x510 [ 511.640751][T22973] do_wait+0xb7/0x250 [ 511.644767][T22973] kernel_wait4+0x16b/0x1e0 [ 511.649303][T22973] __x64_sys_wait4+0x91/0x120 [ 511.654021][T22973] x64_sys_call+0x2a6a/0x3000 [ 511.658740][T22973] do_syscall_64+0xd2/0x200 [ 511.663271][T22973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.669188][T22973] [ 511.671513][T22973] read to 0xffff888108bd5280 of 3264 bytes by task 22973 on cpu 1: [ 511.679404][T22973] memcpy_and_pad+0x48/0x80 [ 511.683924][T22973] arch_dup_task_struct+0x2c/0x40 [ 511.688956][T22973] dup_task_struct+0x83/0x6b0 [ 511.693738][T22973] copy_process+0x399/0x2000 [ 511.698348][T22973] kernel_clone+0x16c/0x5c0 [ 511.702890][T22973] __se_sys_clone3+0x1c2/0x200 [ 511.707673][T22973] __x64_sys_clone3+0x31/0x40 [ 511.712368][T22973] x64_sys_call+0x1fc9/0x3000 [ 511.717087][T22973] do_syscall_64+0xd2/0x200 [ 511.721638][T22973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.727562][T22973] [ 511.729884][T22973] Reported by Kernel Concurrency Sanitizer on: [ 511.736045][T22973] CPU: 1 UID: 0 PID: 22973 Comm: syz.0.6284 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 511.747431][T22973] Tainted: [W]=WARN [ 511.751263][T22973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 511.761326][T22973] ==================================================================