last executing test programs: 5.920721322s ago: executing program 0 (id=72): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x8, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707fffffffffffe7b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800007800b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000180)='sctp_probe_path\x00', r1, 0x0, 0x20000000000001c2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x8c6a19c93aef5186, '\x00', 0x0, @fallback=0x13}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = socket(0x2c, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x1, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x22780, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6, 0x5}, 0x100, 0x1, 0x0, 0x7, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffc, r2, 0x3) socket$qrtr(0x2a, 0x2, 0x0) syz_io_uring_setup(0x49b, &(0x7f0000000840)={0x0, 0x4660, 0x1000, 0x1, 0xa85}, &(0x7f00000004c0)=0x0, &(0x7f0000000540)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_clone(0x81000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x40000021, 0x800000000004, @tid=r11}, &(0x7f0000000380)=0x0) timer_settime(r12, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r9, 0x0, r10, 0x0, 0x6, 0x100000000000000) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r13, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0) mmap(&(0x7f0000145000/0x1000)=nil, 0x1000, 0xa, 0x31, 0xffffffffffffffff, 0xe83f8000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r7, &(0x7f0000000300)="6c6716dd6b5f260af6afb7cbb5", &(0x7f0000001500)=@tcp=r6}, 0x20) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01dfffffff9a26000000210000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 2.847673102s ago: executing program 0 (id=103): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40a200, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000001340)={'sit0\x00', 0x0, 0x40, 0x8, 0xff, 0x5, {{0x1b, 0x4, 0x3, 0xd, 0x6c, 0x65, 0x0, 0x2, 0x2f, 0x0, @multicast1, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x34, 0xfd, 0x3, 0x4, [{@local, 0x7f}, {@multicast2, 0x6}, {@remote, 0x2f}, {@private=0xa010102, 0x5}, {@remote, 0x1}, {@multicast2, 0x1000}]}, @ssrr={0x89, 0x17, 0x24, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xd}]}, @rr={0x7, 0xb, 0x16, [@broadcast, @multicast2]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=@ipv6_deladdr={0xa4, 0x15, 0x1, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x2, 0xfd, r1}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_FLAGS={0x8, 0x8, 0x90}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x1, 0x7, 0x2}}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_FLAGS={0x8, 0x8, 0xe7406e66a0a20e96}, @IFA_TARGET_NETNSID={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x83ff, 0x2, 0xfffffffd}}]}, 0xa4}}, 0x40000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x600, 0x1a3) renameat2(r0, &(0x7f0000000640)='./file0\x00', r2, &(0x7f0000000700)='./file0\x00', 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r4, 0x0, 0x5}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0xeb}}, {@noblock_validity}]}, 0x1, 0x511, &(0x7f0000000a80)="$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") r6 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$rtl8150(r6, &(0x7f0000001500)={0x14, &(0x7f0000001400)={0x0, 0xe, 0xb3, {0xb3, 0x2, "eba355df71d0b166599df4d7b6203cfd69f54d326ad7f428c3a7adb24383d6bed4a1fc619620713d7313f6475ce6d4bec234de8ca3fc904dea781dff033b9ca315e43383d72b7ce345975c29b943d5da4e94b002cd790c85b2645fa62c906ac8aab8cf6ccca7df0db83038387b1ba6ece168643c2be3ad8e5ad4d909c7162a7bfb1ccf6aaecbdef50d0fde821b8785d18881c2295e28c77e1f1f9fc46b5694dee6610937bf1ade9452bd1090fb256d6e8d"}}, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}}, &(0x7f0000001740)={0x2c, &(0x7f0000001540)={0x40, 0xb, 0xe8, "dd9fdf071cf4b3d2f21ae31996207def59dc93c00122bb7d0e18613d1461b4b0137c14981356fda7229b193ff3d06b16b73d5598ac82ed83a3aef482e8e0ad2a2b3e4c56b46b7ace19c9cbfd6cd8368f24d66b4aa62b2064c6d0a5c46e56584f8e7671fb5744dd3847b1b2f2f7e4b76a3c8a09a0dbfe3c60beef847478cde64fb78eedc025498c2dc01f41a5757f2065a296e265056ca75b4b1ebca1b7299fa4e873d9a7c149fbf07dd7d6e9ab64a35bfa5638c783aab1fee57de8b8d6906d4064b3e5730b5efd882d1d2760b631f258f6c8a5d6c414c8dbba50810c2c4ff03a77597fa738b688ab"}, &(0x7f0000001640)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000001680)={0x0, 0x8, 0x1}, &(0x7f00000016c0)={0xc0, 0x5, 0x5, "66b78093f0"}, &(0x7f0000001700)={0x40, 0x5, 0x4, "151da575"}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000017000000850000002d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RRENAMEAT(r9, &(0x7f00000002c0)={0x7, 0x4b, 0x2}, 0xff7a) write$P9_RREADDIR(r9, &(0x7f0000000300)={0x1012, 0x29, 0x2, {0x7, [{{0x20, 0x3, 0x3}, 0x100000000, 0xbc, 0xfef, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}]}}, 0x1012) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r8}, 0x18) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r10 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r11 = add_key$user(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x1}, &(0x7f0000000240)='J', 0x1, r10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r11}) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000001e80)={'syz', 0x1}, 0x0, r10) 2.338469774s ago: executing program 4 (id=112): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b00)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYRESOCT=r0], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x4, &(0x7f00000000c0)=""/187, &(0x7f0000000000)=0xbb) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000d00), &(0x7f0000000080)}, 0x20) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r9, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="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", 0x3a0}, {&(0x7f0000000340)="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", 0x1ec}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000007800000078000000040000000600000000000009000000000a000000030000060400000002000000080000000f000000ac09000000000000f8ffffff03000000000000010000fa00190020020400000000000002000000000d0000000000000a010000000c0000000000001102000000050000000c00000000000011030000000a00000000006100"], &(0x7f0000000440)=""/106, 0x94, 0x6a, 0x1, 0x3}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080018000100000080000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000500"/28], 0x50) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0908000000000055090100c60000009500000000000000b7020000001200007b2af0ff00000000d609080008200000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000001502010076000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0x1}, &(0x7f0000000600), &(0x7f0000000640)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0x1}, &(0x7f00000006c0), &(0x7f0000000700)='%-010d \x00'}, 0x20) 2.304538697s ago: executing program 4 (id=113): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x52, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa86081198a7c186dd60a2bf00001c3a41fc020000000000000000000000000000ff02000000000000007d790000200001820090780000fcfffe800000000000000000ff01"], 0x0) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000100)=""/211, &(0x7f00000000c0)=0xd3) listxattr(0x0, 0x0, 0x0) r3 = socket(0xa, 0x80000, 0x80) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file0', [{0x20, '-&\"/'}, {0x20, 'GPL\x00'}], 0xa, "50becdd848798bc135d3e750ed5d539a8bc4fde88858952a6b18e34c47c06bad483756f2af14cf332eac8845eea1db7e96b04e4a126aa683c7ae66c952797fe668d319127dafd1a089e3f1247d8e452e"}, 0x65) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4008004) 2.143039154s ago: executing program 4 (id=114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 2.142707174s ago: executing program 2 (id=115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) (fail_nth: 5) 1.653783753s ago: executing program 1 (id=118): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000df9e29a8f77d0ea4061a0000000000fceb05566ef13756f08ec185c4c775a6dc17fcd93dee96761f6fb86bc9afaa01926c5e438a87cf3d36770c4aeb25dcfe069f68c3f302e91725b13e6dd1527c0132d562c96d05eb"], 0x50) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x140, 0x178, 0xc, 0x140, 0x178, 0x140, 0x258, 0x258, 0x210, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @remote, [0xff000000, 0x0, 0x0, 0xff], [], 'syzkaller0\x00', 'netpci0\x00', {}, {}, 0x3a}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x80000001, 0xce4, 0x9004, 0x8, 0x0, 0x5, 0xc0de}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@mcast1, @private1, [], [0x0, 0xffffff00], 'wg2\x00', 'hsr0\x00', {}, {}, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0xc0a85320, &(0x7f0000000900)={{0x80}}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000002850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x101000, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1ed699ce35e6c035, 0x5, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x2, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x800) accept(r8, &(0x7f0000000280), &(0x7f0000000300)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='signal_generate\x00', r7, 0x0, 0x3}, 0x18) (async) clock_nanosleep(0x6ce0024abb6183bb, 0x0, 0x0, 0xfffffffffffffffe) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r9, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000006, 0x1010, 0xffffffffffffffff, 0x0) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002, 0x10050, 0xffffffffffffffff, 0x10000000) (async) r12 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) syz_io_uring_submit(r13, r14, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x5c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1, {0x0, r15}}) (async) syz_io_uring_submit(r10, r11, &(0x7f0000000440)=@IORING_OP_LINK_TIMEOUT={0xf, 0xb, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x989680}, 0x1, 0xc, 0x1, {0x0, r15}}) io_uring_setup(0x3f1, &(0x7f0000000480)={0x0, 0x1a9b, 0x4, 0x0, 0xfffffffc}) 1.652995093s ago: executing program 3 (id=119): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001e00010026bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="00009d"], 0x34}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) (fail_nth: 4) 1.652475323s ago: executing program 2 (id=120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) recvmmsg(r0, &(0x7f0000009900)=[{{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000440)=""/117, 0x75}, {&(0x7f0000000540)=""/6, 0x6}, {&(0x7f00000006c0)=""/88, 0x58}, {&(0x7f0000000740)=""/94, 0x5e}, {&(0x7f00000007c0)=""/84, 0x54}, {&(0x7f0000000840)=""/145, 0x91}, {&(0x7f0000001a00)=""/172, 0xac}], 0x7, &(0x7f0000001ac0)=""/88, 0x58}, 0x1}, {{&(0x7f0000001b40)=@nfc_llcp, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001bc0)=""/106, 0x6a}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x2}, 0x2}, {{&(0x7f0000002c80)=@hci, 0x80, &(0x7f0000004300)=[{&(0x7f0000009b40)=""/76, 0x4c}, {&(0x7f0000009bc0)=""/193, 0xc1}, {&(0x7f0000002e80)=""/151, 0x97}, {&(0x7f0000002f40)=""/69, 0x45}, {&(0x7f0000002fc0)=""/146, 0x92}, {&(0x7f0000003080)=""/246, 0xf6}, {&(0x7f0000003180)=""/204, 0xcc}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/54, 0x36}, {&(0x7f00000042c0)=""/46, 0x2e}], 0xa}, 0x4}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f00000043c0)=""/57, 0x39}, {&(0x7f0000004400)=""/156, 0x9c}], 0x2, &(0x7f0000004500)=""/72, 0x48}, 0x6}, {{&(0x7f0000004580), 0x80, &(0x7f00000049c0)=[{&(0x7f0000004600)=""/145, 0x91}, {&(0x7f00000046c0)=""/216, 0xd8}, {&(0x7f00000047c0)=""/78, 0x4e}, {&(0x7f0000004840)=""/249, 0xf9}, {&(0x7f0000004940)=""/128, 0x80}], 0x5, &(0x7f0000004a40)=""/100, 0x64}, 0x6}, {{&(0x7f0000004ac0)=@ax25={{0x3, @rose}, [@bcast, @default, @rose, @rose, @remote, @null, @null, @bcast]}, 0x80, &(0x7f0000006f40)=[{&(0x7f0000004b40)=""/218, 0xda}, {&(0x7f0000004c40)=""/98, 0x62}, {&(0x7f0000004cc0)=""/111, 0x6f}, {&(0x7f0000004d40)=""/112, 0x70}, {&(0x7f0000004dc0)=""/166, 0xa6}, {&(0x7f0000004e80)=""/4096, 0x1000}, {&(0x7f0000005e80)=""/42, 0x2a}, {&(0x7f0000005ec0)=""/26, 0x1a}, {&(0x7f0000005f00)}, {&(0x7f0000005f40)=""/4096, 0x1000}], 0xa, &(0x7f0000007000)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000008000), 0x80, &(0x7f0000008500)=[{&(0x7f0000008080)=""/81, 0x51}, {&(0x7f0000008100)=""/143, 0x8f}, {&(0x7f00000081c0)=""/241, 0xf1}, {&(0x7f00000082c0)=""/224, 0xe0}, {&(0x7f00000083c0)=""/157, 0x9d}, {&(0x7f0000008480)=""/20, 0x14}, {&(0x7f0000005f00)=""/36, 0x24}], 0x7, &(0x7f0000008580)=""/16, 0x10}, 0x5}, {{&(0x7f00000085c0)=@caif, 0x80, &(0x7f0000008700)=[{&(0x7f0000008640)=""/72, 0x48}, {&(0x7f00000086c0)=""/28, 0x1c}], 0x2, &(0x7f0000008740)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000009840)=[{&(0x7f0000009740)=""/216, 0xd8}], 0x1, &(0x7f0000009880)=""/100, 0x64}, 0x3}], 0x9, 0x10020, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x8, &(0x7f0000000380)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x104000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) syz_io_uring_setup(0x6f6f, &(0x7f0000000980)={0x0, 0x80772a, 0x2, 0x4, 0xfffffffc}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000640)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}, 0x0, 0x0, 0x8a, 0x70, 0x4, 0x2eb, 0x2, 0x7, 0x6, 0x0, 0x0, r5}) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x800, 0x70bd26, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/slabinfo\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000040)={0x15, 0x1000, &(0x7f0000000a00)="c20538249fbea02646be7c84f1440dcb340f4faa842e8c90e7c420136893e14824d9c3ce3d146d5e044bb0a8012c36c4787e815ba83a4ec1775017ee2df5f28b06bd5b422c20d1e2b45762f44f9f5c7ba4bfefd1e530da98fd98bd36ebafb5d4e0f51951f68245d3519a06446a0e14ef4f5663bae77fb485893502464e2675d36a4662105a674af34b1d4fe0473ef9507fa143d2cbcbb9e7cda53b345d2832afda4693d07c8878ae938aeb4686b342aef74ba29abdb249a6da69cb0ba60ebb62a75cb6c32c7192b2ab1ac236ef844f2bef1b8538a453f24ca33438cf6aab95b1dcdc975dcae196f89e156a32a56fb7283cf0a22377c95ad922ab7ea3d1e2273a8244c1f37f01b47b56eecd3214009b4c0cbc6bab790282f4028722b0a21feae23f0470c532bcc169c8e350cdf75d0c16111293bacaa680cf10775abf1ba1dc5ae42b338f4472cd7ba32ec7fe4751ea20e26c2e19e57ce3767118ebb96f91e32adcf73d97474102cd593f7042002a54e92e76dc66e4e43b4d17d879d1fa358924626952c1526cbf2a675e13e97000a11aaa6f749dc82d1bb63efc9db86ce2623eca5f90c78bd46824b6a48272898abbae07f26bf60c3cad1dc4391958949ef89a1efa0a049eb6fd41392f1d0485a0c3f863d25999e96ba094a47af4a2feda37bc91e525311219cb81f48b6892585c00a5925845067c89ba98b8d1dcca2fe80220365148671387fdd9676ade5ba2a9de1b1193cd11a81fe41f1ef78d0cc82df31b4f548b1276d007b597841af2af2a9f4fc9e5ca730dd75c267768bbb8b299d8761fc35c29e7716fd1a4307fc2a91e3a513c01d6aa19605ebd8c5faa3e647597ac261b91ced786a32a34ee9ddcfd7c5d173a2ba2c2c5d4d2e9917953d8d5e17378c2f2451a7a52434099c8807afd31fa01a3e3c4fbfba12d377a7e4c41de628ca8d805b2a0bd9910d00ea0f0ec58c95d07feb93075f7666c65bc74da6e213e5f9ba3214462785110feb7cb7e8466a88d47f081b4f284533b86773b756c2afb742e3ec6e3b300335eecb2f45b3ce0f82bb75dd5b8f0fdcc01982630c0c6bb8b0bdaeb2629c18ef5374e23a417637d7197fa6bd9eb061a5d2dd743337585695e0b8578c756f9833bd1903ae02e7c901858e237d48d2f65691dabead054849e44db7b2b61429454a3d0fb3be19b60276ac11467c1e7d4f2424b917d22d351a4d058bc95fef456accedbb4ac5991be3f00c1a36991c70ad0597ba5b1569e40fce75f9d1baaf0d47e873d9bcce2474a35e1f7848a56ac10c0fa2254b7f3889c1cd98bdf2dd672096dc91cd065427d9492c9836f14061f971da11081e9f959607e3bf339ff3c5178b7fa33c5a52db6da9975288d1280872947b49f28d7309c78b9efcdefb14343075e437da2e58a24e56ccc161f9eb263abe11cea9ce84fadc81f4336f516ee9d44c465f0b73da8a24951763912cd571c35fe3c12fc883dfcac01760bb5f475dd8abc179f66066038fb262d566e57d260406524d0760b2e832c57c8d5e9c75c06a04931ea12375363ade09eea6ed47168bf1d0f3c89cc18acca492a8af866b029fb5bf01bb3fb5c7d76fa82ec6950630f9d7590edfaac39665aeb321b11f8f4a33ddbd80f1229cb494e6a9b362882e51dfdabdbaeb503889afae30d581748e78093822fccc68437b631ba562bc8e004818c6acc87a8301081e1092a76aa8aa6d4f61ec0cb457086d657dcdb532d65a1fe174c8ae4c43ef8058cbc0ceeeb7f589a027b8af438f057ab9aa9b4f171d3753f3fa88b7bf82131cc0348f974ee2450532045f1ecf93dd93c05917d4a35af476395aa31cbad2b1816c488b012dd3311b995870e3bcac706c263558fbefc37a96861ddf89e16a27bcc62f79b5b95343a866174c310826a676b6324828032bf804d046c4aca1143f7191e38ec79d595fd33f7b4555d602de47b2a3ce025f6d151b6435988c75ee771e2e7d406086531a75d93d8462128dbdab5f673441552e6852409a6f984fae27e50e7934617628ac47a71a17cd6ea969ee8c264a522bfd930bb73d5cdc04ae858895b011213c1c6d55a2d5a46803302c2cfc0e1cbcedf3b51b0a55099657c9b0fc6d23e3b786fd755767d9f8a25b1a786433b6db49179422b685bfc9edeac2c78f4c87335931f48457fad08c55ce03b9ec65ecdcc6889f544e871c15573d5f29739bb4185b64a7201bf1b8fddf670dae2f2af39b03d255ebb3a0049273712fb647f7c53237f6f407bb1c6a55b9b83a1c760392f0ebaf94897e6687d5e60f8d2172f8aa75b7896205cc4116a5c0207b9e5406a9572fe462db2333233c752e59d29917da04796196bafdc735bf8efcdbf1f6d08142b75603792e7c2b7a8bc2c575e070dbf482eddafec256d3a910cbb4d452b31857db5ebd4f2839880de05a302426931edef9e8870032b1763f181bca666ce83deee7c6425d573cfbe48402c6c681cbbf3fdddc6d4df8e8c7d60ac8f48e45d316e7464fa55f55322584d3f293942802748c6ccda60c2bfea8ac96462e3e3aaae1e9ffd7423c9d2ea798f6e8df1bc80cf894476f22fca3a06318c9be45cc9ee169695b21ceb70180ca573a23569e06eafbc289cbd7ef9bdb68b3e5f2769a6fe2830459452e57fba59522053bcb46dcba933a3fddf4a9cb82c5a69579ed20e1dc107f19128de84f16e43350a2d1fd0aac81aa74f3258e747bb416e9119ec5f8ce60c5f44cec3d311b96bf90f92498c8265a46fc1a99bbef35b86c72a2794c2c12b903f7aed5dfcf191b805a24fb26664641dfe524ae907e938eede3e32877d6ca51212e570da264684a02a50682e884ea38ae653ad0b82684b16df701b07225f90ff084fc34bf9e93586015a8f0e98cbf07785d7eebfcf67f59e2f37d6c82204e4cc6b85a50a1c3594b84b134dba6c3eabc13261c3497ef62c30f9c3704fc07d629b5724b244e06f8ba0970936f3229b2d510f048a7162eeb896cb254abcac1bdc634da1dee8e654ba5469ea8ca05d6e725ec364dd98652cc21faf018e5b7acc98759b2df323320d7982cd3f4a350bc95e46be3c03299d9f804c39a6e4101280e47957cdadee92e891e278808c7e6bdce00a8bcf8549749ab614067cb159a9c6b1735e690941812670bae7c0fc3fc34d688709d69b49210e5beeba0c5b35f2d1f9d61c4580fc1d391c0040c4dc5b18fb0deda82b5120b69aa27d90f810889b9162ceff468a3ff34420f3d20cc7790e301ed82de5ffb0716724c692bda8d53ac9516d2c71abe04367e7d3a3d23a193154f1d46bf3f5a8353498863a08b9b389f01c9a3d968699bc4db575702630d96c7b715f781ef891d36dedeb4d26521b50530aa1b60a5980c5844705d6f55e8c3cd364a22f2701a0a8d1df83b9ccce6f4a0c8d115c3788a66a4fa6528d3cf24bdb4a56ddeb8e5cbd5e393e061db19b13242160f4f9da277442a945f4ee6f0fc47ec23d0c15154ba6ab4973d0419fea337c940c259eddb40503ceecd768c3311e2453f955713db3a5f9ad80da1285920b5c84545a1831b4203a8f5190f8e82c2cdfbbeba1264e9d6744d87a8a915ab03ce8ff076d3176ef25316f069b8d22419c0a0035d290a9e149324fcbe71ef9a08a3b3ac05e531a42fba1021f2968e16f0f399ee74fc0775bb3ca7b55c611d559b886d66603b9dbcd1cefbad4c3d6a23642012c7b02edeaa20902086394e58c2d5238fc7a79af3b69f17b08f3ef45dc34eae741cb8f79a5ca29e7ba22763dadbd809121a0cf28d5321ed63c892b9606873badf6cdc0731f81069d977f9f16fd8cb3c93ee6ad019dd23c2de9d9d50f54a5bdaf517370f8844c8a63fa401119392bbbe05a268aadf4fd32fb659eddbace4048a2eef2d08a7b751a31c6ed9cd8f71eacebbdc894826461e6b373304e195cbb9ed5bbcb13961c5b52c0bbdb8b36dcf83fadc334436fd43d304fd6baf20b1ed81b18c909933cb6c063bfe7840c183e7beb62bb74943b9aea6370a30ab2a81b3864d7a4c1ca35ef646309fcf0da36c41762e032750395407378ece67b968aed3172b394c30f2f0afc84b7913864bce62ad1d464fb7a49782a964d23fc36a1ad063b8357d4a85eaeecda589fce85aceeb16eb438aff70124860d90cf8dc64978c6eed583f50bc31d7e67526fc3c33350ba112bc9900b56fab93e54520cf0c546d7f82e3a9d5ecbfa2fa6a91ad426fc616ff511b9f32a7a5104110eaa00170678c5688f44fc55b2af95a503dae857aa893d8a552f004e071222e069d8197ad8cb43faf7419ab423de21bf1ff1794d00b570dfbf35afc4eebe919efb06afcafa45a17601eacf4a58ba7be879c2a6fb92f65255af24eea870f1bbc432acbfedd04a5da03e5c11e5d2ef40e411f07d1c373b2795e82cffdafcea0f9ef35a8de9c262f1f61dcbd49c5232a8b85067710df03a291a71bb01f5851f2f2df4bd2dc586fd8335d20a368b232bc15de6190b1a304138417543b628c2a1a98ddd78c837671bfdea0d9c886f6e5dd75089e6959f9ba3304dc53b87afe7903a6d22273299666992bc3da6cc7df6f903bc46b8e7f27cf39910f5a9b44c9a35ebaaae9c091a03314c5737dc496ccf447aebcc31213ec4c3f956892f13242be4cd6be28c067e5d31c4eb8022ef746e8918bf77e9772f78647e0d38ddef9c51f61b4ea9f9c789a1a5731f3032a6a7483a48f4993c17c903260182d127757d3e56ec764e17a061cad23ef443a2f57824e60bed8b1f4897e4eef7485d07f1944933d5f358413f9778f3d9fc50b34096f7583ccf59cee5c3c6bba29eb9520e43708f62f78e0a5a7c2cc95642e37b4e3dac4683ef1578ca460302e9e5f1469e72250e8e3101f0cbb33669a510e6370eeb172605b38ace52fefb7f7edd1d829f1db0e2d5c437047d1f8dcd15e4e1894ab7b9e315f1ff5a8bee80903b6720392116f5209051df43ee889f832e1c67ca5112fb861044497d22b608b49f0190e6d44b9156520bba59f76ab68bb2ceda7f3ad642a94c20daa55039cf1843efb5112d466e28c86c1283d93d76505dac47d63cbb96819cc5697d20c4eb119b84d9245c20f94d4c579f99531d42c88e90c6cd7d272cd4fcef51366f4aea075d932344f0fd8b46c775c5a49a216227e9ee8af8bb14736bf3f5e5d28e404ce9d2983200782e5588f638d50999e0096832a388899c66feeb78dcba3506ec727e1e0666d223be2f680ab59bd4659a9161a22842022c706266f3a0227f0c03ef5dfe8e3ce5110ad626c5f80e17b71561ec759ba8f11ef250599b262ba8126d5ab6e7879fe27ed0d6e91109ae2d1f12ec03c60e7157c44541b77e766aea5e1fcad8c5a4601ef214b4a514edbc12b48ad2069fad9d195643a869a7dbf250f9930de7d8770a612e22677d176e470d3fb6a361d48096828e234071e40f25f97556300f605356fb23d6f0822c4b62739823f53868d26122912c6574391888c0d718e13b1f18bfdaf2a90cfa3fde7c57b5cd7caef3ddb613b85f86a3063e5e3dd41386e03522cb79940d0b8eb99ceeac5b30e6c00903cbd8a8c1699e7d8f75ecd39c070bea03cbfd06dbbcea62c6f45a97d1bfb17262a95c4b47a53a5695d5e46b4a8988a9002f339675a438594be1621685f7c8594f427d7c096212f61fc6f4da7dd0038b2feeb7358f81b3502a3185253e37b1f9cb02ed202a1759d8268278742314d6e9b75510caea53d0e97f66369e94886fe8abdb6e0a0a3bb9589ebb0f10b00950e3bc303d3706267e2ddee06f70866023cbb9015518e7067d6e"}) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x1, 0x0, 0x1}, {0x3}}, {{0x4, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r8 = mq_open(&(0x7f00000001c0)='ba\xa5J_\xe5\xf9|a\x1dv]\x13mave_1\x00\xe0\xb2\xf0\xabT\x87I\xa4\xd4)c\xf2\xe0\xd0\xba\xdb\f\x16n\x96J\x90c\xc5~#\xc9\xfb\xef5\xab\xb9\xe8\xc7\xde\xc2\x80\f\x19L\xdb\xdc\x14\xb4\x86\x1d\xe0\x9b\xe4\"m\'+\xc8\x05\xa4\x1cT`\xdcL\x8f\xf0\xc9\xb7\xc8D\xcdWG\xe6%\xd9', 0x8c2, 0x30, 0x0) mq_getsetattr(r8, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r7], 0xe8}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000000) 1.652004823s ago: executing program 4 (id=121): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1440e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x3974, 0x100000000}, 0x0, 0x10000, 0x8, 0x1, 0x4, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) (fail_nth: 5) 1.627693086s ago: executing program 3 (id=122): perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) pipe2$9p(&(0x7f0000000080), 0x800) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001880)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x3a00, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x16, 0x4e, 0x66, 0x0, 0xb, 0x29, 0x0, @private=0xa010100, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f3609"}}, 0x5c) 1.333896525s ago: executing program 1 (id=123): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2090c0}, 0xc, &(0x7f0000000240)={&(0x7f00000012c0)={0x1404, r2, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1194, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "22e841951cf5c7e4bbcc6aaf944a3049208995ab4fb598cf5da2fe777f8dae0e0df5a5"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "8f99b857a750fcfac47b8b4b65e9ba725ea09235907505e37c6d1e02227f981c7e"}}, @TIPC_NLA_NODE_ID={0x95, 0x3, "3f86993755f747d5f442f0428fdfe0b8f9ff1aa203a9e74cea312ef443db5fba13bfb32071b83570032ff0efa3b0e3d0e090c383b3c4997c6fc7f41a4a25e0884672d8db06f4794e56ba499cd6bbcbf0f62e3c7559f0b98b72212916030407b51b2703d1813c3ef649b31910ec2995288991bd2dd8da94fa35b29579a0ef50ed4a1284003ae048d9e3809b2bcd96d5730b"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "7668428a46f74dda575a145d13845f75ceb5d2ba202a6aab6662fbfd5c"}}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @remote, 0xd}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @private2, 0xffffff80}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xe3, @mcast2, 0xfffffff7}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcf00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xed9e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "8354d0d789d7f1163d04256aaef7e595ae7f5cee211c02"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "437b86ce9934621df7368443ecdec7d55a8c019cdccfa7a12cec5ec3"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "04cfb5996598a48b99e2fd34f3f38e1160b74904abad9c"}}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x916}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x259}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7a}]}]}]}, 0x1404}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000780)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 1.209417258s ago: executing program 0 (id=124): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x10, 0x70bd28, 0x25dfdbfe, 0x6, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000001ec0), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x88}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000040) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r5, 0x5, 0x8, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x2c}}, 0x0) 1.208574218s ago: executing program 3 (id=125): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000003c0)='mm_migrate_pages\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) socket$netlink(0x10, 0x3, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) rename(&(0x7f0000000180)='./file1\x00', 0x0) (async) rename(&(0x7f0000000180)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x2200000, &(0x7f0000000940)={[{@noblock_validity}, {@usrquota}, {@data_err_abort}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@barrier}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}, {@usrquota}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0xd, &(0x7f0000000c80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xffffff46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xffffff46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188818842b0fc7d69f81ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) 1.154832524s ago: executing program 4 (id=126): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x9) r3 = dup(r2) sendfile(r3, r1, 0x0, 0x8000fffffffc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r7, 0x4, 0x46000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r10 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c000180060006008035"], 0x24}}, 0x10) connect$netlink(0xffffffffffffffff, 0x0, 0x0) 1.150218344s ago: executing program 1 (id=127): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x107000) 965.094623ms ago: executing program 2 (id=128): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000000206010400000000000000000000000314000780080011400000000005001500070000000500010007000000050005000a00000005000400001c00000900020073797a31000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x22004004}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r5 = getpgrp(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6ed2}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc845}, 0x4) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = syz_pidfd_open(r5, 0x0) fremovexattr(r7, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {0xb9}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x8}, [{}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x400}, {}, {0xffffffdf}, {0x80000000, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x1, 0x2}, {}, {0x0, 0x0, 0x0, 0xfffff7fb}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x4, 0x0, 0x1, 0x0, 0x0, 0xfffffffd}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, {}, {0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x6}, {}, {0x0, 0x0, 0x1, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10001}, {}, {}, {0x5, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x9}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8}, {}, {0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x4}, {0xffffffff, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x9}, {}, {}, {}, {}, {0x400}, {}, {0x0, 0x0, 0x400000}], [{}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {0x5}, {0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x4}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) flock(r10, 0x5) r11 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) flock(r11, 0x2) dup3(r11, r10, 0x0) 918.940167ms ago: executing program 0 (id=129): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000010000"], 0x50) r0 = socket$inet6(0xa, 0x2, 0x0) syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0xb3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x8, 0x10, 0x80000000, 0x9}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) umount2(0x0, 0x0) listen(r4, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24004804) 852.414004ms ago: executing program 1 (id=130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x7, 0x4, 0x80, 0xe, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 798.903379ms ago: executing program 0 (id=131): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1, 0x0, 0x100000000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2200850, &(0x7f0000000080)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodelalloc}, {@jqfmt_vfsv1}, {@norecovery}]}, 0x5, 0x596, &(0x7f0000000400)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14f0ff00530404002dbd7000fbdbdf2573000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000004) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x182) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r7, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 561.046263ms ago: executing program 2 (id=132): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095", @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 530.015067ms ago: executing program 3 (id=133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x0, 0x2, [@broadcast, @broadcast]}) 529.363076ms ago: executing program 1 (id=134): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000040)=@ethtool_sfeatures}) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000002, 0x1852, r0, 0xffffe000) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) unshare(0x22020600) (async) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) (async, rerun: 32) listen(r2, 0x3) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pimreg1\x00', 0x42a5e4b325a47b01}) io_setup(0x2, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x5, r4, &(0x7f0000000080)='\x00'/10, 0xa, 0x10001}]) 402.924089ms ago: executing program 2 (id=135): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0x764b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x4, 0x3c, 0x67, 0x0, 0x3, 0x6, 0x0, @loopback, @broadcast}, @payload_named={{{{{0x28, 0x0, 0x0, 0x1, 0x1, 0xa, 0x2, 0x2, 0xfff9, 0x0, 0x2, 0x9, 0x5, 0x2, 0xd04, 0x6, 0x3, 0x4e22, 0x4e24}, 0x4, 0x1}, 0x3, 0x1}}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 360.464013ms ago: executing program 4 (id=136): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40a200, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000001340)={'sit0\x00', 0x0, 0x40, 0x8, 0xff, 0x5, {{0x1b, 0x4, 0x3, 0xd, 0x6c, 0x65, 0x0, 0x2, 0x2f, 0x0, @multicast1, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x34, 0xfd, 0x3, 0x4, [{@local, 0x7f}, {@multicast2, 0x6}, {@remote, 0x2f}, {@private=0xa010102, 0x5}, {@remote, 0x1}, {@multicast2, 0x1000}]}, @ssrr={0x89, 0x17, 0x24, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xd}]}, @rr={0x7, 0xb, 0x16, [@broadcast, @multicast2]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=@ipv6_deladdr={0xa4, 0x15, 0x1, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x2, 0xfd, r1}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_FLAGS={0x8, 0x8, 0x90}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x1, 0x7, 0x2}}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_FLAGS={0x8, 0x8, 0xe7406e66a0a20e96}, @IFA_TARGET_NETNSID={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x83ff, 0x2, 0xfffffffd}}]}, 0xa4}}, 0x40000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x600, 0x1a3) renameat2(r0, &(0x7f0000000640)='./file0\x00', r2, &(0x7f0000000700)='./file0\x00', 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r4, 0x0, 0x5}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0xeb}}, {@noblock_validity}]}, 0x1, 0x511, &(0x7f0000000a80)="$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") r6 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$rtl8150(r6, &(0x7f0000001500)={0x14, &(0x7f0000001400)={0x0, 0xe, 0xb3, {0xb3, 0x2, "eba355df71d0b166599df4d7b6203cfd69f54d326ad7f428c3a7adb24383d6bed4a1fc619620713d7313f6475ce6d4bec234de8ca3fc904dea781dff033b9ca315e43383d72b7ce345975c29b943d5da4e94b002cd790c85b2645fa62c906ac8aab8cf6ccca7df0db83038387b1ba6ece168643c2be3ad8e5ad4d909c7162a7bfb1ccf6aaecbdef50d0fde821b8785d18881c2295e28c77e1f1f9fc46b5694dee6610937bf1ade9452bd1090fb256d6e8d"}}, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}}, &(0x7f0000001740)={0x2c, &(0x7f0000001540)={0x40, 0xb, 0xe8, "dd9fdf071cf4b3d2f21ae31996207def59dc93c00122bb7d0e18613d1461b4b0137c14981356fda7229b193ff3d06b16b73d5598ac82ed83a3aef482e8e0ad2a2b3e4c56b46b7ace19c9cbfd6cd8368f24d66b4aa62b2064c6d0a5c46e56584f8e7671fb5744dd3847b1b2f2f7e4b76a3c8a09a0dbfe3c60beef847478cde64fb78eedc025498c2dc01f41a5757f2065a296e265056ca75b4b1ebca1b7299fa4e873d9a7c149fbf07dd7d6e9ab64a35bfa5638c783aab1fee57de8b8d6906d4064b3e5730b5efd882d1d2760b631f258f6c8a5d6c414c8dbba50810c2c4ff03a77597fa738b688ab"}, &(0x7f0000001640)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000001680)={0x0, 0x8, 0x1}, &(0x7f00000016c0)={0xc0, 0x5, 0x5, "66b78093f0"}, &(0x7f0000001700)={0x40, 0x5, 0x4, "151da575"}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000017000000850000002d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RRENAMEAT(r9, &(0x7f00000002c0)={0x7, 0x4b, 0x2}, 0xff7a) write$P9_RREADDIR(r9, &(0x7f0000000300)={0x1012, 0x29, 0x2, {0x7, [{{0x20, 0x3, 0x3}, 0x100000000, 0xbc, 0xfef, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}]}}, 0x1012) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r8}, 0x18) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 358.911453ms ago: executing program 3 (id=137): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0x764b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x4, 0x3c, 0x67, 0x0, 0x3, 0x6, 0x0, @loopback, @broadcast}, @payload_named={{{{{0x28, 0x0, 0x0, 0x1, 0x1, 0xa, 0x2, 0x2, 0xfff9, 0x0, 0x2, 0x9, 0x5, 0x2, 0xd04, 0x6, 0x3, 0x4e22, 0x4e24}, 0x4, 0x1}, 0x3, 0x1}}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) (fail_nth: 3) 123.041047ms ago: executing program 1 (id=138): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x11) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000400), &(0x7f00000004c0)=0x37) r5 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast1, @in6=@loopback, 0x4e20, 0x0, 0x4, 0xfffc, 0x2}, {0x0, 0x802, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@empty, 0x3507, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffffd}}, 0xe8) r6 = inotify_init1(0x80800) fcntl$setsig(r6, 0xa, 0x14) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f00000002c0)={0x1d, r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(0x0, 0x90) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000500)=""/249) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) 6.917849ms ago: executing program 0 (id=139): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x2200, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000340)) getsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000000380), &(0x7f00000003c0)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000280)={0x20808000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x40}, &(0x7f00000000c0)=""/51, 0x33, &(0x7f0000000100)=""/233, &(0x7f0000000200)=[r0, r1, r5, 0xffffffffffffffff, r6], 0x5, {r7}}, 0x58) set_robust_list(&(0x7f0000000300)={0x0, 0x400}, 0x18) 4.81593ms ago: executing program 3 (id=140): dup(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000100000000000000000500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf2504000000"], 0x14}}, 0x800) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000c00)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000426bd7000fcdbdf2501000000a0fe03000100000008000400010100000800040074000000050005004000000005000500080000000c00018008000700", @ANYRES32=0x0, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000004c0)='kfree\x00'}, 0x18) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffecb, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r7, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800400010054000380"], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000007000000000000000000000000000000dddfeee7ff3691e2"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) setsockopt(r8, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) dup2(r8, 0xffffffffffffffff) 0s ago: executing program 2 (id=141): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) (fail_nth: 3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. [ 64.221092][ T29] audit: type=1400 audit(1768065968.488:62): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.244025][ T29] audit: type=1400 audit(1768065968.508:63): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.244774][ T3315] cgroup: Unknown subsys name 'net' [ 64.271678][ T29] audit: type=1400 audit(1768065968.538:64): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.400021][ T3315] cgroup: Unknown subsys name 'cpuset' [ 64.406056][ T3315] cgroup: Unknown subsys name 'rlimit' [ 64.575487][ T29] audit: type=1400 audit(1768065968.838:65): avc: denied { setattr } for pid=3315 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.604375][ T29] audit: type=1400 audit(1768065968.838:66): avc: denied { create } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.624946][ T29] audit: type=1400 audit(1768065968.838:67): avc: denied { write } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.645368][ T29] audit: type=1400 audit(1768065968.838:68): avc: denied { read } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.652188][ T3318] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 64.665641][ T29] audit: type=1400 audit(1768065968.848:69): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 64.698941][ T29] audit: type=1400 audit(1768065968.848:70): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 64.722171][ T29] audit: type=1400 audit(1768065968.848:71): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 64.748687][ T3315] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.709814][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 66.728530][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 66.767621][ T3331] chnl_net:caif_netlink_parms(): no params data found [ 66.780039][ T3329] chnl_net:caif_netlink_parms(): no params data found [ 66.814410][ T3333] chnl_net:caif_netlink_parms(): no params data found [ 66.862498][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.869614][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.876735][ T3326] bridge_slave_0: entered allmulticast mode [ 66.883125][ T3326] bridge_slave_0: entered promiscuous mode [ 66.897825][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.904896][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.911999][ T3325] bridge_slave_0: entered allmulticast mode [ 66.918353][ T3325] bridge_slave_0: entered promiscuous mode [ 66.924901][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.931942][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.939051][ T3326] bridge_slave_1: entered allmulticast mode [ 66.945398][ T3326] bridge_slave_1: entered promiscuous mode [ 66.963023][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.970141][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.977281][ T3325] bridge_slave_1: entered allmulticast mode [ 66.983683][ T3325] bridge_slave_1: entered promiscuous mode [ 67.020210][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.027249][ T3329] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.034398][ T3329] bridge_slave_0: entered allmulticast mode [ 67.040800][ T3329] bridge_slave_0: entered promiscuous mode [ 67.052452][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.061559][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.068708][ T3331] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.076066][ T3331] bridge_slave_0: entered allmulticast mode [ 67.082417][ T3331] bridge_slave_0: entered promiscuous mode [ 67.092962][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.100024][ T3329] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.107168][ T3329] bridge_slave_1: entered allmulticast mode [ 67.113928][ T3329] bridge_slave_1: entered promiscuous mode [ 67.121101][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.131025][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.140199][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.147217][ T3331] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.154399][ T3331] bridge_slave_1: entered allmulticast mode [ 67.160871][ T3331] bridge_slave_1: entered promiscuous mode [ 67.167089][ T3333] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.174151][ T3333] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.181362][ T3333] bridge_slave_0: entered allmulticast mode [ 67.187745][ T3333] bridge_slave_0: entered promiscuous mode [ 67.199662][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.217035][ T3333] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.224273][ T3333] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.231465][ T3333] bridge_slave_1: entered allmulticast mode [ 67.237679][ T3333] bridge_slave_1: entered promiscuous mode [ 67.266387][ T3329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.280295][ T3326] team0: Port device team_slave_0 added [ 67.286820][ T3331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.301454][ T3329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.311277][ T3325] team0: Port device team_slave_0 added [ 67.317439][ T3326] team0: Port device team_slave_1 added [ 67.323877][ T3331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.333902][ T3333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.348296][ T3325] team0: Port device team_slave_1 added [ 67.363164][ T3333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.395096][ T3329] team0: Port device team_slave_0 added [ 67.405514][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.412487][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.438373][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.449882][ T3331] team0: Port device team_slave_0 added [ 67.460244][ T3329] team0: Port device team_slave_1 added [ 67.466532][ T3333] team0: Port device team_slave_0 added [ 67.472455][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.479492][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.505403][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.516478][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.523434][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.549342][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.560847][ T3331] team0: Port device team_slave_1 added [ 67.571794][ T3333] team0: Port device team_slave_1 added [ 67.577820][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.584763][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.610728][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.648162][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.655222][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.681413][ T3329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.693842][ T3333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.700805][ T3333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.726807][ T3333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.737719][ T3331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.744720][ T3331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.770671][ T3331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.782058][ T3331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.789014][ T3331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.815035][ T3331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.830366][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.837313][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.863325][ T3329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.881406][ T3333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.888392][ T3333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.914361][ T3333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.947107][ T3326] hsr_slave_0: entered promiscuous mode [ 67.953219][ T3326] hsr_slave_1: entered promiscuous mode [ 67.966949][ T3325] hsr_slave_0: entered promiscuous mode [ 67.973021][ T3325] hsr_slave_1: entered promiscuous mode [ 67.978774][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 67.984546][ T3325] Cannot create hsr debugfs directory [ 68.002797][ T3331] hsr_slave_0: entered promiscuous mode [ 68.008755][ T3331] hsr_slave_1: entered promiscuous mode [ 68.014551][ T3331] debugfs: 'hsr0' already exists in 'hsr' [ 68.020297][ T3331] Cannot create hsr debugfs directory [ 68.042560][ T3329] hsr_slave_0: entered promiscuous mode [ 68.048610][ T3329] hsr_slave_1: entered promiscuous mode [ 68.054857][ T3329] debugfs: 'hsr0' already exists in 'hsr' [ 68.060610][ T3329] Cannot create hsr debugfs directory [ 68.077323][ T3333] hsr_slave_0: entered promiscuous mode [ 68.083369][ T3333] hsr_slave_1: entered promiscuous mode [ 68.089225][ T3333] debugfs: 'hsr0' already exists in 'hsr' [ 68.094991][ T3333] Cannot create hsr debugfs directory [ 68.277564][ T3326] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.286004][ T3326] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.296918][ T3326] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.308372][ T3326] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.326496][ T3331] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.344771][ T3331] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.356090][ T3331] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.365014][ T3329] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.373955][ T3331] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.383003][ T3329] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.391930][ T3329] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.405057][ T3329] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.436177][ T3325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.449728][ T3325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.460644][ T3325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.472898][ T3325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.499331][ T3333] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.525178][ T3333] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.534018][ T3333] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.557120][ T3331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.564319][ T3333] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.590816][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.604826][ T3331] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.623473][ T3329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.633632][ T402] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.640706][ T402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.655326][ T402] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.662441][ T402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.673452][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.687792][ T402] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.694906][ T402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.707012][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.718586][ T3329] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.726687][ T402] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.733784][ T402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.748068][ T402] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.755145][ T402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.775877][ T402] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.782931][ T402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.794967][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.810644][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.817689][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.833486][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.840674][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.868413][ T3333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.912828][ T3333] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.934654][ T402] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.941843][ T402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.964827][ T402] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.972064][ T402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.988455][ T3331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.007717][ T3333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.052811][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.063317][ T3329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.074787][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.129595][ T3333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.153995][ T3331] veth0_vlan: entered promiscuous mode [ 69.187682][ T3331] veth1_vlan: entered promiscuous mode [ 69.228349][ T3326] veth0_vlan: entered promiscuous mode [ 69.270153][ T3331] veth0_macvtap: entered promiscuous mode [ 69.281236][ T3329] veth0_vlan: entered promiscuous mode [ 69.287868][ T3326] veth1_vlan: entered promiscuous mode [ 69.298587][ T3331] veth1_macvtap: entered promiscuous mode [ 69.314202][ T3329] veth1_vlan: entered promiscuous mode [ 69.320432][ T3333] veth0_vlan: entered promiscuous mode [ 69.335740][ T3331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.343309][ T3325] veth0_vlan: entered promiscuous mode [ 69.353125][ T3333] veth1_vlan: entered promiscuous mode [ 69.362573][ T3331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.371353][ T3325] veth1_vlan: entered promiscuous mode [ 69.384352][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.398293][ T3326] veth0_macvtap: entered promiscuous mode [ 69.404868][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.414516][ T3326] veth1_macvtap: entered promiscuous mode [ 69.422874][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.435563][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.455338][ T3325] veth0_macvtap: entered promiscuous mode [ 69.462667][ T3329] veth0_macvtap: entered promiscuous mode [ 69.475064][ T3325] veth1_macvtap: entered promiscuous mode [ 69.481745][ T3333] veth0_macvtap: entered promiscuous mode [ 69.490583][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 69.490595][ T29] audit: type=1400 audit(1768065973.758:85): avc: denied { mounton } for pid=3331 comm="syz-executor" path="/root/syzkaller.KfcwOA/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.500143][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.525914][ T29] audit: type=1400 audit(1768065973.788:86): avc: denied { mount } for pid=3331 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.533336][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.550075][ T29] audit: type=1400 audit(1768065973.788:87): avc: denied { mounton } for pid=3331 comm="syz-executor" path="/root/syzkaller.KfcwOA/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.559850][ T3333] veth1_macvtap: entered promiscuous mode [ 69.582575][ T29] audit: type=1400 audit(1768065973.788:88): avc: denied { mount } for pid=3331 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.591228][ T3329] veth1_macvtap: entered promiscuous mode [ 69.610051][ T29] audit: type=1400 audit(1768065973.788:89): avc: denied { mounton } for pid=3331 comm="syz-executor" path="/root/syzkaller.KfcwOA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.626285][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.642472][ T29] audit: type=1400 audit(1768065973.788:90): avc: denied { mounton } for pid=3331 comm="syz-executor" path="/root/syzkaller.KfcwOA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.642497][ T29] audit: type=1400 audit(1768065973.788:91): avc: denied { unmount } for pid=3331 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.660187][ T29] audit: type=1400 audit(1768065973.928:92): avc: denied { mounton } for pid=3331 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.682214][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.707445][ T29] audit: type=1400 audit(1768065973.968:93): avc: denied { mount } for pid=3331 comm="syz-executor" name="/" dev="gadgetfs" ino=3921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.723356][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.756978][ T3331] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.758384][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.784283][ T3333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.785240][ T29] audit: type=1400 audit(1768065974.048:94): avc: denied { read write } for pid=3331 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.793340][ T3333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.834655][ T923] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.854411][ T923] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.905699][ T923] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.911292][ T3500] loop2: detected capacity change from 0 to 512 [ 69.951101][ T923] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.966371][ T3508] loop0: detected capacity change from 0 to 256 [ 70.023984][ T3500] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 70.052599][ T923] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.079808][ T3500] EXT4-fs (loop2): mount failed [ 70.100081][ T3514] vhci_hcd vhci_hcd.4: invalid port number 249 [ 70.106298][ T3514] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 70.109725][ T923] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.166672][ T923] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.177458][ T923] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.188778][ T923] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.198057][ T923] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.207952][ T923] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.223229][ T3527] hub 6-0:1.0: USB hub found [ 70.228250][ T3527] hub 6-0:1.0: 8 ports detected [ 70.240073][ T923] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.255822][ T3527] netlink: 'syz.0.7': attribute type 12 has an invalid length. [ 70.265598][ T923] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.289670][ T923] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.317071][ T923] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.341128][ T3531] loop0: detected capacity change from 0 to 512 [ 70.353909][ T923] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.413132][ T3531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.415508][ T3529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.427483][ T3531] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.463589][ T3529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.485838][ T3531] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8'. [ 70.498762][ T3531] IPv6: NLM_F_CREATE should be specified when creating new route [ 70.706493][ T3329] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.912489][ T3546] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.919702][ T3546] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.960027][ T3546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.969021][ T3546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.007085][ T923] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.018962][ T923] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.029548][ T923] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.060127][ T923] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.170761][ T3568] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 71.192180][ T3568] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 71.275452][ T3583] netlink: 43 bytes leftover after parsing attributes in process `syz.2.18'. [ 71.446409][ T3596] loop3: detected capacity change from 0 to 512 [ 71.475776][ T3596] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 71.875253][ T3683] loop2: detected capacity change from 0 to 512 [ 71.966030][ T3687] tipc: Started in network mode [ 71.970971][ T3687] tipc: Node identity 56ef51ee99c1, cluster identity 4711 [ 71.978211][ T3687] tipc: Enabled bearer , priority 0 [ 71.996478][ T3683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.079611][ T3683] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.091334][ T3687] syzkaller0: entered promiscuous mode [ 72.096866][ T3687] syzkaller0: entered allmulticast mode [ 72.196533][ T3687] 9pnet_fd: p9_fd_create_unix (3687): problem connecting socket: ./file0: -2 [ 72.214731][ T3683] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 72.244490][ T3687] tipc: Resetting bearer [ 72.297365][ T3687] tipc: Disabling bearer [ 72.318881][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.547389][ T3699] loop2: detected capacity change from 0 to 128 [ 72.569386][ T3699] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.571665][ T3703] netlink: 'syz.3.33': attribute type 4 has an invalid length. [ 72.590381][ T3699] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.604428][ T3708] FAULT_INJECTION: forcing a failure. [ 72.604428][ T3708] name failslab, interval 1, probability 0, space 0, times 0 [ 72.617135][ T3708] CPU: 0 UID: 0 PID: 3708 Comm: syz.1.35 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.617198][ T3708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.617269][ T3708] Call Trace: [ 72.617283][ T3708] [ 72.617290][ T3708] __dump_stack+0x1d/0x30 [ 72.617331][ T3708] dump_stack_lvl+0x95/0xd0 [ 72.617349][ T3708] dump_stack+0x15/0x1b [ 72.617364][ T3708] should_fail_ex+0x265/0x280 [ 72.617419][ T3708] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 72.617447][ T3708] should_failslab+0x8c/0xb0 [ 72.617464][ T3708] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 72.617561][ T3708] ? shmem_alloc_inode+0x34/0x50 [ 72.617658][ T3708] ? kstrtouint_from_user+0x9f/0xf0 [ 72.617676][ T3708] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 72.617699][ T3708] shmem_alloc_inode+0x34/0x50 [ 72.617724][ T3708] alloc_inode+0x40/0x170 [ 72.617802][ T3708] new_inode+0x1d/0xe0 [ 72.617824][ T3708] shmem_get_inode+0x246/0x750 [ 72.617905][ T3708] __shmem_file_setup+0x113/0x210 [ 72.617995][ T3708] shmem_file_setup+0x3b/0x50 [ 72.618053][ T3708] __se_sys_memfd_create+0x2f7/0x6b0 [ 72.618080][ T3708] __x64_sys_memfd_create+0x31/0x40 [ 72.618106][ T3708] x64_sys_call+0x28cb/0x3000 [ 72.618178][ T3708] do_syscall_64+0xca/0x2b0 [ 72.618211][ T3708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.618233][ T3708] RIP: 0033:0x7f394a67f749 [ 72.618248][ T3708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.618329][ T3708] RSP: 002b:00007f39490e6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 72.618349][ T3708] RAX: ffffffffffffffda RBX: 00000000000002a8 RCX: 00007f394a67f749 [ 72.618374][ T3708] RDX: 00007f39490e6ef0 RSI: 0000000000000000 RDI: 00007f394a704960 [ 72.618386][ T3708] RBP: 0000200000000280 R08: 00007f39490e6bb7 R09: 00007f39490e6e40 [ 72.618399][ T3708] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000000c0 [ 72.618411][ T3708] R13: 00007f39490e6ef0 R14: 00007f39490e6eb0 R15: 0000200000000100 [ 72.618426][ T3708] [ 72.886927][ T3331] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.963977][ T3717] loop2: detected capacity change from 0 to 128 [ 72.972141][ T3720] veth2: entered promiscuous mode [ 72.989278][ T3717] FAT-fs (loop2): Directory bread(block 162) failed [ 73.038279][ T3724] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.040409][ T3717] FAT-fs (loop2): Directory bread(block 163) failed [ 73.080996][ T3724] netlink: 168 bytes leftover after parsing attributes in process `syz.1.41'. [ 73.087750][ T3717] FAT-fs (loop2): Directory bread(block 164) failed [ 73.097733][ T3717] FAT-fs (loop2): Directory bread(block 165) failed [ 73.122478][ T3728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.43'. [ 73.137614][ T3717] FAT-fs (loop2): Directory bread(block 166) failed [ 73.170349][ T3717] FAT-fs (loop2): Directory bread(block 167) failed [ 73.177686][ T3717] FAT-fs (loop2): Directory bread(block 168) failed [ 73.201051][ T3740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.209989][ T3728] loop4: detected capacity change from 0 to 512 [ 73.212820][ T3740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.217547][ T3728] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.229495][ T3717] FAT-fs (loop2): Directory bread(block 169) failed [ 73.237087][ T3728] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.245139][ T3722] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 73.299678][ T3728] EXT4-fs (loop4): 1 truncate cleaned up [ 73.305802][ T3728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.406159][ T3749] process 'syz.2.50' launched '/dev/fd/7' with NULL argv: empty string added [ 73.415883][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.464295][ T3751] loop4: detected capacity change from 0 to 1024 [ 73.493757][ T3751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.529010][ C0] hrtimer: interrupt took 37847 ns [ 73.538712][ T3760] FAULT_INJECTION: forcing a failure. [ 73.538712][ T3760] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 73.551843][ T3760] CPU: 1 UID: 0 PID: 3760 Comm: syz.1.53 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.551867][ T3760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.551949][ T3760] Call Trace: [ 73.551955][ T3760] [ 73.551962][ T3760] __dump_stack+0x1d/0x30 [ 73.551987][ T3760] dump_stack_lvl+0x95/0xd0 [ 73.552008][ T3760] dump_stack+0x15/0x1b [ 73.552026][ T3760] should_fail_ex+0x265/0x280 [ 73.552067][ T3760] should_fail+0xb/0x20 [ 73.552086][ T3760] should_fail_usercopy+0x1a/0x20 [ 73.552110][ T3760] _copy_from_iter+0xcf/0xe70 [ 73.552136][ T3760] ? __alloc_skb+0x396/0x4b0 [ 73.552207][ T3760] ? __alloc_skb+0x228/0x4b0 [ 73.552230][ T3760] netlink_sendmsg+0x471/0x6b0 [ 73.552326][ T3760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.552414][ T3760] __sock_sendmsg+0x145/0x180 [ 73.552435][ T3760] ____sys_sendmsg+0x31e/0x4a0 [ 73.552504][ T3760] ___sys_sendmsg+0x17b/0x1d0 [ 73.552553][ T3760] __x64_sys_sendmsg+0xd4/0x160 [ 73.552590][ T3760] x64_sys_call+0x17ba/0x3000 [ 73.552609][ T3760] do_syscall_64+0xca/0x2b0 [ 73.552704][ T3760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.552819][ T3760] RIP: 0033:0x7f394a67f749 [ 73.552833][ T3760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.552848][ T3760] RSP: 002b:00007f39490e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.552864][ T3760] RAX: ffffffffffffffda RBX: 00007f394a8d5fa0 RCX: 00007f394a67f749 [ 73.552874][ T3760] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 73.552890][ T3760] RBP: 00007f39490e7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.552900][ T3760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.552971][ T3760] R13: 00007f394a8d6038 R14: 00007f394a8d5fa0 R15: 00007ffdca85d8d8 [ 73.553016][ T3760] [ 73.750073][ T3722] syz.0.37 (3722) used greatest stack depth: 10064 bytes left [ 73.831744][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.856687][ T3774] FAULT_INJECTION: forcing a failure. [ 73.856687][ T3774] name failslab, interval 1, probability 0, space 0, times 0 [ 73.869504][ T3774] CPU: 1 UID: 0 PID: 3774 Comm: syz.2.59 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.869530][ T3774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.869542][ T3774] Call Trace: [ 73.869547][ T3774] [ 73.869555][ T3774] __dump_stack+0x1d/0x30 [ 73.869645][ T3774] dump_stack_lvl+0x95/0xd0 [ 73.869663][ T3774] dump_stack+0x15/0x1b [ 73.869711][ T3774] should_fail_ex+0x265/0x280 [ 73.869735][ T3774] should_failslab+0x8c/0xb0 [ 73.869755][ T3774] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 73.869777][ T3774] ? __alloc_skb+0x2ff/0x4b0 [ 73.869802][ T3774] __alloc_skb+0x2ff/0x4b0 [ 73.869855][ T3774] ? __alloc_skb+0x228/0x4b0 [ 73.869902][ T3774] netlink_alloc_large_skb+0xbf/0xf0 [ 73.869929][ T3774] netlink_sendmsg+0x3cf/0x6b0 [ 73.869961][ T3774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.870065][ T3774] __sock_sendmsg+0x145/0x180 [ 73.870085][ T3774] ____sys_sendmsg+0x31e/0x4a0 [ 73.870109][ T3774] ___sys_sendmsg+0x17b/0x1d0 [ 73.870168][ T3774] __x64_sys_sendmsg+0xd4/0x160 [ 73.870200][ T3774] x64_sys_call+0x17ba/0x3000 [ 73.870224][ T3774] do_syscall_64+0xca/0x2b0 [ 73.870262][ T3774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.870279][ T3774] RIP: 0033:0x7f03e979f749 [ 73.870292][ T3774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.870375][ T3774] RSP: 002b:00007f03e8207038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.870427][ T3774] RAX: ffffffffffffffda RBX: 00007f03e99f5fa0 RCX: 00007f03e979f749 [ 73.870441][ T3774] RDX: 0000000020008010 RSI: 00002000000002c0 RDI: 0000000000000008 [ 73.870499][ T3774] RBP: 00007f03e8207090 R08: 0000000000000000 R09: 0000000000000000 [ 73.870556][ T3774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.870565][ T3774] R13: 00007f03e99f6038 R14: 00007f03e99f5fa0 R15: 00007ffd790ccb98 [ 73.870667][ T3774] [ 74.079235][ T3775] loop1: detected capacity change from 0 to 128 [ 74.109730][ T3783] netlink: 'syz.3.62': attribute type 1 has an invalid length. [ 74.117334][ T3783] netlink: 'syz.3.62': attribute type 4 has an invalid length. [ 74.124988][ T3783] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.62'. [ 74.189845][ T3792] FAULT_INJECTION: forcing a failure. [ 74.189845][ T3792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.203304][ T3792] CPU: 0 UID: 0 PID: 3792 Comm: syz.4.65 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.203328][ T3792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.203338][ T3792] Call Trace: [ 74.203411][ T3792] [ 74.203419][ T3792] __dump_stack+0x1d/0x30 [ 74.203444][ T3792] dump_stack_lvl+0x95/0xd0 [ 74.203465][ T3792] dump_stack+0x15/0x1b [ 74.203484][ T3792] should_fail_ex+0x265/0x280 [ 74.203580][ T3792] should_fail+0xb/0x20 [ 74.203598][ T3792] should_fail_usercopy+0x1a/0x20 [ 74.203617][ T3792] _copy_from_user+0x1c/0xb0 [ 74.203644][ T3792] __sys_sendto+0x19e/0x330 [ 74.203682][ T3792] __x64_sys_sendto+0x76/0x90 [ 74.203703][ T3792] x64_sys_call+0x29a7/0x3000 [ 74.203722][ T3792] do_syscall_64+0xca/0x2b0 [ 74.203766][ T3792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.203789][ T3792] RIP: 0033:0x7f15cab8f749 [ 74.203813][ T3792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.203835][ T3792] RSP: 002b:00007f15c95f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 74.203884][ T3792] RAX: ffffffffffffffda RBX: 00007f15cade5fa0 RCX: 00007f15cab8f749 [ 74.203896][ T3792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 74.203908][ T3792] RBP: 00007f15c95f7090 R08: 0000200000b63fe4 R09: 000000000000001c [ 74.203920][ T3792] R10: 0000000022004001 R11: 0000000000000246 R12: 0000000000000001 [ 74.203932][ T3792] R13: 00007f15cade6038 R14: 00007f15cade5fa0 R15: 00007ffd676e1f88 [ 74.203950][ T3792] [ 74.408205][ T3800] FAULT_INJECTION: forcing a failure. [ 74.408205][ T3800] name failslab, interval 1, probability 0, space 0, times 0 [ 74.420931][ T3800] CPU: 0 UID: 0 PID: 3800 Comm: syz.0.67 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.420953][ T3800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.420964][ T3800] Call Trace: [ 74.420969][ T3800] [ 74.420976][ T3800] __dump_stack+0x1d/0x30 [ 74.421074][ T3800] dump_stack_lvl+0x95/0xd0 [ 74.421095][ T3800] dump_stack+0x15/0x1b [ 74.421153][ T3800] should_fail_ex+0x265/0x280 [ 74.421175][ T3800] should_failslab+0x8c/0xb0 [ 74.421198][ T3800] kmem_cache_alloc_noprof+0x69/0x4b0 [ 74.421217][ T3800] ? skb_clone+0x151/0x1f0 [ 74.421253][ T3800] skb_clone+0x151/0x1f0 [ 74.421279][ T3800] __netlink_deliver_tap+0x2c9/0x500 [ 74.421366][ T3800] netlink_unicast+0x66b/0x690 [ 74.421413][ T3800] netlink_sendmsg+0x58b/0x6b0 [ 74.421574][ T3800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.421664][ T3800] __sock_sendmsg+0x145/0x180 [ 74.421684][ T3800] ____sys_sendmsg+0x31e/0x4a0 [ 74.421785][ T3800] ___sys_sendmsg+0x17b/0x1d0 [ 74.421897][ T3800] __x64_sys_sendmsg+0xd4/0x160 [ 74.421927][ T3800] x64_sys_call+0x17ba/0x3000 [ 74.421948][ T3800] do_syscall_64+0xca/0x2b0 [ 74.422103][ T3800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.422125][ T3800] RIP: 0033:0x7f17037af749 [ 74.422140][ T3800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.422157][ T3800] RSP: 002b:00007f170220f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.422241][ T3800] RAX: ffffffffffffffda RBX: 00007f1703a05fa0 RCX: 00007f17037af749 [ 74.422254][ T3800] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000007 [ 74.422265][ T3800] RBP: 00007f170220f090 R08: 0000000000000000 R09: 0000000000000000 [ 74.422275][ T3800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.422316][ T3800] R13: 00007f1703a06038 R14: 00007f1703a05fa0 R15: 00007ffdc5960638 [ 74.422330][ T3800] [ 74.637894][ T3805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.70'. [ 74.639726][ T29] kauditd_printk_skb: 878 callbacks suppressed [ 74.639739][ T29] audit: type=1400 audit(1768065978.898:973): avc: denied { create } for pid=3804 comm="syz.4.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.672047][ T29] audit: type=1400 audit(1768065978.898:974): avc: denied { setopt } for pid=3804 comm="syz.4.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.691487][ T29] audit: type=1400 audit(1768065978.898:975): avc: denied { connect } for pid=3804 comm="syz.4.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.714393][ T3808] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 74.730834][ T29] audit: type=1400 audit(1768065978.998:976): avc: denied { ioctl } for pid=3804 comm="syz.4.70" path="socket:[6199]" dev="sockfs" ino=6199 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.764153][ T29] audit: type=1400 audit(1768065978.998:977): avc: denied { create } for pid=3809 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 74.783834][ T29] audit: type=1400 audit(1768065979.028:978): avc: denied { create } for pid=3806 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.803192][ T29] audit: type=1400 audit(1768065979.028:979): avc: denied { write } for pid=3806 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.844338][ T3807] syz.2.71 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 74.868310][ T29] audit: type=1400 audit(1768065979.128:980): avc: denied { read } for pid=3806 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.887830][ T29] audit: type=1400 audit(1768065979.138:981): avc: denied { write } for pid=3804 comm="syz.4.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 75.069585][ T3834] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.78'. [ 75.088494][ T29] audit: type=1400 audit(1768065979.348:982): avc: denied { read } for pid=3822 comm="syz.4.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.294985][ T3666] Bluetooth: hci0: Frame reassembly failed (-84) [ 75.619152][ T3843] loop2: detected capacity change from 0 to 1024 [ 75.629952][ T3843] EXT4-fs: Ignoring removed orlov option [ 75.637926][ T3843] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 75.661045][ T3843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.697446][ T3331] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.745903][ T3853] FAULT_INJECTION: forcing a failure. [ 75.745903][ T3853] name failslab, interval 1, probability 0, space 0, times 0 [ 75.758778][ T3853] CPU: 0 UID: 0 PID: 3853 Comm: syz.1.83 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.758833][ T3853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.758840][ T3853] Call Trace: [ 75.758844][ T3853] [ 75.758848][ T3853] __dump_stack+0x1d/0x30 [ 75.758863][ T3853] dump_stack_lvl+0x95/0xd0 [ 75.758875][ T3853] dump_stack+0x15/0x1b [ 75.758934][ T3853] should_fail_ex+0x265/0x280 [ 75.758946][ T3853] should_failslab+0x8c/0xb0 [ 75.758959][ T3853] kmem_cache_alloc_noprof+0x69/0x4b0 [ 75.758970][ T3853] ? skb_clone+0x151/0x1f0 [ 75.759060][ T3853] skb_clone+0x151/0x1f0 [ 75.759074][ T3853] nfnetlink_rcv+0x2fc/0x16c0 [ 75.759114][ T3853] ? kmem_cache_free+0xe3/0x3a0 [ 75.759127][ T3853] ? __kfree_skb+0x109/0x150 [ 75.759139][ T3853] ? consume_skb+0x49/0x150 [ 75.759224][ T3853] ? nlmon_xmit+0x4f/0x60 [ 75.759235][ T3853] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 75.759258][ T3853] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 75.759308][ T3853] ? __dev_queue_xmit+0x148/0x1ee0 [ 75.759357][ T3853] ? ref_tracker_free+0x37d/0x3e0 [ 75.759375][ T3853] netlink_unicast+0x5c0/0x690 [ 75.759391][ T3853] netlink_sendmsg+0x58b/0x6b0 [ 75.759431][ T3853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.759461][ T3853] __sock_sendmsg+0x145/0x180 [ 75.759478][ T3853] ____sys_sendmsg+0x31e/0x4a0 [ 75.759581][ T3853] ___sys_sendmsg+0x17b/0x1d0 [ 75.759603][ T3853] __x64_sys_sendmsg+0xd4/0x160 [ 75.759627][ T3853] x64_sys_call+0x17ba/0x3000 [ 75.759650][ T3853] do_syscall_64+0xca/0x2b0 [ 75.759698][ T3853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.759717][ T3853] RIP: 0033:0x7f394a67f749 [ 75.759731][ T3853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.759748][ T3853] RSP: 002b:00007f39490e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.759767][ T3853] RAX: ffffffffffffffda RBX: 00007f394a8d5fa0 RCX: 00007f394a67f749 [ 75.759853][ T3853] RDX: 0000000000000880 RSI: 0000200000000500 RDI: 0000000000000005 [ 75.759863][ T3853] RBP: 00007f39490e7090 R08: 0000000000000000 R09: 0000000000000000 [ 75.759874][ T3853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.759887][ T3853] R13: 00007f394a8d6038 R14: 00007f394a8d5fa0 R15: 00007ffdca85d8d8 [ 75.759906][ T3853] [ 76.028124][ T3855] netlink: 'syz.2.84': attribute type 4 has an invalid length. [ 76.092155][ T3860] hub 6-0:1.0: USB hub found [ 76.097286][ T3860] hub 6-0:1.0: 8 ports detected [ 76.130571][ T3862] loop1: detected capacity change from 0 to 512 [ 76.140782][ T3862] ------------[ cut here ]------------ [ 76.146260][ T3862] EA inode 11 i_nlink=2 [ 76.146268][ T3862] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.1.87/3862 [ 76.161074][ T3862] Modules linked in: [ 76.165227][ T3862] CPU: 0 UID: 0 PID: 3862 Comm: syz.1.87 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.174816][ T3862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.185061][ T3862] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 76.191717][ T3862] Code: 11 e3 9c ff 4c 8d 2d 5a ee 20 05 49 8d 7e 40 e8 81 6d b8 ff 49 8b 6e 40 4c 89 e7 e8 95 68 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 9c 9c ba 03 66 66 66 2e 0f 1f 84 [ 76.211446][ T3862] RSP: 0018:ffffc900106cb5a0 EFLAGS: 00010246 [ 76.217520][ T3862] RAX: ffff88811b7c6d90 RBX: ffff88811b03dc18 RCX: ffffffff81bb1d6b [ 76.225523][ T3862] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0bb0 [ 76.233550][ T3862] RBP: 000000000000000b R08: 000188811b03dbcb R09: 0000000000000000 [ 76.241855][ T3862] R10: ffffc900106cb4d0 R11: 0001c900106cb4d0 R12: ffff88811b03dbc8 [ 76.249860][ T3862] R13: ffffffff86dc0bb0 R14: ffff88811b03db80 R15: 0000000000000001 [ 76.258138][ T3862] FS: 00007f39490e76c0(0000) GS:ffff8882aedc5000(0000) knlGS:0000000000000000 [ 76.258807][ T3867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.89'. [ 76.267132][ T3862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.282706][ T3862] CR2: 0000001b353df280 CR3: 000000011c230000 CR4: 00000000003506f0 [ 76.290899][ T3862] Call Trace: [ 76.294178][ T3862] [ 76.295582][ T3870] netlink: 'syz.2.90': attribute type 3 has an invalid length. [ 76.297102][ T3862] ext4_xattr_set_entry+0x77f/0x1020 [ 76.310124][ T3862] ext4_xattr_ibody_set+0x184/0x3c0 [ 76.315349][ T3862] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 76.321230][ T3862] __ext4_expand_extra_isize+0x246/0x280 [ 76.326874][ T3862] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 76.332460][ T3862] ext4_evict_inode+0x7c4/0xd40 [ 76.337372][ T3862] ? __pfx_ext4_evict_inode+0x10/0x10 [ 76.342754][ T3862] evict+0x2af/0x510 [ 76.346682][ T3862] ? __dquot_initialize+0x146/0x7c0 [ 76.352055][ T3862] iput+0x4bd/0x650 [ 76.355873][ T3862] ext4_process_orphan+0x1a9/0x1c0 [ 76.361235][ T3862] ext4_orphan_cleanup+0x6a8/0xa00 [ 76.366571][ T3862] ext4_fill_super+0x3411/0x37a0 [ 76.371536][ T3862] ? set_blocksize+0x1a8/0x310 [ 76.376348][ T3862] ? sb_set_blocksize+0xfc/0x170 [ 76.381300][ T3862] ? setup_bdev_super+0x30e/0x370 [ 76.386320][ T3862] ? __pfx_ext4_fill_super+0x10/0x10 [ 76.391619][ T3862] get_tree_bdev_flags+0x291/0x300 [ 76.396807][ T3862] ? __pfx_ext4_fill_super+0x10/0x10 [ 76.402146][ T3862] get_tree_bdev+0x1f/0x30 [ 76.406553][ T3862] ext4_get_tree+0x1c/0x30 [ 76.411158][ T3862] vfs_get_tree+0x57/0x1d0 [ 76.415726][ T3862] do_new_mount+0x24d/0x6a0 [ 76.420391][ T3862] path_mount+0x4ab/0xb80 [ 76.424915][ T3862] ? user_path_at+0xbf/0x130 [ 76.429513][ T3862] __se_sys_mount+0x28c/0x2e0 [ 76.434402][ T3862] __x64_sys_mount+0x67/0x80 [ 76.439043][ T3862] x64_sys_call+0x2cca/0x3000 [ 76.443749][ T3862] do_syscall_64+0xca/0x2b0 [ 76.448340][ T3862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.454261][ T3862] RIP: 0033:0x7f394a680eea [ 76.458670][ T3862] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.478371][ T3862] RSP: 002b:00007f39490e6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.486915][ T3862] RAX: ffffffffffffffda RBX: 00007f39490e6ef0 RCX: 00007f394a680eea [ 76.495019][ T3862] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f39490e6eb0 [ 76.503071][ T3862] RBP: 0000200000000180 R08: 00007f39490e6ef0 R09: 0000000000800700 [ 76.511136][ T3862] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 76.519099][ T3862] R13: 00007f39490e6eb0 R14: 000000000000046f R15: 000000000000002c [ 76.527096][ T3862] [ 76.530118][ T3862] ---[ end trace 0000000000000000 ]--- [ 76.536173][ T3862] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.87: iget: bad extra_isize 90 (inode size 256) [ 76.551712][ T3862] EXT4-fs (loop1): Remounting filesystem read-only [ 76.558326][ T3862] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 76.570445][ T3862] EXT4-fs (loop1): 1 orphan inode deleted [ 76.577794][ T3862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.624633][ T3878] FAULT_INJECTION: forcing a failure. [ 76.624633][ T3878] name failslab, interval 1, probability 0, space 0, times 0 [ 76.637322][ T3878] CPU: 0 UID: 0 PID: 3878 Comm: syz.4.94 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 76.637360][ T3878] Tainted: [W]=WARN [ 76.637366][ T3878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.637376][ T3878] Call Trace: [ 76.637383][ T3878] [ 76.637390][ T3878] __dump_stack+0x1d/0x30 [ 76.637492][ T3878] dump_stack_lvl+0x95/0xd0 [ 76.637509][ T3878] dump_stack+0x15/0x1b [ 76.637582][ T3878] should_fail_ex+0x265/0x280 [ 76.637601][ T3878] should_failslab+0x8c/0xb0 [ 76.637617][ T3878] __kmalloc_cache_node_noprof+0x6a/0x4d0 [ 76.637716][ T3878] ? __get_vm_area_node+0x106/0x1d0 [ 76.637735][ T3878] __get_vm_area_node+0x106/0x1d0 [ 76.637753][ T3878] __vmalloc_node_range_noprof+0x28e/0x1310 [ 76.637773][ T3878] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 76.637859][ T3878] ? __rcu_read_unlock+0x4f/0x70 [ 76.637919][ T3878] ? avc_has_perm_noaudit+0xab/0x130 [ 76.637948][ T3878] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 76.637996][ T3878] __vmalloc_noprof+0xa4/0xf0 [ 76.638014][ T3878] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 76.638039][ T3878] bpf_prog_alloc_no_stats+0x47/0x390 [ 76.638125][ T3878] ? bpf_prog_alloc+0x2a/0x150 [ 76.638214][ T3878] bpf_prog_alloc+0x3c/0x150 [ 76.638229][ T3878] bpf_prog_load+0x506/0x1140 [ 76.638251][ T3878] ? security_bpf+0x2b/0x90 [ 76.638296][ T3878] __sys_bpf+0x469/0x7c0 [ 76.638326][ T3878] __x64_sys_bpf+0x41/0x50 [ 76.638420][ T3878] x64_sys_call+0x28e1/0x3000 [ 76.638440][ T3878] do_syscall_64+0xca/0x2b0 [ 76.638466][ T3878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.638483][ T3878] RIP: 0033:0x7f15cab8f749 [ 76.638495][ T3878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.638585][ T3878] RSP: 002b:00007f15c95f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.638601][ T3878] RAX: ffffffffffffffda RBX: 00007f15cade5fa0 RCX: 00007f15cab8f749 [ 76.638611][ T3878] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 76.638621][ T3878] RBP: 00007f15c95f7090 R08: 0000000000000000 R09: 0000000000000000 [ 76.638631][ T3878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.638640][ T3878] R13: 00007f15cade6038 R14: 00007f15cade5fa0 R15: 00007ffd676e1f88 [ 76.638720][ T3878] [ 76.638749][ T3878] syz.4.94: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 76.885280][ T3878] CPU: 0 UID: 0 PID: 3878 Comm: syz.4.94 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 76.885310][ T3878] Tainted: [W]=WARN [ 76.885316][ T3878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.885327][ T3878] Call Trace: [ 76.885355][ T3878] [ 76.885361][ T3878] __dump_stack+0x1d/0x30 [ 76.885382][ T3878] dump_stack_lvl+0x95/0xd0 [ 76.885400][ T3878] dump_stack+0x15/0x1b [ 76.885419][ T3878] warn_alloc+0x12b/0x1a0 [ 76.885446][ T3878] __vmalloc_node_range_noprof+0x2b3/0x1310 [ 76.885564][ T3878] ? __rcu_read_unlock+0x4f/0x70 [ 76.885580][ T3878] ? avc_has_perm_noaudit+0xab/0x130 [ 76.885624][ T3878] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 76.885664][ T3878] __vmalloc_noprof+0xa4/0xf0 [ 76.885713][ T3878] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 76.885763][ T3878] bpf_prog_alloc_no_stats+0x47/0x390 [ 76.885794][ T3878] ? bpf_prog_alloc+0x2a/0x150 [ 76.885837][ T3878] bpf_prog_alloc+0x3c/0x150 [ 76.885856][ T3878] bpf_prog_load+0x506/0x1140 [ 76.885885][ T3878] ? security_bpf+0x2b/0x90 [ 76.885956][ T3878] __sys_bpf+0x469/0x7c0 [ 76.885980][ T3878] __x64_sys_bpf+0x41/0x50 [ 76.886042][ T3878] x64_sys_call+0x28e1/0x3000 [ 76.886064][ T3878] do_syscall_64+0xca/0x2b0 [ 76.886091][ T3878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.886161][ T3878] RIP: 0033:0x7f15cab8f749 [ 76.886176][ T3878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.886193][ T3878] RSP: 002b:00007f15c95f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.886210][ T3878] RAX: ffffffffffffffda RBX: 00007f15cade5fa0 RCX: 00007f15cab8f749 [ 76.886221][ T3878] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 76.886304][ T3878] RBP: 00007f15c95f7090 R08: 0000000000000000 R09: 0000000000000000 [ 76.886317][ T3878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.886330][ T3878] R13: 00007f15cade6038 R14: 00007f15cade5fa0 R15: 00007ffd676e1f88 [ 76.886349][ T3878] [ 76.886367][ T3878] Mem-Info: [ 76.946176][ T3882] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 76.946701][ T3878] active_anon:6700 inactive_anon:0 isolated_anon:0 [ 76.946701][ T3878] active_file:9039 inactive_file:2258 isolated_file:0 [ 76.946701][ T3878] unevictable:0 dirty:102 writeback:0 [ 76.946701][ T3878] slab_reclaimable:3123 slab_unreclaimable:14917 [ 76.946701][ T3878] mapped:29455 shmem:239 pagetables:1125 [ 76.946701][ T3878] sec_pagetables:0 bounce:0 [ 76.946701][ T3878] kernel_misc_reclaimable:0 [ 76.946701][ T3878] free:1893182 free_pcp:12678 free_cma:0 [ 77.148154][ T3878] Node 0 active_anon:26800kB inactive_anon:0kB active_file:36156kB inactive_file:9032kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117820kB dirty:408kB writeback:0kB shmem:956kB kernel_stack:4496kB pagetables:4500kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 77.175311][ T3878] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 77.204953][ T3878] lowmem_reserve[]: 0 2880 7859 7859 [ 77.210288][ T3878] Node 0 DMA32 free:2945888kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 77.241517][ T3878] lowmem_reserve[]: 0 0 4978 4978 [ 77.246565][ T3878] Node 0 Normal free:4611480kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26800kB inactive_anon:0kB active_file:36156kB inactive_file:9032kB unevictable:0kB writepending:408kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:47048kB local_pcp:17348kB free_cma:0kB [ 77.279446][ T3878] lowmem_reserve[]: 0 0 0 0 [ 77.283978][ T3878] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 77.296644][ T3878] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945888kB [ 77.312702][ T3878] Node 0 Normal: 215*4kB (UM) 122*8kB (U) 60*16kB (UME) 29*32kB (UM) 94*64kB (U) 60*128kB (U) 46*256kB (U) 18*512kB (U) 12*1024kB (UME) 11*2048kB (UME) 1108*4096kB (UM) = 4611596kB [ 77.319487][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.330993][ T3878] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 77.331011][ T3878] 11552 total pagecache pages [ 77.331017][ T3878] 0 pages in swap cache [ 77.331022][ T3878] Free swap = 124996kB [ 77.331028][ T3878] Total swap = 124996kB [ 77.363610][ T3878] 2097051 pages RAM [ 77.367436][ T3878] 0 pages HighMem/MovableOnly [ 77.372124][ T3878] 81271 pages reserved [ 77.376705][ T3326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.408613][ T3888] loop1: detected capacity change from 0 to 1024 [ 77.451749][ T3896] loop1: detected capacity change from 0 to 1024 [ 77.458782][ T3896] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 77.469817][ T3896] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 77.480141][ T3896] JBD2: no valid journal superblock found [ 77.485943][ T3896] EXT4-fs (loop1): Could not load journal inode [ 77.489379][ T3897] netlink: 'syz.4.98': attribute type 11 has an invalid length. [ 77.515065][ T3896] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 77.762933][ T3905] loop0: detected capacity change from 0 to 512 [ 77.781687][ T3905] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 77.797255][ T3905] EXT4-fs (loop0): mount failed [ 77.993967][ T3918] loop1: detected capacity change from 0 to 1024 [ 78.003678][ T3918] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.029523][ T3918] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 78.037821][ T3918] System zones: 0-1, 3-36 [ 78.044863][ T3918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.131144][ T3922] netlink: 16 bytes leftover after parsing attributes in process `syz.2.108'. [ 78.323727][ T3930] Zero length message leads to an empty skb [ 78.501060][ T3944] FAULT_INJECTION: forcing a failure. [ 78.501060][ T3944] name failslab, interval 1, probability 0, space 0, times 0 [ 78.513806][ T3944] CPU: 1 UID: 0 PID: 3944 Comm: syz.2.115 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 78.513836][ T3944] Tainted: [W]=WARN [ 78.513843][ T3944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.513855][ T3944] Call Trace: [ 78.513861][ T3944] [ 78.513947][ T3944] __dump_stack+0x1d/0x30 [ 78.513973][ T3944] dump_stack_lvl+0x95/0xd0 [ 78.514030][ T3944] dump_stack+0x15/0x1b [ 78.514048][ T3944] should_fail_ex+0x265/0x280 [ 78.514110][ T3944] should_failslab+0x8c/0xb0 [ 78.514127][ T3944] kmem_cache_alloc_noprof+0x69/0x4b0 [ 78.514227][ T3944] ? skb_clone+0x151/0x1f0 [ 78.514256][ T3944] skb_clone+0x151/0x1f0 [ 78.514332][ T3944] __netlink_deliver_tap+0x2c9/0x500 [ 78.514367][ T3944] netlink_unicast+0x66b/0x690 [ 78.514391][ T3944] netlink_sendmsg+0x58b/0x6b0 [ 78.514479][ T3944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.514539][ T3944] __sock_sendmsg+0x145/0x180 [ 78.514555][ T3944] ____sys_sendmsg+0x31e/0x4a0 [ 78.514580][ T3944] ___sys_sendmsg+0x17b/0x1d0 [ 78.514620][ T3944] __x64_sys_sendmsg+0xd4/0x160 [ 78.514726][ T3944] x64_sys_call+0x17ba/0x3000 [ 78.514752][ T3944] do_syscall_64+0xca/0x2b0 [ 78.514834][ T3944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.514891][ T3944] RIP: 0033:0x7f03e979f749 [ 78.514908][ T3944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.514968][ T3944] RSP: 002b:00007f03e8207038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.514984][ T3944] RAX: ffffffffffffffda RBX: 00007f03e99f5fa0 RCX: 00007f03e979f749 [ 78.514994][ T3944] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 78.515004][ T3944] RBP: 00007f03e8207090 R08: 0000000000000000 R09: 0000000000000000 [ 78.515016][ T3944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.515029][ T3944] R13: 00007f03e99f6038 R14: 00007f03e99f5fa0 R15: 00007ffd790ccb98 [ 78.515047][ T3944] [ 78.728702][ T3944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.115'. [ 78.778494][ T3953] FAULT_INJECTION: forcing a failure. [ 78.778494][ T3953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.791600][ T3953] CPU: 0 UID: 0 PID: 3953 Comm: syz.3.119 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 78.791634][ T3953] Tainted: [W]=WARN [ 78.791640][ T3953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.791653][ T3953] Call Trace: [ 78.791659][ T3953] [ 78.791666][ T3953] __dump_stack+0x1d/0x30 [ 78.791762][ T3953] dump_stack_lvl+0x95/0xd0 [ 78.791783][ T3953] dump_stack+0x15/0x1b [ 78.791829][ T3953] should_fail_ex+0x265/0x280 [ 78.791851][ T3953] should_fail+0xb/0x20 [ 78.791866][ T3953] should_fail_usercopy+0x1a/0x20 [ 78.791896][ T3953] _copy_from_iter+0xcf/0xe70 [ 78.792001][ T3953] ? __alloc_skb+0x396/0x4b0 [ 78.792020][ T3953] ? __alloc_skb+0x228/0x4b0 [ 78.792040][ T3953] netlink_sendmsg+0x471/0x6b0 [ 78.792210][ T3953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.792239][ T3953] __sock_sendmsg+0x145/0x180 [ 78.792351][ T3953] ____sys_sendmsg+0x31e/0x4a0 [ 78.792381][ T3953] ___sys_sendmsg+0x17b/0x1d0 [ 78.792437][ T3953] __x64_sys_sendmsg+0xd4/0x160 [ 78.792462][ T3953] x64_sys_call+0x17ba/0x3000 [ 78.792528][ T3953] do_syscall_64+0xca/0x2b0 [ 78.792557][ T3953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.792577][ T3953] RIP: 0033:0x7f82659cf749 [ 78.792592][ T3953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.792710][ T3953] RSP: 002b:00007f8264437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.792730][ T3953] RAX: ffffffffffffffda RBX: 00007f8265c25fa0 RCX: 00007f82659cf749 [ 78.792757][ T3953] RDX: 0000000020000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 78.792768][ T3953] RBP: 00007f8264437090 R08: 0000000000000000 R09: 0000000000000000 [ 78.792849][ T3953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.792861][ T3953] R13: 00007f8265c26038 R14: 00007f8265c25fa0 R15: 00007ffce96f3268 [ 78.792879][ T3953] [ 79.054832][ T3958] syzkaller1: entered promiscuous mode [ 79.060547][ T3958] syzkaller1: entered allmulticast mode [ 79.060915][ T3963] FAULT_INJECTION: forcing a failure. [ 79.060915][ T3963] name failslab, interval 1, probability 0, space 0, times 0 [ 79.078741][ T3963] CPU: 1 UID: 0 PID: 3963 Comm: syz.4.121 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 79.078767][ T3963] Tainted: [W]=WARN [ 79.078772][ T3963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.078781][ T3963] Call Trace: [ 79.078788][ T3963] [ 79.078795][ T3963] __dump_stack+0x1d/0x30 [ 79.078818][ T3963] dump_stack_lvl+0x95/0xd0 [ 79.078914][ T3963] dump_stack+0x15/0x1b [ 79.078930][ T3963] should_fail_ex+0x265/0x280 [ 79.079001][ T3963] should_failslab+0x8c/0xb0 [ 79.079020][ T3963] __kmalloc_noprof+0xb9/0x5a0 [ 79.079038][ T3963] ? security_prepare_creds+0x52/0x120 [ 79.079061][ T3963] security_prepare_creds+0x52/0x120 [ 79.079143][ T3963] prepare_creds+0x37f/0x550 [ 79.079164][ T3963] lookup_user_key+0x12a/0xd10 [ 79.079183][ T3963] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 79.079204][ T3963] __se_sys_add_key+0x268/0x350 [ 79.079235][ T3963] __x64_sys_add_key+0x67/0x80 [ 79.079278][ T3963] x64_sys_call+0x2ea3/0x3000 [ 79.079298][ T3963] do_syscall_64+0xca/0x2b0 [ 79.079326][ T3963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.079352][ T3963] RIP: 0033:0x7f15cab8f749 [ 79.079416][ T3963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.079433][ T3963] RSP: 002b:00007f15c95f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 79.079453][ T3963] RAX: ffffffffffffffda RBX: 00007f15cade5fa0 RCX: 00007f15cab8f749 [ 79.079464][ T3963] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 00002000000001c0 [ 79.079476][ T3963] RBP: 00007f15c95f7090 R08: ffffffffffffffff R09: 0000000000000000 [ 79.079488][ T3963] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 79.079498][ T3963] R13: 00007f15cade6038 R14: 00007f15cade5fa0 R15: 00007ffd676e1f88 [ 79.079514][ T3963] [ 79.337504][ T3968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'. [ 79.445352][ T3971] loop3: detected capacity change from 0 to 1024 [ 79.649281][ T3971] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.661907][ T3982] loop4: detected capacity change from 0 to 128 [ 79.692891][ T3971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.700060][ T3982] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 79.797765][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 79.797779][ T29] audit: type=1400 audit(1768065984.028:1033): avc: denied { cpu } for pid=3991 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 79.845126][ T3982] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.886621][ T3982] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.126'. [ 79.900888][ T3972] syz.3.125 (3972) used greatest stack depth: 7256 bytes left [ 79.901144][ T3982] netlink: zone id is out of range [ 79.913770][ T3982] netlink: zone id is out of range [ 79.936842][ T3982] netlink: zone id is out of range [ 79.944535][ T4009] loop0: detected capacity change from 0 to 1024 [ 79.949679][ T3982] netlink: zone id is out of range [ 79.956085][ T3982] netlink: zone id is out of range [ 79.961237][ T3982] netlink: zone id is out of range [ 79.963456][ T3985] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 79.974207][ T3982] netlink: zone id is out of range [ 79.979322][ T3982] netlink: zone id is out of range [ 80.010278][ T3982] netlink: zone id is out of range [ 80.030287][ T4009] ======================================================= [ 80.030287][ T4009] WARNING: The mand mount option has been deprecated and [ 80.030287][ T4009] and is ignored by this kernel. Remove the mand [ 80.030287][ T4009] option from the mount to silence this warning. [ 80.030287][ T4009] ======================================================= [ 80.086740][ T3333] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.132318][ T4009] EXT4-fs: Ignoring removed orlov option [ 80.161950][ T4009] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c118, mo2=0002] [ 80.188929][ T4009] System zones: 0-1, 3-12 [ 80.200707][ T4009] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.229373][ T29] audit: type=1400 audit(1768065984.488:1034): avc: denied { map } for pid=4018 comm="syz.1.134" path="socket:[6551]" dev="sockfs" ino=6551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 80.300899][ T3325] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.301088][ T4035] FAULT_INJECTION: forcing a failure. [ 80.301088][ T4035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.323107][ T4035] CPU: 0 UID: 0 PID: 4035 Comm: syz.3.137 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 80.323137][ T4035] Tainted: [W]=WARN [ 80.323142][ T4035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.323154][ T4035] Call Trace: [ 80.323161][ T4035] [ 80.323170][ T4035] __dump_stack+0x1d/0x30 [ 80.323310][ T4035] dump_stack_lvl+0x95/0xd0 [ 80.323332][ T4035] dump_stack+0x15/0x1b [ 80.323352][ T4035] should_fail_ex+0x265/0x280 [ 80.323444][ T4035] should_fail+0xb/0x20 [ 80.323459][ T4035] should_fail_usercopy+0x1a/0x20 [ 80.323480][ T4035] _copy_from_iter+0xcf/0xe70 [ 80.323574][ T4035] ? __alloc_skb+0x396/0x4b0 [ 80.323593][ T4035] ? __alloc_skb+0x228/0x4b0 [ 80.323615][ T4035] netlink_sendmsg+0x471/0x6b0 [ 80.323648][ T4035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.323748][ T4035] __sock_sendmsg+0x145/0x180 [ 80.323768][ T4035] ____sys_sendmsg+0x31e/0x4a0 [ 80.323799][ T4035] ___sys_sendmsg+0x17b/0x1d0 [ 80.323853][ T4035] __x64_sys_sendmsg+0xd4/0x160 [ 80.323878][ T4035] x64_sys_call+0x17ba/0x3000 [ 80.323947][ T4035] do_syscall_64+0xca/0x2b0 [ 80.323976][ T4035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.324029][ T4035] RIP: 0033:0x7f82659cf749 [ 80.324042][ T4035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.324068][ T4035] RSP: 002b:00007f8264437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.324087][ T4035] RAX: ffffffffffffffda RBX: 00007f8265c25fa0 RCX: 00007f82659cf749 [ 80.324100][ T4035] RDX: 000000000000c0b0 RSI: 0000200000000280 RDI: 0000000000000004 [ 80.324113][ T4035] RBP: 00007f8264437090 R08: 0000000000000000 R09: 0000000000000000 [ 80.324126][ T4035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.324139][ T4035] R13: 00007f8265c26038 R14: 00007f8265c25fa0 R15: 00007ffce96f3268 [ 80.324157][ T4035] [ 80.537763][ T4009] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 80.550872][ T29] audit: type=1400 audit(1768065984.798:1035): avc: denied { read } for pid=4036 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 80.602293][ T3329] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 80.660636][ T4045] ================================================================== [ 80.668751][ T4045] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 80.675350][ T4045] [ 80.677670][ T4045] write to 0xffff88810b241f78 of 128 bytes by task 3319 on cpu 1: [ 80.685486][ T4045] __bpf_get_stackid+0x737/0x7d0 [ 80.690521][ T4045] bpf_get_stackid+0xf3/0x130 [ 80.695242][ T4045] bpf_get_stackid_raw_tp+0xf6/0x120 [ 80.700538][ T4045] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 80.706168][ T4045] bpf_trace_run2+0x107/0x1d0 [ 80.710857][ T4045] __traceiter_kfree+0x2e/0x50 [ 80.715632][ T4045] kfree+0x353/0x3c0 [ 80.719532][ T4045] simple_xattr_free+0x38/0x40 [ 80.724296][ T4045] shmem_xattr_handler_set+0x1a4/0x220 [ 80.729768][ T4045] __vfs_setxattr+0x2e6/0x310 [ 80.734443][ T4045] __vfs_setxattr_noperm+0xe8/0x410 [ 80.739844][ T4045] __vfs_setxattr_locked+0x1a6/0x1c0 [ 80.745230][ T4045] vfs_setxattr+0x132/0x270 [ 80.749730][ T4045] filename_setxattr+0x1ad/0x400 [ 80.754670][ T4045] path_setxattrat+0x2c9/0x310 [ 80.759436][ T4045] __x64_sys_lsetxattr+0x71/0x90 [ 80.764375][ T4045] x64_sys_call+0x2ef0/0x3000 [ 80.769064][ T4045] do_syscall_64+0xca/0x2b0 [ 80.773578][ T4045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.779557][ T4045] [ 80.781876][ T4045] read to 0xffff88810b241fc8 of 8 bytes by task 4045 on cpu 0: [ 80.789402][ T4045] bcmp+0x23/0x90 [ 80.793034][ T4045] __bpf_get_stackid+0x382/0x7d0 [ 80.798001][ T4045] bpf_get_stackid+0xf3/0x130 [ 80.802678][ T4045] bpf_get_stackid_raw_tp+0xf6/0x120 [ 80.807976][ T4045] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 80.813420][ T4045] bpf_trace_run2+0x107/0x1d0 [ 80.818090][ T4045] __traceiter_kfree+0x2e/0x50 [ 80.822846][ T4045] kfree+0x353/0x3c0 [ 80.826723][ T4045] security_compute_sid+0x11da/0x1290 [ 80.832610][ T4045] security_transition_sid+0x5a/0x70 [ 80.837897][ T4045] selinux_determine_inode_label+0x1e2/0x210 [ 80.843888][ T4045] may_create+0x1e0/0x2b0 [ 80.848218][ T4045] selinux_inode_symlink+0x22/0x30 [ 80.853327][ T4045] security_inode_symlink+0x79/0xc0 [ 80.858513][ T4045] vfs_symlink+0x8e/0x1f0 [ 80.862830][ T4045] do_symlinkat+0xf0/0x470 [ 80.867230][ T4045] __x64_sys_symlinkat+0x5a/0x70 [ 80.872154][ T4045] x64_sys_call+0x2a36/0x3000 [ 80.876821][ T4045] do_syscall_64+0xca/0x2b0 [ 80.881315][ T4045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.887257][ T4045] [ 80.889559][ T4045] value changed: 0xffffffff8195372e -> 0xffffffff819a13ed [ 80.896644][ T4045] [ 80.898957][ T4045] Reported by Kernel Concurrency Sanitizer on: [ 80.905092][ T4045] CPU: 0 UID: 0 PID: 4045 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 80.916537][ T4045] Tainted: [W]=WARN [ 80.920323][ T4045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.930360][ T4045] ================================================================== [ 80.960175][ T4047] FAULT_INJECTION: forcing a failure. [ 80.960175][ T4047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.973679][ T4047] CPU: 0 UID: 0 PID: 4047 Comm: syz.3.143 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 80.973708][ T4047] Tainted: [W]=WARN [ 80.973713][ T4047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.973724][ T4047] Call Trace: [ 80.973739][ T4047] [ 80.973744][ T4047] __dump_stack+0x1d/0x30 [ 80.973767][ T4047] dump_stack_lvl+0x95/0xd0 [ 80.973862][ T4047] dump_stack+0x15/0x1b [ 80.973880][ T4047] should_fail_ex+0x265/0x280 [ 80.973974][ T4047] should_fail+0xb/0x20 [ 80.973990][ T4047] should_fail_usercopy+0x1a/0x20 [ 80.974014][ T4047] _copy_from_user+0x1c/0xb0 [ 80.974037][ T4047] ___sys_sendmsg+0xc1/0x1d0 [ 80.974124][ T4047] __x64_sys_sendmsg+0xd4/0x160 [ 80.974155][ T4047] x64_sys_call+0x17ba/0x3000 [ 80.974180][ T4047] do_syscall_64+0xca/0x2b0 [ 80.974206][ T4047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.974307][ T4047] RIP: 0033:0x7f82659cf749 [ 80.974323][ T4047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.974337][ T4047] RSP: 002b:00007f8264437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.974354][ T4047] RAX: ffffffffffffffda RBX: 00007f8265c25fa0 RCX: 00007f82659cf749 [ 80.974394][ T4047] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 80.974404][ T4047] RBP: 00007f8264437090 R08: 0000000000000000 R09: 0000000000000000 [ 80.974414][ T4047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.974424][ T4047] R13: 00007f8265c26038 R14: 00007f8265c25fa0 R15: 00007ffce96f3268 [ 80.974442][ T4047] [ 81.144203][ T4044] loop4: detected capacity change from 0 to 512 [ 81.173066][ T4044] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 81.199726][ T4044] EXT4-fs (loop4): mount failed [ 81.482062][ T3920] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.500234][ T4049] netlink: 32 bytes leftover after parsing attributes in process `syz.2.142'.