last executing test programs: 2m8.326308084s ago: executing program 4 (id=1194): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getpgrp(0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x67, 0x0) 2m8.325781714s ago: executing program 4 (id=1195): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000020000000900010073797a09"], 0x34}}, 0xc800) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) unshare(0x22020600) r2 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r2, 0x7000000) r3 = dup(r2) preadv2(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) pipe2(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x145402, 0x1d2) writev(r4, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000000)=ANY=[@ANYBLOB="02130900030000002abd7020a214e31547c696aa0df6b55f"], 0x18}}, 0x0) 2m7.835941794s ago: executing program 4 (id=1203): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) unlinkat(0xffffffffffffffff, 0x0, 0x200) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/2, 0xffffffffffffff0f) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710004000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\xc0\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 2m7.705048436s ago: executing program 3 (id=1207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf9}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) 2m7.684284597s ago: executing program 3 (id=1208): creat(0x0, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="06000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) r5 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) write$cgroup_pid(r4, &(0x7f0000000400)=r5, 0x12) 2m7.661006607s ago: executing program 3 (id=1209): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000003003000000018000180140002007665746830"], 0x2c}}, 0x0) 2m7.635248628s ago: executing program 3 (id=1211): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x204010, &(0x7f0000000100), 0xfe, 0x46e, &(0x7f00000007c0)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @private1, 0x5}, 0x1c) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000dc0)="d8000000180081084e81f783db4cb9040a10080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fec0ffff000000fd035c0461c1d67f6f94007134cf6efb800189b316277ce06bbaceac3c2fb14c2ee5a7cef4090f00201f373f7b9555da25364c3b10b7b91b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e003640fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4788}, 0x8004) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fddbdf252100000005002000010000000a0001007770616e3300000009001f007068793000000000"], 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x8804) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x64, r6, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x64}}, 0x8040) 2m6.833958023s ago: executing program 4 (id=1222): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpquota}, {@errors_remount}, {@block_validity}, {@noload}, {}, {@errors_remount}]}, 0x1, 0x7a1, &(0x7f0000000740)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r4, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x7) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000000040)=']', 0x1}], 0x1, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0438e59e39f07d5b00000004064a0d76097bbbc277a09f85ddb0b56be0e20df76121e8d1b979549d0eacae0020b4df1f3bc400a889bc83a1bd56be9247c99a10034e"], 0x48) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) socket$packet(0x11, 0x0, 0x300) 2m6.709891635s ago: executing program 4 (id=1224): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x171808, &(0x7f00000003c0), 0x0, 0x552, &(0x7f0000000b80)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0xffffffffffffffff, 0x800000, 0x6, 0x2, 0x2, 0xfffc, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xbdb845ff1760526c) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0xa, &(0x7f0000000000)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) (fail_nth: 15) 2m6.668768826s ago: executing program 3 (id=1226): r0 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080), 0x1) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x223, 0x8, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fstatfs(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r0], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYRESOCT=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd09, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x2}, 0x18) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000002021bdb14000200776732000000000000000000000000000900030073797a31000000000900010073797a32020000004ed9482f87c26dd43dc5eebd91b149f2e76c703655210072cde77aff7f63582febebc4e4d2e0dff85d5d418dd164be51ac78548608f7e144cb2e4916495d679b6f905799b5409ab975197dff8271eaadab87883686f4929ca6813261b0c15764b9d411cd1493a4884c2fc125a031fc77eb4d7ff480257a9835eedcb7"], 0x40}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) 2m6.519013409s ago: executing program 4 (id=1231): syz_read_part_table(0x60d, &(0x7f00000006c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x97) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 2m6.511307839s ago: executing program 32 (id=1231): syz_read_part_table(0x60d, &(0x7f00000006c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x97) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 2m6.435776091s ago: executing program 3 (id=1233): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf9}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) 2m6.373342492s ago: executing program 33 (id=1233): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf9}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) 1m16.779500688s ago: executing program 5 (id=2043): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000008000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x32) 1m16.762607319s ago: executing program 5 (id=2045): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m16.73595671s ago: executing program 5 (id=2047): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x4}}) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0xf567, 0x100, 0x0, 0x34d}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/53, 0x35}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f0000000680)=""/65, 0x41}], 0x4) read(r2, &(0x7f00000002c0)=""/200, 0x39) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) 1m16.555383723s ago: executing program 5 (id=2053): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@noquota}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbcd250300000007000531bb000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000004000000df7f000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fe0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup2(r4, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) pause() unshare(0x2a020400) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x2424, 0x0, 0x800000, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0x1) close(r2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r8, &(0x7f00000009c0)="3bf58d", 0x3) sendfile(r8, r0, 0x0, 0x3ffff) sendfile(r8, r0, 0x0, 0x7fffeffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m15.472882464s ago: executing program 5 (id=2076): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000001000018010000696c642500000000002020207b1af8ff00000000bfa100000000000007010000f8ff08080000b703000000d7fd718937f6c2e2"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket(0x2, 0x805, 0x0) socket(0x2, 0x80805, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x83, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, 0x0, 0x0) 1m14.745982538s ago: executing program 5 (id=2083): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYRES32=r0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000005300)=[{0x80000006, 0x66, 0x0, 0x30}]}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x3e8, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x481, &(0x7f0000001040)="$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") 1m14.745789968s ago: executing program 34 (id=2083): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYRES32=r0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000005300)=[{0x80000006, 0x66, 0x0, 0x30}]}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x3e8, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x3}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x481, &(0x7f0000001040)="$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") 2.938355452s ago: executing program 0 (id=3444): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0xd, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}, 0x0, 0x0, 0x7, 0x0, "f2f5752a41c9fb15d3b0447186b78c228f6d77b204ef1334aab4d5cc1654084b3806abacc530b5d2946c7cb666054664ec6b422ae3610be6ac0a2474bb1868d90f85d38095815028f41b55c815d378ff"}, 0xd8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)="5224f6e4d429c285403e3a8a04e534aa82fb7a5a46a79dc39505b42a8caf818b29738f3c5a", 0x25, r1}, 0x68) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001200ffffff7f00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00.'], 0x48}}, 0x0) r3 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x8781, 0x2000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e24, 0x8, @remote, 0x3}}, 0x0, 0x0, 0x33, 0x0, "b5f76bee5bac434be0c31d2658bb4ae3fcbb64273dfe0ea95a7b7208d75c4c228cdfd268bb2f2cc5a8d5f64431c793545ae295c258a61a851da540df61f9ff78bf383f48a80b02d29caf06b97844797e"}, 0xd8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="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", @ANYBLOB="b61fbf47e8737f13078b3dbf03eae2aea031713e457cc254490c9fd2aa99e209", @ANYRES32=r4, @ANYRES16=r2], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r8) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x34, r9, 0x801, 0x70bd2a, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x20008010) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='9p_client_res\x00', r10}, 0x18) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8e, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r11}}) ioprio_get$pid(0x3, 0x0) 2.857566744s ago: executing program 0 (id=3448): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x2) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) futex(0x0, 0x5, 0x10000, 0x0, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) link(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x20, 0x1, 0x0, 0x0, 0x8000000048000, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x3, 0x0, 0x4, 0x4, 0x3, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 2.855816715s ago: executing program 0 (id=3449): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008844, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.855129285s ago: executing program 7 (id=3450): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a1c000000090a010400000000000000000a000004080005400000002b14000000110001e8ffffff00000000000100000a"], 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffff7fc, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0xd, 0x0, 0x4000, 0x0, 0xfffffffe, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x200003, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x7ff, 0x2000000, 0x4100, 0x0, 0xa, 0x0, 0x2, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x1, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0xe, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xfffd, 0x0, 0x4, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000005) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0xc962, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="100306", 0x3, 0x0, &(0x7f0000000140)={0x11, 0xf5, r4}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x8, 0x10, 0x4, 0x880c, {{0x8, 0x4, 0x2, 0x10, 0x20, 0x68, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local, {[@timestamp_prespec={0x44, 0xc, 0x7d, 0x3, 0xb, [{@empty, 0x7}]}]}}}}}) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x4, 0x0, 0x10, @mcast1, @remote, 0x7, 0x80, 0x4, 0x9}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r0, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000600)={@local, 0x0}, &(0x7f0000000640)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @private, @local}, &(0x7f00000006c0)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0x1, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xc0000120}, 0xc, &(0x7f0000000a00)={&(0x7f0000000cc0)={0x1ec, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x8840}, 0x4000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x8800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r15, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.814755995s ago: executing program 0 (id=3454): syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x1ffffffffffffdf4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 2.786745356s ago: executing program 7 (id=3455): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x6, 0x6, 0x4, 0x6fcf, 0xf8, "b72ca7a26413ef6ca5a76bf8224be84e070856", 0x1, 0x3}) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xecb5, 0x3180, 0x0, 0x40024e}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffff67) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={0x0, r6, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000480)=0xf8) 2.786372536s ago: executing program 0 (id=3456): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0xffea, 0xb, 0x6c, 0x0, @rand_addr=0x64010103, @dev={0xac, 0x14, 0x14, 0xb}}}}, 0x22) 2.667257888s ago: executing program 0 (id=3457): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020906090200000027bd5700fedbbb4bded668443e6023070ce3e56370df25"], 0x10}}, 0x44000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) open_tree(r2, &(0x7f0000000640)='\x00', 0x81101) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20280) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000000)=r4, 0x4) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) (async) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) (async) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x18) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 1.586061819s ago: executing program 7 (id=3467): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0xffea, 0xb, 0x6c, 0x0, @rand_addr=0x64010103, @dev={0xac, 0x14, 0x14, 0xb}}}}, 0x22) 1.50956207s ago: executing program 6 (id=3470): socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) ioperm(0x3c, 0x1, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r3, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(r3, &(0x7f0000000a00)={0xa, 0x4e20, 0x16e, @empty, 0x5}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x5}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000814, &(0x7f0000000240)={0xa, 0x4e21, 0x4516, @loopback, 0xe003}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="180000007600a9fe059f317a9dab000000000003", 0x14}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/rpc\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 1.4970814s ago: executing program 7 (id=3472): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x2) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) futex(&(0x7f000000cffc)=0x2, 0x5, 0x10000, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) link(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x20, 0x1, 0x0, 0x0, 0x8000000048000, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x3, 0x0, 0x4, 0x4, 0x3, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 1.476556871s ago: executing program 7 (id=3474): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000004b00), 0x1, 0x780e6fb25e147349) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000004d00), 0x280, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000004d40), 0x208801, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket$can_j1939(0x1d, 0x2, 0x7) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000004d80), 0x10000, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write$P9_RREAD(r12, &(0x7f0000000580)={0x59, 0x75, 0x2, {0x4e, "e34a888bad6c22dcb43a375185af1585651f6bf8b50adacd3af1844943de54cd643c0c39c6d9bc2cc024e7099e09acff7bcd803a6887c09ac5aaadf5a75c5b20161ae4a7a129844322662fc865be"}}, 0x59) sendfile(r12, r11, 0x0, 0x3ffff) sendfile(r12, r11, 0x0, 0x7fffeffd) r13 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000004dc0), 0x8800, 0x0) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r14, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) syz_open_pts(r14, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004e80)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f00000001c0)="5f32258bdc2ee1bd8829fde8bc264fa13d38842b6da4878b90dcf5ecd0673760a6de2fe864f8f054e3cc5753d67e3d48a0e1c02a1021e87fc96ea132b975bfaee85fbe8954c3be7828bbdd3847ca4390a3f6d82e2f75fce87987e8184e7f53efeb8ec735509f0dcf3e58ad9eeaeb3c3f8e685df96fd4968cdf9e99", 0x7b}, {&(0x7f0000000240)="c03004429f3d6125b021552799dc783f", 0x10}], 0x2, 0x0, 0x0, 0x44000}}, {{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000400)="bce18a3857e8ad0628af90335b5b072dd3b54cd46dd869311aaf4cef6e87304e58affaedb1b1a6f3b544d2ed27faff5bae266935746733bfde9df4cc7b90957e78a4d2c93f56e43a814a3f2245a9631473300aafb4b11dbe029a9f106e3b7021c927394531783385d6efea258653b5075e938148174cc4bf1942ca56480a48f2cd31e93484bf55b3155161546f97f33219364c24cf481fee16", 0x99}, {&(0x7f00000007c0)="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", 0x1000}], 0x2, &(0x7f0000001b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x880}}, {{&(0x7f0000001bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001c40)="50f1a6e458519a1acefd5974712f822c8a0f1e56671408cc629ba318478fe63ea6d5f9d11a83814226de2be3643cda5ea9dcfbc1c4c939618c52ee1da6e17ef952f3e0b9974da18092e8057399a31294cdf82bee2ff94211e8acddf9a3183feb9728d6a2bf5fbaa6e849d5aa4f039358c0ebb08eb95710867c7f678ca93492bb2dc6b79e78392c7f2aa7b0377487c7aa5ba5221af80e25925fa61d641897f509a077f108885cb846b7fe1272d320304de35c947938ea8834be7b195a870a0c333c60c835e71c389eba17869f66f25a31566712dc1c2a0367393be55bdafdc37a8b5881c81a2dd1b1996ffe8e2ad420", 0xef}, {&(0x7f0000001d40)="888016076f57683dad43abfeb56eebb5e9b29cb4cea09ee311194bbac91c412484a2e8e97d892441ce9676893032c732a468603da52bee91ce7f090835ff61a3babfca37221dd5e8632f92ef923dcd0d2aa862f54bc639868051fd9ceacf2ab656c3361ffedf4d2c93e8c918153d9e03be276d53e5f0a8343c23f776b2ef90ffa02c535a97521acb049629ba2c7397b59f9e29ad69a4203e7137148dc4b7427921e3cc628542babb3528c4712d59f8e880fa1b46", 0xb4}, {&(0x7f0000001e00)="603b440990a79d0de2bfb0664ae15d9ac2a031da19c5ddadabe27654e191082ef64bd39deef0940ab588fe9145fc050885a5ac5cf025d2c5535f4b170b0ad49b36f1321a50fc2f4b6ebb234862470fc43b063973308e9bbf3fd2faf872fdda5d24e32afa4b957376b04105c5e8fdfff0f82a46c3f30049ec24e48f841f79fcdeb31925edb966ef0d39eb07c2827c36161c7636272de81899185f9e1ab8f8fdcded9ab55cf4ae6525acfa5197340fa0d0ba41f0a94f8c3bc1d09aae14d03acddda7a004", 0xc3}], 0x3, &(0x7f00000017c0)=ANY=[@ANYBLOB="1c0010000000000000000000000000005c239ff7e706c484bd273d3280b41255fe7cdf766baa2b1f0e60399bce656a08569f863b3372b9bc24a7dfcbb81e4ffebcb841ead0e885571e71320760fa0ea6233ef290fcec7b7aaceb3b0ea5f9aafa759fc3b49cab392f9bc626e6561a2cdfed1e13028fd7416cc174ef30e326f4997c092ee635c2aa0dc811363b705005ff6661b61b2b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000022c0)="06dcc31e81e8", 0x6}, {&(0x7f0000002300)="2bf9c0beb4bc1e4d21abe15de00b35e9ff93bef784e82ced735e37368815293f89bac920943b1752d9feff8b41d1bcf8fd4fc55b551ad47bbc08301ebbeaaad80d656890bf71ad71f3b1bcf8ec0d78457069cccb27e900d3921e84cfeff36787f3e1631ad4495cd091", 0x69}, {&(0x7f0000002380)="338cd4f1dccdcf00f56dab55f2b0b2330e336a47cb861115182ee5c0d1d0e2e0bfeb1da44ee17db5b13f8ff85d07bfc0a9846ef8f281131f529343424b476dd65d92f1b910186bb4c9c8c9a6a1f4be7fde5e4f05e763eb55513b299e1f5fba717c5c8b6d373b6a52a3aedb43edb5332f2e6c321422cdbacb6fc653", 0x7b}, {&(0x7f0000002400)="80bd2edf732647a79dcac742bf4a96309012e2887f3c495f31984c834fe6c1e3f4ee57a81f4b5522b869641fdff5e51fbd6160011ebbade3e671a1e965a95679fb7d2089e698f71193cd3a91d0ef86bf36a716e7ed7e47cdf7ec8ca4dcba", 0x5e}, {&(0x7f0000002480)="6dd41300bc343392ed3f1cbff8f7dcd153d8c26c9defffaeb4062f18ecb3fb3b18a99eb12d80716517819d8af459deda8ab01facf6ebb776929c2535811645f07ad5992f7332c02e1ce57e2e92f5452e11de1420727d8a8f25508ddbb12df69b774f0ff7b9e8fc98e981d5c4724300da05b5ec77c227ab69a321c35cdbfd699e04be705e54c95ea46394707afd1ec048607543c7b492", 0x96}, {&(0x7f0000002540)="de558425753b4de9b5eda67458d75169934cd77271f5948ef6bafcfca11fad3b1a5933b8d3a04c89c707531f185896a4864e49dd6afca2232deaf12e21e3ead44088c6bdfbebc3f5b047477c37906ee311c39945d1aa5ccb4087f1a53342c8cc0af8b6f3876cc790704856ed3b2191c6fb92abb97ec6227e89a97c2cb5f5f147a95d69e1a3d939b15f0eab6c30aef733", 0x90}], 0x6, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x78, 0x20028011}}, {{&(0x7f0000002b40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002bc0)="a50fb145a57d00b0b9c8a3eedf7baa5911c5b70e33302ac676bb99ed27ade8cf9036c4ab0c6a6778f6286ba246c1d99844ccddb29a475201a388bf9f70b5926760b2af7c39b1c3c9f7a4f85d914a14dd7117ec3073ec53d606d573bb6db8825513ddf4ca4f71fa9e4b91f8b72bc399c9cb8ba1ef6c4720079a62542b7d2c6aac0e601223be02f737f5924fcc5e3238450776c4cfb7bbffa605b624da522b5bffcb46ee897d", 0xa5}], 0x1, &(0x7f0000003240)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001000000000000000010000000100000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2c030800000000000040000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x108, 0x4000000}}, {{&(0x7f0000003380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003500)=[{&(0x7f0000003400)="f6b98280eb87a2daa63ebe1998836ee55495544e74ebc3bef68efe2d91c67dd15406224c74095f536532fd18096ec1b0f373bd337d6194c313f92b478514f29082ebe04cb2eed1ea236e18a0d64f2fbaac39698db6cdfb3c52b480fd9123e6788009e5969a2d1951f70e932e1db57a2187dd9522daed7ec87913c554e9f5e0085d303285b37017490881172a31ed1852cc34c8187a71c7a0bf0889d2c8cdfd85fcd6d092d822577d94ee6ae11dc989322d8007f454ace5fc63c068ab7b8b080daedde36ec2170b195ba3451341db0ab373681dd6f2bf94eab0d83809198b42f857", 0xe1}], 0x1, &(0x7f0000003640)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40, 0x4080}}, {{&(0x7f0000003680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003800)=[{&(0x7f0000003700)="1c5769718d94b4894982e90854129d64600920978095", 0x16}, {&(0x7f0000003740)="ef49aafd6cafd76163371e1e41521eb354f7a336faf39698cc9a6767a5448fc2bf8f63a516e5f2ad3fbeb2477082ebcc0317b864ccf9c2588417e14e6bb889f057b5a88324612b637e88be240d869cb2638e68c56522c2f1a74812a2475650ce6fdaf033c548880f1308c1eae30dfb81fb41115baf4c1df8be969ef94ec9f47538dd9d788ec47a6dfea3d527a1db1c1ecee921b07d8f26d610e5823530d4e44b072779fa657f9a47f485b1e2794945c6c63439aa7a0eef32eb8dec", 0xbb}], 0x2, &(0x7f0000003ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118, 0x4040}}, {{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000004000)="f8c2b147ee9037abe8d4c360ef39b4d1a3c286464dff550670fcf081ab7c96c51ed5e225e5a1dc6cf84aba5f9f8f0e870bbe2690ae985f68541e8a44ca353dfa054a2cc05f382cc07133ca5972fbebf1e69b29debc18fd586937b8dcbda3b0842ce1cf3bc413c288542fe01f8833eec82dc20332c9aef1eabea648b4a47024fc6a82f794aed1cba69a4967f3da3cfabd1440ceec591075e3898d1de38fdef9579d029d0145b7f4b1f3b96d903a876d7e2a02e0ac5b213fcb046b91afbee6473d4ce80f112f7324f64af6d70974758e1b754642b4b38c8a30fecd2fc2c6d84b45a6d79ca39db11d0f92b382b9", 0xec}, {&(0x7f0000004100)="e869a8b1884362f56a25e244dbab35c52e891ddfdc7ca7f14d23f8fb888351707f14f5ede31705439c7c2e8685d81a8e17bb188a5c5bc4a0818a59fcb14ebabf7cbc438d2b0da630dc16e59bc5de8ad30e6c695ecac4b0cb12a90a95b7ce8e1283127f06f6d8bdacb61ece43057bc785368a8352b56d3b2a146e7933fa03a6bae0b8b27d6a0193ec669ca5c492ccfcadf0f25196d44c882c", 0x98}, {&(0x7f00000041c0)="0664fe35ff4fd47350e48d67cf032a8ec3192c02959d004309d3a2e693f971ca4ca0bc06cc152f03f1e6a2fd8cad134ed41186a4d1c4e5068af7b7deb68dad3712bd", 0x42}, {&(0x7f0000004240)="b03ab4c443d58a307d6c197508cdd00f54805099aa4072440baa0602a5e280b106bfa61fa9ece8a234321a2a7ec6ceb5e698cf3ac4847f2efcb3ef20db754673aa0eea0a4d0b659b08ecd092a9b85d54b66b6bc083d716f5b243f44071bb32b5cd8b00f98ed48da02d40ad58886aec26", 0x70}, {&(0x7f00000042c0)="1dc8700a3fc9f4d51e53d3e6d43df0d2aaf95116c2", 0x15}, {&(0x7f0000004300)="6a8b92a87b0b45c4c6f5860f6994", 0xe}, {&(0x7f0000004340)}, {&(0x7f0000004380)="9928f810caa0b5c3419b115ffade779a6bd9b59bd7630cde00e4b057056321da83b9af19e2456dabf180ccf387d09a", 0x2f}, {&(0x7f00000043c0)="9a0033b01d", 0x5}], 0x9, 0x0, 0x0, 0x810}}, {{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f00000044c0)="9f3ffd3129a709436c8af9f7ff3fb6fa6486e1dcf36e5d45746cfe87e93854a5a8c87534f5ebb62d1e3adb3332487215a131cbc6d40d4f44c88e24954e3df3bab655ce99c8ea9284dbd74e095da86561e09a96ed9faa6505334cdfe8787c95e6c34b3268459edfc1bc84bf931efc39c02f5ce6ffc3da061f4778cafdae1f740f6146f48072b6064907775ca428a4963ff19c32e0c267811003d48f80979e602a667565ab39b0c98999155e5bd0af27a04363e5e56d97eddc0227900033a7ddfbcaabe6c31168074ecd475440836d25655545ccf50d1148993617271c43c6e5093dba16c94b1de3edf5e9f0", 0xeb}, {&(0x7f00000045c0)="a6f639be9b8b62aa555eacbe4284a1f60b6eca70470f7afb63fd994e7e008cdf8f0116b4ae766424abb0fe4c42ab756a4049e6ca2287a1863a59f2655f4f1ebd85ddd15631b73a59e9ec2c6d0e4e8417d5dae4a55b598aee3952da668e679f22dfda4eb0c799e669a69850f00752fa434a62ee8eade4c2b13009d6f832e6737033749d51f8697b02981d326dbe735762d1c3f1adc80074cca8d62f9bf91a965860e6546df1fa82189986fb0d3603c4d1907fe226ce4c0a412d4fc5e96c5fbb5c22e058632854cc14260ffc432349651eba8c3c4b50b677174f4b31b993fbc1b67ef4f1", 0xe3}, {&(0x7f00000046c0)="04822439049ad354391141b2058385794d957c35bf0efc3d390b37ef4907aeece89ff0cac233dac2cd0635bcb82630a9f5ee3cfddab704064a967d1bd75ffb293eae3a9397c2468eca2c945342b2c50e70439c451bd702dd83d8771f4acb7a7a8c04a714dcab147832632b31ce5223243e0af3251d31080f8134348f0325db5041c002514757a0b888640e7f194be1f140f0ad122249e70791b03daee9cf6aa1521ff6a576d57f1c1fc815db3d1285ed54312fb7570ea1f0bcca7773f4bc749d0dc4107065543148588912173c2206b9e4149c745e4a1693ab29", 0xda}, {&(0x7f00000047c0)="78146ef77046619ca4d1e5dc5142e62c8bcb6ef3abd6e393bb", 0x19}, {&(0x7f0000004800)="9fdeeae8234a14917d3796c3fbb6411a35c6df3ae5fc61910acc2bb1603ffbf9d051334e386448e0cea57f094f8f94db9a369d64afb3e79cb1288adf218eab72f4a778209e", 0x45}, {&(0x7f0000004880)}], 0x6, &(0x7f0000004b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r1]}}], 0x88, 0x1}}, {{&(0x7f0000004c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004cc0)=[{&(0x7f0000004c80)="2d0f17fd9c1079922eebc7589f81a0a42c92bad69983639b13ae339fc0126a9e91dfe5e224", 0x25}], 0x1, &(0x7f0000004e00)=[@rights={{0x28, 0x1, 0x1, [r2, r3, r6, r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r8, r9, r10, 0xffffffffffffffff, r12, r13, r14]}}], 0x58, 0x40}}], 0xa, 0x20024084) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r15}, 0x18) r16 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r16, 0x6, 0x1b, 0x0, 0x0) r17 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r17, &(0x7f0000000000)={0x0, 0x320, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) 1.456397981s ago: executing program 2 (id=3475): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) syz_clone(0x623f, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) 1.384715623s ago: executing program 2 (id=3476): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000740)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)="00214717d1bd57c023a700710a5eeb9d04ffff97637c", 0x16}], 0x1, 0x8, 0x49d) 1.086080089s ago: executing program 2 (id=3477): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x6, 0x6, 0x4, 0x6fcf, 0xf8, "b72ca7a26413ef6ca5a76bf8224be84e070856", 0x1, 0x3}) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xecb5, 0x3180, 0x0, 0x40024e}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffff67) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={0x0, r6, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000480)=0xf8) 616.274727ms ago: executing program 7 (id=3478): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x4, 0x20005, 0x400, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x1020000, &(0x7f00000004c0)={[{@resuid}, {@minixdf}, {@nolazytime}, {@discard}, {@noacl}, {@data_journal}, {@dax_never}]}, 0x1, 0x597, &(0x7f0000000680)="$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") (async) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x1020000, &(0x7f00000004c0)={[{@resuid}, {@minixdf}, {@nolazytime}, {@discard}, {@noacl}, {@data_journal}, {@dax_never}]}, 0x1, 0x597, &(0x7f0000000680)="$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") mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) (async) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000003, 0x810, r0, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000040)=@ethtool_cmd={0x0, 0xc4, 0xff, 0x0, 0xfe, 0xfa, 0x1, 0x8, 0x3, 0x0, 0x7fffff7f, 0xefc6, 0x24, 0x4, 0x8, 0x0, [0x6e, 0x7]}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0xfeffff, 0x113, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x0, 0x30, &(0x7f0000000000), &(0x7f0000000400)="c8c985d5457230cd3f0384a817d972ab1b039e5021dafc818591dbc0a4a03b0e532a7989133f0f7a8ffd5a4f79673eff"}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0xfeffff, 0x113, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x0, 0x30, &(0x7f0000000000), &(0x7f0000000400)="c8c985d5457230cd3f0384a817d972ab1b039e5021dafc818591dbc0a4a03b0e532a7989133f0f7a8ffd5a4f79673eff"}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r6], 0x48) 601.323588ms ago: executing program 1 (id=3479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) fsetxattr$security_evm(r3, &(0x7f0000000400), &(0x7f00000004c0)=@ng={0x4, 0x8, "8719e1f2c52c6f1a8b012ec912a2"}, 0x10, 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0xc0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e23, @rand_addr=0x64010101}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x164, 0x0, 0x0, 0x0, 0xe, 0x0, 0x9460, 0x2, 0x2}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000004000000000000000100000018110000", @ANYRES32=r6, @ANYRES8=r2], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='io\x00') r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newneigh={0x74, 0x1c, 0x200, 0x70bd29, 0x25dfdbfd, {0x1c, 0x0, 0x0, r10, 0x2, 0x40, 0xa}, [@NDA_PORT={0x6, 0x6, 0x4e24}, @NDA_PROBES={0x8, 0x4, 0x3}, @NDA_DST_IPV6={0x14, 0x1, @empty}, @NDA_FDB_EXT_ATTRS={0xffffffffffffff1d, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5e}]}, @NDA_FDB_EXT_ATTRS={0x28, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x2}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xa7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r10, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = openat(r4, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) write$cgroup_int(r11, &(0x7f0000000340)=0xffffffffffffffff, 0x12) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r11, 0x4058534c, &(0x7f0000000640)={0x769, 0x463, 0x7a57, 0x1, 0x781, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r12}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) r13 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r13, 0x6628) 575.142059ms ago: executing program 6 (id=3480): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c6163636573733dbf", @ANYBLOB=',']) (fail_nth: 13) 523.977469ms ago: executing program 1 (id=3481): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0x11, 0x7, &(0x7f0000001f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="9fdcbab1267081c299118e688e1d5891d7d2d04b0502e5a12988a00033878c49655d65b5d042323600b6563c175a3d9b308e5c4e927b0eba952c5dc3dda2d04b1052431205cf4e294a872ecb0c7872919484ff6716c3849b367e007a296fb403120aa5e771320d7064bf588f30bed3b32cf8c14800272e1301c6cc29b19c1af2e7b5a5330270cd1db7be9e3fe9f2001f8eb33288df6d69516f23a6118c412958f087f223310ab423e2e515cf57440fe782d991095266"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x0, 0x8, 0xfe, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x0, 0x0, 0x2}}) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0xb, &(0x7f0000000000)=0x1a, 0x4) sendmsg$nl_route_sched(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@gettaction={0x14, 0x32, 0x605, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x4004000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r8, 0x0, 0xff, 0x64, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8000, 0xfffffffe}}) move_mount(r3, 0x0, r2, 0x0, 0x46) close(r2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000780)={&(0x7f0000000a00)=""/4096, 0x110000, 0x2000, 0x8, 0x1}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x2}, 0x18) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000002100210100000000000000000a0000000000000200"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) fgetxattr(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="6f73122e62726a6467f4e1c2d24f653000"], &(0x7f0000001e00)=""/129, 0x81) 510.759319ms ago: executing program 6 (id=3482): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0xffea, 0xb, 0x6c, 0x0, @rand_addr=0x64010103, @dev={0xac, 0x14, 0x14, 0xb}}}}, 0x22) 266.287494ms ago: executing program 2 (id=3483): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (fail_nth: 9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 214.690505ms ago: executing program 1 (id=3484): syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2}, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)}, 0x0, 0x42, 0x0, {0x2}}) socket$kcm(0x11, 0x200000000000003, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) getgid() recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 214.374205ms ago: executing program 1 (id=3485): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0xffea, 0xb, 0x6c, 0x0, @rand_addr=0x64010103, @dev={0xac, 0x14, 0x14, 0xb}}}}, 0x22) 161.955666ms ago: executing program 6 (id=3486): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x2a, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000400000000000000000000801811006678019e0dffffffff75202d2200", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000950000000000000085100000f8ffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000851000000000000018000000010100000000000042000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = epoll_create1(0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeef, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r8 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r8, 0x0, 0x400000000000000, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000000c40)={{0x80, 0xab}, 'port0\x00', 0x19, 0x100c68, 0x5, 0x6, 0x2000002, 0x40, 0x3, 0x0, 0x1, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0x24, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x4, 0x0, 0x4, 0x3}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) r10 = perf_event_open(&(0x7f0000004cc0)={0x1, 0x44, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0xbbd0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f000059e000/0x2000)=nil, 0x2000, 0x3000000, 0x13, r10, 0x2b3c7000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x7b7306c040510a6}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000040)={0x60002009}) ppoll(&(0x7f0000000000)=[{r4, 0x2}], 0x1, &(0x7f0000000180), 0x0, 0x0) r11 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r11, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r0}) 161.702607ms ago: executing program 6 (id=3487): syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x1ffffffffffffdf4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 153.562136ms ago: executing program 2 (id=3488): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) syz_clone(0x623f, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) 141.838457ms ago: executing program 6 (id=3489): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000004b00), 0x1, 0x780e6fb25e147349) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000004d00), 0x280, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000004d40), 0x208801, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket$can_j1939(0x1d, 0x2, 0x7) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000004d80), 0x10000, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write$P9_RREAD(r12, &(0x7f0000000580)={0x59, 0x75, 0x2, {0x4e, "e34a888bad6c22dcb43a375185af1585651f6bf8b50adacd3af1844943de54cd643c0c39c6d9bc2cc024e7099e09acff7bcd803a6887c09ac5aaadf5a75c5b20161ae4a7a129844322662fc865be"}}, 0x59) sendfile(r12, r11, 0x0, 0x3ffff) sendfile(r12, r11, 0x0, 0x7fffeffd) r13 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000004dc0), 0x8800, 0x0) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r14, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) syz_open_pts(r14, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004e80)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f00000001c0)="5f32258bdc2ee1bd8829fde8bc264fa13d38842b6da4878b90dcf5ecd0673760a6de2fe864f8f054e3cc5753d67e3d48a0e1c02a1021e87fc96ea132b975bfaee85fbe8954c3be7828bbdd3847ca4390a3f6d82e2f75fce87987e8184e7f53efeb8ec735509f0dcf3e58ad9eeaeb3c3f8e685df96fd4968cdf9e99", 0x7b}, {&(0x7f0000000240)="c03004429f3d6125b021552799dc783f", 0x10}], 0x2, 0x0, 0x0, 0x44000}}, {{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000400)="bce18a3857e8ad0628af90335b5b072dd3b54cd46dd869311aaf4cef6e87304e58affaedb1b1a6f3b544d2ed27faff5bae266935746733bfde9df4cc7b90957e78a4d2c93f56e43a814a3f2245a9631473300aafb4b11dbe029a9f106e3b7021c927394531783385d6efea258653b5075e938148174cc4bf1942ca56480a48f2cd31e93484bf55b3155161546f97f33219364c24cf481fee16", 0x99}, {&(0x7f00000007c0)="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", 0x1000}], 0x2, &(0x7f0000001b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x880}}, {{&(0x7f0000001bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001c40)="50f1a6e458519a1acefd5974712f822c8a0f1e56671408cc629ba318478fe63ea6d5f9d11a83814226de2be3643cda5ea9dcfbc1c4c939618c52ee1da6e17ef952f3e0b9974da18092e8057399a31294cdf82bee2ff94211e8acddf9a3183feb9728d6a2bf5fbaa6e849d5aa4f039358c0ebb08eb95710867c7f678ca93492bb2dc6b79e78392c7f2aa7b0377487c7aa5ba5221af80e25925fa61d641897f509a077f108885cb846b7fe1272d320304de35c947938ea8834be7b195a870a0c333c60c835e71c389eba17869f66f25a31566712dc1c2a0367393be55bdafdc37a8b5881c81a2dd1b1996ffe8e2ad420", 0xef}, {&(0x7f0000001d40)="888016076f57683dad43abfeb56eebb5e9b29cb4cea09ee311194bbac91c412484a2e8e97d892441ce9676893032c732a468603da52bee91ce7f090835ff61a3babfca37221dd5e8632f92ef923dcd0d2aa862f54bc639868051fd9ceacf2ab656c3361ffedf4d2c93e8c918153d9e03be276d53e5f0a8343c23f776b2ef90ffa02c535a97521acb049629ba2c7397b59f9e29ad69a4203e7137148dc4b7427921e3cc628542babb3528c4712d59f8e880fa1b46", 0xb4}, {&(0x7f0000001e00)="603b440990a79d0de2bfb0664ae15d9ac2a031da19c5ddadabe27654e191082ef64bd39deef0940ab588fe9145fc050885a5ac5cf025d2c5535f4b170b0ad49b36f1321a50fc2f4b6ebb234862470fc43b063973308e9bbf3fd2faf872fdda5d24e32afa4b957376b04105c5e8fdfff0f82a46c3f30049ec24e48f841f79fcdeb31925edb966ef0d39eb07c2827c36161c7636272de81899185f9e1ab8f8fdcded9ab55cf4ae6525acfa5197340fa0d0ba41f0a94f8c3bc1d09aae14d03acddda7a004", 0xc3}], 0x3, &(0x7f00000017c0)=ANY=[@ANYBLOB="1c0010000000000000000000000000005c239ff7e706c484bd273d3280b41255fe7cdf766baa2b1f0e60399bce656a08569f863b3372b9bc24a7dfcbb81e4ffebcb841ead0e885571e71320760fa0ea6233ef290fcec7b7aaceb3b0ea5f9aafa759fc3b49cab392f9bc626e6561a2cdfed1e13028fd7416cc174ef30e326f4997c092ee635c2aa0dc811363b705005ff6661b61b2b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000022c0)="06dcc31e81e8", 0x6}, {&(0x7f0000002300)="2bf9c0beb4bc1e4d21abe15de00b35e9ff93bef784e82ced735e37368815293f89bac920943b1752d9feff8b41d1bcf8fd4fc55b551ad47bbc08301ebbeaaad80d656890bf71ad71f3b1bcf8ec0d78457069cccb27e900d3921e84cfeff36787f3e1631ad4495cd091", 0x69}, {&(0x7f0000002380)="338cd4f1dccdcf00f56dab55f2b0b2330e336a47cb861115182ee5c0d1d0e2e0bfeb1da44ee17db5b13f8ff85d07bfc0a9846ef8f281131f529343424b476dd65d92f1b910186bb4c9c8c9a6a1f4be7fde5e4f05e763eb55513b299e1f5fba717c5c8b6d373b6a52a3aedb43edb5332f2e6c321422cdbacb6fc653", 0x7b}, {&(0x7f0000002400)="80bd2edf732647a79dcac742bf4a96309012e2887f3c495f31984c834fe6c1e3f4ee57a81f4b5522b869641fdff5e51fbd6160011ebbade3e671a1e965a95679fb7d2089e698f71193cd3a91d0ef86bf36a716e7ed7e47cdf7ec8ca4dcba", 0x5e}, {&(0x7f0000002480)="6dd41300bc343392ed3f1cbff8f7dcd153d8c26c9defffaeb4062f18ecb3fb3b18a99eb12d80716517819d8af459deda8ab01facf6ebb776929c2535811645f07ad5992f7332c02e1ce57e2e92f5452e11de1420727d8a8f25508ddbb12df69b774f0ff7b9e8fc98e981d5c4724300da05b5ec77c227ab69a321c35cdbfd699e04be705e54c95ea46394707afd1ec048607543c7b492", 0x96}, {&(0x7f0000002540)="de558425753b4de9b5eda67458d75169934cd77271f5948ef6bafcfca11fad3b1a5933b8d3a04c89c707531f185896a4864e49dd6afca2232deaf12e21e3ead44088c6bdfbebc3f5b047477c37906ee311c39945d1aa5ccb4087f1a53342c8cc0af8b6f3876cc790704856ed3b2191c6fb92abb97ec6227e89a97c2cb5f5f147a95d69e1a3d939b15f0eab6c30aef733", 0x90}], 0x6, &(0x7f0000002ac0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x78, 0x20028011}}, {{&(0x7f0000002b40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002bc0)="a50fb145a57d00b0b9c8a3eedf7baa5911c5b70e33302ac676bb99ed27ade8cf9036c4ab0c6a6778f6286ba246c1d99844ccddb29a475201a388bf9f70b5926760b2af7c39b1c3c9f7a4f85d914a14dd7117ec3073ec53d606d573bb6db8825513ddf4ca4f71fa9e4b91f8b72bc399c9cb8ba1ef6c4720079a62542b7d2c6aac0e601223be02f737f5924fcc5e3238450776c4cfb7bbffa605b624da522b5bffcb46ee897d", 0xa5}], 0x1, &(0x7f0000003240)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001000000000000000010000000100000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2c030800000000000040000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x108, 0x4000000}}, {{&(0x7f0000003380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003500)=[{&(0x7f0000003400)="f6b98280eb87a2daa63ebe1998836ee55495544e74ebc3bef68efe2d91c67dd15406224c74095f536532fd18096ec1b0f373bd337d6194c313f92b478514f29082ebe04cb2eed1ea236e18a0d64f2fbaac39698db6cdfb3c52b480fd9123e6788009e5969a2d1951f70e932e1db57a2187dd9522daed7ec87913c554e9f5e0085d303285b37017490881172a31ed1852cc34c8187a71c7a0bf0889d2c8cdfd85fcd6d092d822577d94ee6ae11dc989322d8007f454ace5fc63c068ab7b8b080daedde36ec2170b195ba3451341db0ab373681dd6f2bf94eab0d83809198b42f857", 0xe1}], 0x1, &(0x7f0000003640)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40, 0x4080}}, {{&(0x7f0000003680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003800)=[{&(0x7f0000003700)="1c5769718d94b4894982e90854129d64600920978095", 0x16}, {&(0x7f0000003740)="ef49aafd6cafd76163371e1e41521eb354f7a336faf39698cc9a6767a5448fc2bf8f63a516e5f2ad3fbeb2477082ebcc0317b864ccf9c2588417e14e6bb889f057b5a88324612b637e88be240d869cb2638e68c56522c2f1a74812a2475650ce6fdaf033c548880f1308c1eae30dfb81fb41115baf4c1df8be969ef94ec9f47538dd9d788ec47a6dfea3d527a1db1c1ecee921b07d8f26d610e5823530d4e44b072779fa657f9a47f485b1e2794945c6c63439aa7a0eef32eb8dec", 0xbb}], 0x2, &(0x7f0000003ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118, 0x4040}}, {{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000004000)="f8c2b147ee9037abe8d4c360ef39b4d1a3c286464dff550670fcf081ab7c96c51ed5e225e5a1dc6cf84aba5f9f8f0e870bbe2690ae985f68541e8a44ca353dfa054a2cc05f382cc07133ca5972fbebf1e69b29debc18fd586937b8dcbda3b0842ce1cf3bc413c288542fe01f8833eec82dc20332c9aef1eabea648b4a47024fc6a82f794aed1cba69a4967f3da3cfabd1440ceec591075e3898d1de38fdef9579d029d0145b7f4b1f3b96d903a876d7e2a02e0ac5b213fcb046b91afbee6473d4ce80f112f7324f64af6d70974758e1b754642b4b38c8a30fecd2fc2c6d84b45a6d79ca39db11d0f92b382b9", 0xec}, {&(0x7f0000004100)="e869a8b1884362f56a25e244dbab35c52e891ddfdc7ca7f14d23f8fb888351707f14f5ede31705439c7c2e8685d81a8e17bb188a5c5bc4a0818a59fcb14ebabf7cbc438d2b0da630dc16e59bc5de8ad30e6c695ecac4b0cb12a90a95b7ce8e1283127f06f6d8bdacb61ece43057bc785368a8352b56d3b2a146e7933fa03a6bae0b8b27d6a0193ec669ca5c492ccfcadf0f25196d44c882c", 0x98}, {&(0x7f00000041c0)="0664fe35ff4fd47350e48d67cf032a8ec3192c02959d004309d3a2e693f971ca4ca0bc06cc152f03f1e6a2fd8cad134ed41186a4d1c4e5068af7b7deb68dad3712bd", 0x42}, {&(0x7f0000004240)="b03ab4c443d58a307d6c197508cdd00f54805099aa4072440baa0602a5e280b106bfa61fa9ece8a234321a2a7ec6ceb5e698cf3ac4847f2efcb3ef20db754673aa0eea0a4d0b659b08ecd092a9b85d54b66b6bc083d716f5b243f44071bb32b5cd8b00f98ed48da02d40ad58886aec26", 0x70}, {&(0x7f00000042c0)="1dc8700a3fc9f4d51e53d3e6d43df0d2aaf95116c2", 0x15}, {&(0x7f0000004300)="6a8b92a87b0b45c4c6f5860f6994", 0xe}, {&(0x7f0000004340)}, {&(0x7f0000004380)="9928f810caa0b5c3419b115ffade779a6bd9b59bd7630cde00e4b057056321da83b9af19e2456dabf180ccf387d09a", 0x2f}, {&(0x7f00000043c0)="9a0033b01d", 0x5}], 0x9, 0x0, 0x0, 0x810}}, {{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f00000044c0)="9f3ffd3129a709436c8af9f7ff3fb6fa6486e1dcf36e5d45746cfe87e93854a5a8c87534f5ebb62d1e3adb3332487215a131cbc6d40d4f44c88e24954e3df3bab655ce99c8ea9284dbd74e095da86561e09a96ed9faa6505334cdfe8787c95e6c34b3268459edfc1bc84bf931efc39c02f5ce6ffc3da061f4778cafdae1f740f6146f48072b6064907775ca428a4963ff19c32e0c267811003d48f80979e602a667565ab39b0c98999155e5bd0af27a04363e5e56d97eddc0227900033a7ddfbcaabe6c31168074ecd475440836d25655545ccf50d1148993617271c43c6e5093dba16c94b1de3edf5e9f0", 0xeb}, {&(0x7f00000045c0)="a6f639be9b8b62aa555eacbe4284a1f60b6eca70470f7afb63fd994e7e008cdf8f0116b4ae766424abb0fe4c42ab756a4049e6ca2287a1863a59f2655f4f1ebd85ddd15631b73a59e9ec2c6d0e4e8417d5dae4a55b598aee3952da668e679f22dfda4eb0c799e669a69850f00752fa434a62ee8eade4c2b13009d6f832e6737033749d51f8697b02981d326dbe735762d1c3f1adc80074cca8d62f9bf91a965860e6546df1fa82189986fb0d3603c4d1907fe226ce4c0a412d4fc5e96c5fbb5c22e058632854cc14260ffc432349651eba8c3c4b50b677174f4b31b993fbc1b67ef4f1", 0xe3}, {&(0x7f00000046c0)="04822439049ad354391141b2058385794d957c35bf0efc3d390b37ef4907aeece89ff0cac233dac2cd0635bcb82630a9f5ee3cfddab704064a967d1bd75ffb293eae3a9397c2468eca2c945342b2c50e70439c451bd702dd83d8771f4acb7a7a8c04a714dcab147832632b31ce5223243e0af3251d31080f8134348f0325db5041c002514757a0b888640e7f194be1f140f0ad122249e70791b03daee9cf6aa1521ff6a576d57f1c1fc815db3d1285ed54312fb7570ea1f0bcca7773f4bc749d0dc4107065543148588912173c2206b9e4149c745e4a1693ab29", 0xda}, {&(0x7f00000047c0)="78146ef77046619ca4d1e5dc5142e62c8bcb6ef3abd6e393bb", 0x19}, {&(0x7f0000004800)="9fdeeae8234a14917d3796c3fbb6411a35c6df3ae5fc61910acc2bb1603ffbf9d051334e386448e0cea57f094f8f94db9a369d64afb3e79cb1288adf218eab72f4a778209e", 0x45}, {&(0x7f0000004880)="e2ca3f256ab837ae279147c6bd230d9246fc07daeb02cafbf092ea980ea7d21f", 0x20}], 0x6, &(0x7f0000004b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r1]}}], 0x88, 0x1}}, {{&(0x7f0000004c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004cc0)=[{&(0x7f0000004c80)="2d0f17fd9c1079922eebc7589f81a0a42c92bad69983639b13ae339fc0126a9e91dfe5e224", 0x25}], 0x1, &(0x7f0000004e00)=[@rights={{0x28, 0x1, 0x1, [r2, r3, r6, r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r8, r9, r10, 0xffffffffffffffff, r12, r13, r14]}}], 0x58, 0x40}}], 0xa, 0x20024084) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r15}, 0x18) r16 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r16, 0x6, 0x1b, 0x0, 0x0) r17 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r17, &(0x7f0000000000)={0x0, 0x320, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) 129.920567ms ago: executing program 2 (id=3490): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410e9) ppoll(&(0x7f00000004c0)=[{0xffffffffffffffff, 0x4}], 0x1, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) 25.435959ms ago: executing program 1 (id=3491): set_mempolicy(0x3, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x20000) 0s ago: executing program 1 (id=3492): setreuid(0xee01, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) (async, rerun: 32) r1 = getpid() (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r1, @ANYBLOB="bf8b06d8a7b514a9ec778f0e019d13a946d77dd15c2340c7d234fa18afaa72e6f0a2dbda61017d8fbd36617df7854892c90b5ed200f3555821587aca2e37c8489a157cf40059d3d05c67b900969cb54fdf001a7c429ccafeb5d4587f9431a457973bbac7653d5bff0191032fbace221784408c6b578c2002baa89a03d8f2e39f4b5e121c94c8e0ad17f50091b56e2a60e0b142e2d47c75ebf3b923d169ee32b7979f77e4008565"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async, rerun: 32) munlockall() (rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) (async, rerun: 32) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") (async, rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r5, 0x0, 0x3ffff) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) kernel console output (not intermixed with test programs): 731464][T11565] syzkaller1: entered allmulticast mode [ 188.766396][ T5965] tipc: Disabling bearer [ 188.773921][ T5965] tipc: Disabling bearer [ 188.779111][ T5965] tipc: Left network mode [ 188.784659][T11521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.791589][T11521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.817594][T11521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.841361][T11521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.848365][T11521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.874413][T11521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.915483][T11521] hsr_slave_0: entered promiscuous mode [ 188.928070][T11521] hsr_slave_1: entered promiscuous mode [ 188.928573][T11580] binfmt_misc: register: failed to install interpreter file ./file0 [ 188.942108][T11521] debugfs: 'hsr0' already exists in 'hsr' [ 188.947837][T11521] Cannot create hsr debugfs directory [ 188.973339][ T5965] veth1_macvtap: left promiscuous mode [ 188.978831][ T5965] veth0_macvtap: left promiscuous mode [ 188.987405][ T5965] veth1_vlan: left promiscuous mode [ 188.992899][ T5965] veth0_vlan: left promiscuous mode [ 189.150420][T11586] syzkaller1: entered promiscuous mode [ 189.155971][T11586] syzkaller1: entered allmulticast mode [ 189.257870][T11607] Set syz1 is full, maxelem 65536 reached [ 189.414855][ T5965] IPVS: stop unused estimator thread 0... [ 189.678929][T11521] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 189.723174][T11521] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 189.732297][T11521] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 189.761459][T11521] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 189.790213][T11616] FAULT_INJECTION: forcing a failure. [ 189.790213][T11616] name failslab, interval 1, probability 0, space 0, times 0 [ 189.802995][T11616] CPU: 1 UID: 0 PID: 11616 Comm: syz.6.2800 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 189.803104][T11616] Tainted: [W]=WARN [ 189.803110][T11616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 189.803121][T11616] Call Trace: [ 189.803128][T11616] [ 189.803136][T11616] __dump_stack+0x1d/0x30 [ 189.803155][T11616] dump_stack_lvl+0xe8/0x140 [ 189.803171][T11616] dump_stack+0x15/0x1b [ 189.803185][T11616] should_fail_ex+0x265/0x280 [ 189.803221][T11616] should_failslab+0x8c/0xb0 [ 189.803245][T11616] __kmalloc_noprof+0xa5/0x3e0 [ 189.803276][T11616] ? u32_change+0xca8/0x14c0 [ 189.803303][T11616] u32_change+0xca8/0x14c0 [ 189.803338][T11616] ? __pfx_u32_change+0x10/0x10 [ 189.803439][T11616] tc_new_tfilter+0xde4/0x10a0 [ 189.803460][T11616] ? __rcu_read_unlock+0x4f/0x70 [ 189.803611][T11616] ? ns_capable+0x7d/0xb0 [ 189.803632][T11616] ? __pfx_tc_new_tfilter+0x10/0x10 [ 189.803703][T11616] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 189.803859][T11616] netlink_rcv_skb+0x120/0x220 [ 189.803880][T11616] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 189.803913][T11616] rtnetlink_rcv+0x1c/0x30 [ 189.803952][T11616] netlink_unicast+0x5c0/0x690 [ 189.804030][T11616] netlink_sendmsg+0x58b/0x6b0 [ 189.804055][T11616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.804080][T11616] __sock_sendmsg+0x145/0x180 [ 189.804111][T11616] ____sys_sendmsg+0x31e/0x4e0 [ 189.804166][T11616] ___sys_sendmsg+0x17b/0x1d0 [ 189.804202][T11616] __x64_sys_sendmsg+0xd4/0x160 [ 189.804227][T11616] x64_sys_call+0x191e/0x2ff0 [ 189.804330][T11616] do_syscall_64+0xd2/0x200 [ 189.804408][T11616] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 189.804533][T11616] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 189.804564][T11616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.804586][T11616] RIP: 0033:0x7fe650e5eec9 [ 189.804599][T11616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.804673][T11616] RSP: 002b:00007fe64f8a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.804693][T11616] RAX: ffffffffffffffda RBX: 00007fe6510b6090 RCX: 00007fe650e5eec9 [ 189.804707][T11616] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000005 [ 189.804720][T11616] RBP: 00007fe64f8a6090 R08: 0000000000000000 R09: 0000000000000000 [ 189.804766][T11616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.804777][T11616] R13: 00007fe6510b6128 R14: 00007fe6510b6090 R15: 00007ffef182f078 [ 189.804793][T11616] [ 190.143130][T11621] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2802'. [ 190.270887][T11521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.286189][T11521] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.297450][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.304535][ T5964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.320566][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.327691][ T5974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.354327][T11521] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.364728][T11521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.382746][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2809'. [ 190.454232][T11642] syzkaller1: entered promiscuous mode [ 190.459816][T11642] syzkaller1: entered allmulticast mode [ 190.512001][T11521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.532933][T11650] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 190.539623][T11650] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.547206][T11650] vhci_hcd vhci_hcd.0: Device attached [ 190.589694][T11659] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(15) [ 190.596313][T11659] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.603998][T11659] vhci_hcd vhci_hcd.0: Device attached [ 190.637305][T11650] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(14) [ 190.643928][T11650] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 190.651663][T11650] vhci_hcd vhci_hcd.0: Device attached [ 190.679426][T11650] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.708924][T11650] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 190.729218][T11664] vhci_hcd: connection closed [ 190.729423][ T5964] vhci_hcd: stop threads [ 190.729441][T11660] vhci_hcd: connection closed [ 190.729569][T11654] vhci_hcd: connection closed [ 190.734173][ T5964] vhci_hcd: release socket [ 190.752316][ T5964] vhci_hcd: disconnect device [ 190.760854][T11521] veth0_vlan: entered promiscuous mode [ 190.785059][T11521] veth1_vlan: entered promiscuous mode [ 190.793167][ T5964] vhci_hcd: stop threads [ 190.797444][ T5964] vhci_hcd: release socket [ 190.801919][ T5964] vhci_hcd: disconnect device [ 190.806940][ T6719] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 190.815911][T11655] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 190.829317][ T5964] vhci_hcd: stop threads [ 190.833698][ T5964] vhci_hcd: release socket [ 190.838113][ T5964] vhci_hcd: disconnect device [ 190.844909][T11521] veth0_macvtap: entered promiscuous mode [ 190.854353][T11521] veth1_macvtap: entered promiscuous mode [ 190.867790][T11521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.879336][T11521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.890219][ T5957] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.899391][ T5957] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.908608][ T5957] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.918684][ T5957] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.080524][T11694] Set syz1 is full, maxelem 65536 reached [ 191.276276][T11696] loop6: detected capacity change from 0 to 512 [ 191.545365][T11711] netlink: 'syz.2.2825': attribute type 1 has an invalid length. [ 191.736666][T11725] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 191.743195][T11725] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 191.750911][T11725] vhci_hcd vhci_hcd.0: Device attached [ 191.764940][T11726] vhci_hcd: connection closed [ 191.765282][ T5964] vhci_hcd: stop threads [ 191.774243][ T5964] vhci_hcd: release socket [ 191.778655][ T5964] vhci_hcd: disconnect device [ 191.788704][T11729] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2831'. [ 191.843282][T11729] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 191.850353][T11729] batman_adv: batadv0: Removing interface: veth1_vlan [ 191.978722][T11733] Process accounting resumed [ 192.189602][T11758] $H: renamed from bond0 (while UP) [ 192.219094][T11758] $H: entered promiscuous mode [ 192.224168][T11758] bond_slave_0: entered promiscuous mode [ 192.229902][T11758] @0: entered promiscuous mode [ 192.244335][T11758] dummy0: entered promiscuous mode [ 192.258036][T11761] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2842'. [ 192.456645][T11773] Process accounting resumed [ 192.553296][T11781] FAULT_INJECTION: forcing a failure. [ 192.553296][T11781] name failslab, interval 1, probability 0, space 0, times 0 [ 192.565998][T11781] CPU: 0 UID: 0 PID: 11781 Comm: syz.2.2849 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 192.566087][T11781] Tainted: [W]=WARN [ 192.566093][T11781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 192.566142][T11781] Call Trace: [ 192.566149][T11781] [ 192.566156][T11781] __dump_stack+0x1d/0x30 [ 192.566198][T11781] dump_stack_lvl+0xe8/0x140 [ 192.566221][T11781] dump_stack+0x15/0x1b [ 192.566238][T11781] should_fail_ex+0x265/0x280 [ 192.566260][T11781] should_failslab+0x8c/0xb0 [ 192.566281][T11781] __kmalloc_noprof+0xa5/0x3e0 [ 192.566304][T11781] ? fib6_info_alloc+0x2e/0x90 [ 192.566413][T11781] fib6_info_alloc+0x2e/0x90 [ 192.566440][T11781] ip6_route_info_create+0xe7/0x390 [ 192.566485][T11781] inet6_rtm_newroute+0x35e/0x1020 [ 192.566525][T11781] ? __memcg_slab_free_hook+0x135/0x230 [ 192.566674][T11781] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 192.566700][T11781] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 192.566771][T11781] netlink_rcv_skb+0x120/0x220 [ 192.566794][T11781] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 192.566826][T11781] rtnetlink_rcv+0x1c/0x30 [ 192.566920][T11781] netlink_unicast+0x5c0/0x690 [ 192.566944][T11781] netlink_sendmsg+0x58b/0x6b0 [ 192.566968][T11781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.566989][T11781] __sock_sendmsg+0x145/0x180 [ 192.567054][T11781] ____sys_sendmsg+0x31e/0x4e0 [ 192.567161][T11781] ___sys_sendmsg+0x17b/0x1d0 [ 192.567197][T11781] __x64_sys_sendmsg+0xd4/0x160 [ 192.567299][T11781] x64_sys_call+0x191e/0x2ff0 [ 192.567318][T11781] do_syscall_64+0xd2/0x200 [ 192.567344][T11781] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 192.567367][T11781] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 192.567452][T11781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.567528][T11781] RIP: 0033:0x7f7cdc8ceec9 [ 192.567581][T11781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.567595][T11781] RSP: 002b:00007f7cdb337038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.567613][T11781] RAX: ffffffffffffffda RBX: 00007f7cdcb25fa0 RCX: 00007f7cdc8ceec9 [ 192.567625][T11781] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 192.567638][T11781] RBP: 00007f7cdb337090 R08: 0000000000000000 R09: 0000000000000000 [ 192.567651][T11781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.567664][T11781] R13: 00007f7cdcb26038 R14: 00007f7cdcb25fa0 R15: 00007ffcbcce5d28 [ 192.567717][T11781] [ 193.084430][T11795] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.123305][T11795] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.183279][T11803] loop7: detected capacity change from 0 to 512 [ 193.203780][T11795] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.233350][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 193.233364][ T29] audit: type=1326 audit(1758733938.036:15531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11805 comm="syz.6.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe650e5eec9 code=0x7ffc0000 [ 193.268451][T11806] loop6: detected capacity change from 0 to 128 [ 193.281273][T11795] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.297151][T11813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2864'. [ 193.300876][T11811] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2863'. [ 193.323113][T11799] Process accounting resumed [ 193.331383][ T29] audit: type=1326 audit(1758733938.036:15532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11805 comm="syz.6.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe650e5eec9 code=0x7ffc0000 [ 193.333634][T11811] loop7: detected capacity change from 0 to 1024 [ 193.355141][ T29] audit: type=1326 audit(1758733938.066:15533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11805 comm="syz.6.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe650e5eec9 code=0x7ffc0000 [ 193.362091][T11811] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.385089][ T29] audit: type=1326 audit(1758733938.066:15534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11805 comm="syz.6.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe650e5eec9 code=0x7ffc0000 [ 193.415576][ T29] audit: type=1326 audit(1758733938.066:15535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11805 comm="syz.6.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe650e5eec9 code=0x7ffc0000 [ 193.439389][ T29] audit: type=1326 audit(1758733938.066:15536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11805 comm="syz.6.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe650e5eec9 code=0x7ffc0000 [ 193.463301][ T29] audit: type=1326 audit(1758733938.066:15537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11805 comm="syz.6.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe650e5eec9 code=0x7ffc0000 [ 193.486960][ T29] audit: type=1326 audit(1758733938.066:15538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11805 comm="syz.6.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fe650e5eec9 code=0x7ffc0000 [ 193.502854][T11811] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0102] [ 193.510780][ T29] audit: type=1326 audit(1758733938.066:15539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11805 comm="syz.6.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe650e5eec9 code=0x7ffc0000 [ 193.519808][T11811] System zones: 0-1, 3-12 [ 193.542294][ T29] audit: type=1326 audit(1758733938.066:15540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11805 comm="syz.6.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe650e5eec9 code=0x7ffc0000 [ 193.548766][T11811] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.614749][ T9608] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.631081][ T5964] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.649761][ T5964] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.662710][ T5964] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.671035][ T5964] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.748213][T11839] loop7: detected capacity change from 0 to 512 [ 193.824992][T11845] Set syz1 is full, maxelem 65536 reached [ 193.868293][T11849] loop7: detected capacity change from 0 to 128 [ 193.920934][T11849] Process accounting resumed [ 193.990861][T11857] loop7: detected capacity change from 0 to 128 [ 194.041197][T11857] Process accounting resumed [ 194.075444][T11859] netlink: 'syz.2.2880': attribute type 1 has an invalid length. [ 194.748403][T11860] syz.7.2881 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 194.759507][T11860] CPU: 1 UID: 0 PID: 11860 Comm: syz.7.2881 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 194.759577][T11860] Tainted: [W]=WARN [ 194.759584][T11860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 194.759596][T11860] Call Trace: [ 194.759603][T11860] [ 194.759611][T11860] __dump_stack+0x1d/0x30 [ 194.759633][T11860] dump_stack_lvl+0xe8/0x140 [ 194.759653][T11860] dump_stack+0x15/0x1b [ 194.759694][T11860] dump_header+0x81/0x220 [ 194.759721][T11860] oom_kill_process+0x342/0x400 [ 194.759753][T11860] out_of_memory+0x979/0xb80 [ 194.759816][T11860] try_charge_memcg+0x5e6/0x9e0 [ 194.759846][T11860] charge_memcg+0x51/0xc0 [ 194.759862][T11860] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 194.759950][T11860] __read_swap_cache_async+0x1df/0x350 [ 194.759984][T11860] swap_cluster_readahead+0x277/0x3e0 [ 194.760057][T11860] swapin_readahead+0xde/0x6f0 [ 194.760167][T11860] ? __filemap_get_folio+0x4f7/0x6b0 [ 194.760225][T11860] ? swap_cache_get_folio+0x77/0x200 [ 194.760256][T11860] do_swap_page+0x301/0x2430 [ 194.760280][T11860] ? css_rstat_updated+0xb7/0x240 [ 194.760321][T11860] ? __pfx_default_wake_function+0x10/0x10 [ 194.760342][T11860] handle_mm_fault+0x9a5/0x2c20 [ 194.760369][T11860] do_user_addr_fault+0x636/0x1090 [ 194.760417][T11860] ? fpregs_restore_userregs+0xe2/0x1d0 [ 194.760445][T11860] ? switch_fpu_return+0xe/0x20 [ 194.760475][T11860] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 194.760506][T11860] exc_page_fault+0x62/0xa0 [ 194.760540][T11860] asm_exc_page_fault+0x26/0x30 [ 194.760561][T11860] RIP: 0033:0x7faf286457cc [ 194.760622][T11860] Code: 66 0f 1f 44 00 00 69 3d e6 fe ea 00 e8 03 00 00 48 8d 1d e7 07 38 00 e8 62 96 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 194.760637][T11860] RSP: 002b:00007ffd6c1e1100 EFLAGS: 00010202 [ 194.760651][T11860] RAX: 0000000000000000 RBX: 00007faf289c5fa0 RCX: 0000000000000000 [ 194.760663][T11860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555589ed2808 [ 194.760710][T11860] RBP: 00007faf289c7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 194.760721][T11860] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002f938 [ 194.760732][T11860] R13: 00007faf289c6270 R14: ffffffffffffffff R15: 00007ffd6c1e1210 [ 194.760752][T11860] [ 194.760768][T11860] memory: usage 307200kB, limit 307200kB, failcnt 148 [ 194.992069][T11860] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0 [ 194.999949][T11860] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 195.007268][T11860] Memory cgroup stats for /syz7: [ 195.007918][T11860] cache 0 [ 195.015810][T11860] rss 4096 [ 195.018820][T11860] shmem 0 [ 195.021744][T11860] mapped_file 0 [ 195.025269][T11860] dirty 0 [ 195.028193][T11860] writeback 8192 [ 195.031723][T11860] workingset_refault_anon 20 [ 195.036323][T11860] workingset_refault_file 0 [ 195.040856][T11860] swap 217088 [ 195.044164][T11860] swapcached 20480 [ 195.047960][T11860] pgpgin 108049 [ 195.051419][T11860] pgpgout 108044 [ 195.055044][T11860] pgfault 114208 [ 195.058610][T11860] pgmajfault 11 [ 195.058618][T11860] inactive_anon 20480 [ 195.066059][T11860] active_anon 0 [ 195.066066][T11860] inactive_file 0 [ 195.066072][T11860] active_file 0 [ 195.066095][T11860] unevictable 0 [ 195.066101][T11860] hierarchical_memory_limit 314572800 [ 195.066108][T11860] hierarchical_memsw_limit 9223372036854771712 [ 195.066115][T11860] total_cache 0 [ 195.066122][T11860] total_rss 4096 [ 195.098646][T11860] total_shmem 0 [ 195.098654][T11860] total_mapped_file 0 [ 195.098660][T11860] total_dirty 0 [ 195.098666][T11860] total_writeback 8192 [ 195.098674][T11860] total_workingset_refault_anon 20 [ 195.098681][T11860] total_workingset_refault_file 0 [ 195.098689][T11860] total_swap 217088 [ 195.115877][T11894] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 195.118759][T11860] total_swapcached 20480 [ 195.123770][T11894] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 195.127588][T11860] total_pgpgin 108049 [ 195.134250][T11894] vhci_hcd vhci_hcd.0: Device attached [ 195.138323][T11860] total_pgpgout 108044 [ 195.151458][T11895] vhci_hcd: connection closed [ 195.155372][T11860] total_pgfault 114208 [ 195.155383][T11860] total_pgmajfault 11 [ 195.155390][T11860] total_inactive_anon 20480 [ 195.159946][ T5964] vhci_hcd: stop threads [ 195.164109][T11860] total_active_anon 0 [ 195.164118][T11860] total_inactive_file 0 [ 195.164125][T11860] total_active_file 0 [ 195.168172][ T5964] vhci_hcd: release socket [ 195.172160][T11860] total_unevictable 0 [ 195.176635][ T5964] vhci_hcd: disconnect device [ 195.180848][T11860] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2881,pid=11860,uid=0 [ 195.220786][T11860] Memory cgroup out of memory: Killed process 11860 (syz.7.2881) total-vm:98324kB, anon-rss:1140kB, file-rss:26276kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 195.250398][T11888] Process accounting resumed [ 195.513826][T11915] netlink: 'syz.2.2904': attribute type 1 has an invalid length. [ 195.618127][T11922] Process accounting resumed [ 195.636512][ T3391] hid_parser_main: 33 callbacks suppressed [ 195.636528][ T3391] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 195.664317][ T3391] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 195.720265][T11940] loop7: detected capacity change from 0 to 8192 [ 195.773462][T11940] loop7: p1 p2 < > p3 p4 < p5 > [ 195.778494][T11940] loop7: partition table partially beyond EOD, truncated [ 195.785919][T11940] loop7: p1 size 100663296 extends beyond EOD, truncated [ 195.793378][T11940] loop7: p2 start 591104 is beyond EOD, truncated [ 195.799827][T11940] loop7: p3 start 33572980 is beyond EOD, truncated [ 195.808321][T11940] loop7: p5 size 100663296 extends beyond EOD, truncated [ 195.842856][T11952] syzkaller1: entered promiscuous mode [ 195.848521][T11952] syzkaller1: entered allmulticast mode [ 195.911831][ T6719] usb 13-1: enqueue for inactive port 0 [ 195.917454][ T6719] usb 13-1: enqueue for inactive port 0 [ 195.986147][T11976] 9pnet_fd: Insufficient options for proto=fd [ 195.990075][T11961] Process accounting resumed [ 196.006926][ T6719] vhci_hcd: vhci_device speed not set [ 196.016891][T11978] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 196.023421][T11978] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 196.031149][T11978] vhci_hcd vhci_hcd.0: Device attached [ 196.039285][T11979] vhci_hcd: connection closed [ 196.047065][ T5974] vhci_hcd: stop threads [ 196.056171][ T5974] vhci_hcd: release socket [ 196.060738][ T5974] vhci_hcd: disconnect device [ 196.141545][T11989] FAULT_INJECTION: forcing a failure. [ 196.141545][T11989] name failslab, interval 1, probability 0, space 0, times 0 [ 196.154372][T11989] CPU: 1 UID: 0 PID: 11989 Comm: syz.1.2931 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 196.154403][T11989] Tainted: [W]=WARN [ 196.154410][T11989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 196.154430][T11989] Call Trace: [ 196.154436][T11989] [ 196.154444][T11989] __dump_stack+0x1d/0x30 [ 196.154463][T11989] dump_stack_lvl+0xe8/0x140 [ 196.154480][T11989] dump_stack+0x15/0x1b [ 196.154493][T11989] should_fail_ex+0x265/0x280 [ 196.154515][T11989] should_failslab+0x8c/0xb0 [ 196.154568][T11989] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 196.154649][T11989] ? p9_client_create+0x59/0xbc0 [ 196.154673][T11989] ? p9_client_create+0x207/0xbc0 [ 196.154705][T11989] ? should_failslab+0x8c/0xb0 [ 196.154729][T11989] kstrdup+0x3e/0xd0 [ 196.154753][T11989] p9_client_create+0x207/0xbc0 [ 196.154863][T11989] v9fs_session_init+0xf7/0xde0 [ 196.154886][T11989] ? avc_has_perm_noaudit+0x1b1/0x200 [ 196.154932][T11989] ? should_fail_ex+0xdb/0x280 [ 196.154953][T11989] ? v9fs_mount+0x51/0x5c0 [ 196.154977][T11989] ? should_failslab+0x8c/0xb0 [ 196.155043][T11989] ? __kmalloc_cache_noprof+0x189/0x320 [ 196.155072][T11989] v9fs_mount+0x67/0x5c0 [ 196.155098][T11989] ? selinux_capable+0x31/0x40 [ 196.155123][T11989] ? __pfx_v9fs_mount+0x10/0x10 [ 196.155157][T11989] legacy_get_tree+0x78/0xd0 [ 196.155178][T11989] vfs_get_tree+0x57/0x1d0 [ 196.155199][T11989] do_new_mount+0x207/0x5e0 [ 196.155228][T11989] ? security_capable+0x83/0x90 [ 196.155301][T11989] path_mount+0x4a4/0xb20 [ 196.155322][T11989] ? user_path_at+0x109/0x130 [ 196.155376][T11989] __se_sys_mount+0x28f/0x2e0 [ 196.155401][T11989] __x64_sys_mount+0x67/0x80 [ 196.155423][T11989] x64_sys_call+0x2b4d/0x2ff0 [ 196.155496][T11989] do_syscall_64+0xd2/0x200 [ 196.155525][T11989] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 196.155591][T11989] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 196.155618][T11989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.155639][T11989] RIP: 0033:0x7f39751beec9 [ 196.155655][T11989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.155671][T11989] RSP: 002b:00007f3973c1f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 196.155691][T11989] RAX: ffffffffffffffda RBX: 00007f3975415fa0 RCX: 00007f39751beec9 [ 196.155721][T11989] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 196.155734][T11989] RBP: 00007f3973c1f090 R08: 0000200000000300 R09: 0000000000000000 [ 196.155746][T11989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.155758][T11989] R13: 00007f3975416038 R14: 00007f3975415fa0 R15: 00007ffdb8e09808 [ 196.155776][T11989] [ 196.455267][T11993] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2933'. [ 196.464723][T11994] syzkaller1: entered promiscuous mode [ 196.470194][T11994] syzkaller1: entered allmulticast mode [ 196.520644][T12002] loop6: detected capacity change from 0 to 128 [ 196.604674][T12002] Process accounting resumed [ 196.853502][T12017] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 196.927758][T12017] netlink: 112 bytes leftover after parsing attributes in process `+}[@'. [ 196.961270][T12032] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12032 comm=syz.7.2948 [ 196.975090][T12032] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12032 comm=syz.7.2948 [ 197.056816][T12033] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2948'. [ 197.229485][T12037] loop7: detected capacity change from 0 to 512 [ 197.285101][T12037] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.2950: iget: bad i_size value: 38620345925642 [ 197.299612][T12037] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.2950: couldn't read orphan inode 15 (err -117) [ 197.342340][T12037] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.487230][T12043] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2950: bg 0: block 5: invalid block bitmap [ 197.501399][T12043] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1356 with error 28 [ 197.514004][T12043] EXT4-fs (loop7): This should not happen!! Data will be lost [ 197.514004][T12043] [ 197.523640][T12043] EXT4-fs (loop7): Total free blocks count 0 [ 197.529609][T12043] EXT4-fs (loop7): Free/Dirty block details [ 197.535626][T12043] EXT4-fs (loop7): free_blocks=0 [ 197.535642][T12043] EXT4-fs (loop7): dirty_blocks=1359 [ 197.535661][T12043] EXT4-fs (loop7): Block reservation details [ 197.535670][T12043] EXT4-fs (loop7): i_reserved_data_blocks=1359 [ 197.569692][T12049] loop6: detected capacity change from 0 to 1024 [ 197.569915][T12049] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.572815][T12049] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 197.628844][ T9608] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.640236][T12053] syzkaller1: entered promiscuous mode [ 197.648080][T12053] syzkaller1: entered allmulticast mode [ 197.659091][T12055] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 197.665609][T12055] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 197.673400][T12055] vhci_hcd vhci_hcd.0: Device attached [ 197.689394][T12056] vhci_hcd: connection closed [ 197.689561][ T5965] vhci_hcd: stop threads [ 197.698616][ T5965] vhci_hcd: release socket [ 197.698628][ T5965] vhci_hcd: disconnect device [ 197.723052][T12064] binfmt_misc: register: failed to install interpreter file ./file0 [ 197.742802][T12066] netlink: 'syz.2.2960': attribute type 1 has an invalid length. [ 198.438415][ T29] kauditd_printk_skb: 507 callbacks suppressed [ 198.438428][ T29] audit: type=1326 audit(1758733943.236:16048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12086 comm="syz.0.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51566beec9 code=0x7ffc0000 [ 198.477535][T12089] geneve2: entered promiscuous mode [ 198.482811][ T29] audit: type=1326 audit(1758733943.266:16049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12086 comm="syz.0.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51566beec9 code=0x7ffc0000 [ 198.482890][ T29] audit: type=1326 audit(1758733943.266:16050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12086 comm="syz.0.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f51566beec9 code=0x7ffc0000 [ 198.529973][ T29] audit: type=1326 audit(1758733943.266:16051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12086 comm="syz.0.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51566beec9 code=0x7ffc0000 [ 198.553589][ T29] audit: type=1326 audit(1758733943.266:16052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12086 comm="syz.0.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51566beec9 code=0x7ffc0000 [ 198.633488][ T29] audit: type=1326 audit(1758733943.356:16053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12091 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51566beec9 code=0x7ffc0000 [ 198.657174][ T29] audit: type=1326 audit(1758733943.356:16054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12091 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51566beec9 code=0x7ffc0000 [ 198.680807][ T29] audit: type=1326 audit(1758733943.356:16055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12091 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51566beec9 code=0x7ffc0000 [ 198.704572][ T29] audit: type=1326 audit(1758733943.366:16056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12091 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51566beec9 code=0x7ffc0000 [ 198.728375][ T29] audit: type=1326 audit(1758733943.366:16057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12091 comm="syz.0.2967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51566beec9 code=0x7ffc0000 [ 198.810904][T12095] loop7: detected capacity change from 0 to 128 [ 198.848036][T12105] binfmt_misc: register: failed to install interpreter file ./file0 [ 198.874618][T12108] netlink: 'syz.2.2972': attribute type 1 has an invalid length. [ 198.902394][T12095] Process accounting resumed [ 198.918383][T12116] binfmt_misc: register: failed to install interpreter file ./file0 [ 199.021929][T12131] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 199.028454][T12131] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 199.036223][T12131] vhci_hcd vhci_hcd.0: Device attached [ 199.052199][T12130] Process accounting resumed [ 199.060345][T12099] chnl_net:caif_netlink_parms(): no params data found [ 199.116993][T12099] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.124206][T12099] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.131615][T12099] bridge_slave_0: entered allmulticast mode [ 199.139669][T12099] bridge_slave_0: entered promiscuous mode [ 199.146713][T12099] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.153810][T12099] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.161478][T12099] bridge_slave_1: entered allmulticast mode [ 199.168057][T12099] bridge_slave_1: entered promiscuous mode [ 199.188584][T12099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.206062][T12099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.230623][T12099] team0: Port device team_slave_0 added [ 199.239335][T12099] team0: Port device team_slave_1 added [ 199.259175][T12099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.266163][T12099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.292090][T12099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.301862][ T3391] usb 14-1: SetAddress Request (2) to port 0 [ 199.303413][T12099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.308712][ T3391] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd [ 199.315562][T12099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.349182][T12099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.363949][T12144] FAULT_INJECTION: forcing a failure. [ 199.363949][T12144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.377134][T12144] CPU: 1 UID: 0 PID: 12144 Comm: syz.2.2981 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 199.377220][T12144] Tainted: [W]=WARN [ 199.377227][T12144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 199.377240][T12144] Call Trace: [ 199.377246][T12144] [ 199.377254][T12144] __dump_stack+0x1d/0x30 [ 199.377313][T12144] dump_stack_lvl+0xe8/0x140 [ 199.377333][T12144] dump_stack+0x15/0x1b [ 199.377369][T12144] should_fail_ex+0x265/0x280 [ 199.377390][T12144] should_fail+0xb/0x20 [ 199.377408][T12144] should_fail_usercopy+0x1a/0x20 [ 199.377499][T12144] _copy_from_user+0x1c/0xb0 [ 199.377592][T12144] memdup_user+0x5e/0xd0 [ 199.377613][T12144] autofs_dev_ioctl+0x167/0x6a0 [ 199.377731][T12144] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 199.377753][T12144] __se_sys_ioctl+0xce/0x140 [ 199.377770][T12144] __x64_sys_ioctl+0x43/0x50 [ 199.377797][T12144] x64_sys_call+0x1816/0x2ff0 [ 199.377820][T12144] do_syscall_64+0xd2/0x200 [ 199.377855][T12144] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 199.377877][T12144] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 199.377906][T12144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.377934][T12144] RIP: 0033:0x7f7cdc8ceec9 [ 199.377951][T12144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.378019][T12144] RSP: 002b:00007f7cdb337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.378040][T12144] RAX: ffffffffffffffda RBX: 00007f7cdcb25fa0 RCX: 00007f7cdc8ceec9 [ 199.378053][T12144] RDX: 0000200000000200 RSI: 00000000c018937e RDI: 0000000000000003 [ 199.378064][T12144] RBP: 00007f7cdb337090 R08: 0000000000000000 R09: 0000000000000000 [ 199.378075][T12144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.378091][T12144] R13: 00007f7cdcb26038 R14: 00007f7cdcb25fa0 R15: 00007ffcbcce5d28 [ 199.378172][T12144] [ 199.574376][T12099] hsr_slave_0: entered promiscuous mode [ 199.580541][T12099] hsr_slave_1: entered promiscuous mode [ 199.588092][T12099] debugfs: 'hsr0' already exists in 'hsr' [ 199.592797][T12146] netlink: 'syz.2.2983': attribute type 1 has an invalid length. [ 199.593866][T12099] Cannot create hsr debugfs directory [ 199.694195][T12099] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.761458][T12099] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.784611][T12159] binfmt_misc: register: failed to install interpreter file ./file0 [ 199.803729][T12099] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.814796][T12132] vhci_hcd: connection reset by peer [ 199.821330][ T5964] vhci_hcd: stop threads [ 199.825647][ T5964] vhci_hcd: release socket [ 199.830060][ T5964] vhci_hcd: disconnect device [ 199.871151][T12164] loop7: detected capacity change from 0 to 128 [ 199.883906][T12099] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.913747][T12166] syzkaller1: entered promiscuous mode [ 199.919324][T12166] syzkaller1: entered allmulticast mode [ 199.971261][T12164] Process accounting resumed [ 200.018724][T12172] loop7: detected capacity change from 0 to 128 [ 200.020464][T12099] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 200.035483][T12099] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 200.045141][T12171] Process accounting resumed [ 200.049964][T12099] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 200.061096][T12099] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 200.090918][T12175] vxcan1: entered allmulticast mode [ 200.119556][T12183] loop7: detected capacity change from 0 to 128 [ 200.135835][T12099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.170576][T12099] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.193150][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.200247][ T5957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.240895][T12188] binfmt_misc: register: failed to install interpreter file ./file0 [ 200.250562][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.257704][ T5957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.362739][T12197] loop7: detected capacity change from 0 to 128 [ 200.390032][T12193] loop6: detected capacity change from 0 to 8192 [ 200.395166][T12099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.442340][T12193] loop6: p1 p2 < > p3 p4 < p5 > [ 200.447379][T12193] loop6: partition table partially beyond EOD, truncated [ 200.467642][T12099] veth0_vlan: entered promiscuous mode [ 200.470569][T12195] Process accounting resumed [ 200.473363][T12193] loop6: p1 size 100663296 extends beyond EOD, truncated [ 200.487824][T12099] veth1_vlan: entered promiscuous mode [ 200.495165][T12193] loop6: p2 start 591104 is beyond EOD, truncated [ 200.501740][T12193] loop6: p3 start 33572980 is beyond EOD, truncated [ 200.509861][T12193] loop6: p5 size 100663296 extends beyond EOD, truncated [ 200.511604][T12207] syzkaller1: entered promiscuous mode [ 200.522698][T12207] syzkaller1: entered allmulticast mode [ 200.568730][T12099] veth0_macvtap: entered promiscuous mode [ 200.577842][T12099] veth1_macvtap: entered promiscuous mode [ 200.592468][T12099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.617182][T12099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.635999][ T5974] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.653493][ T5974] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.671687][ T5974] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.677054][T12224] binfmt_misc: register: failed to install interpreter file ./file0 [ 200.689114][ T5965] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.732770][T12233] FAULT_INJECTION: forcing a failure. [ 200.732770][T12233] name failslab, interval 1, probability 0, space 0, times 0 [ 200.745528][T12233] CPU: 0 UID: 0 PID: 12233 Comm: wޣ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 200.745629][T12233] Tainted: [W]=WARN [ 200.745636][T12233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 200.745669][T12233] Call Trace: [ 200.745677][T12233] [ 200.745692][T12233] __dump_stack+0x1d/0x30 [ 200.745781][T12233] dump_stack_lvl+0xe8/0x140 [ 200.745798][T12233] dump_stack+0x15/0x1b [ 200.745846][T12233] should_fail_ex+0x265/0x280 [ 200.745869][T12233] should_failslab+0x8c/0xb0 [ 200.745895][T12233] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 200.745985][T12233] ? strncmp+0x34/0x70 [ 200.746002][T12233] ? match_strdup+0x37/0x40 [ 200.746020][T12233] ? strcmp+0x22/0x50 [ 200.746039][T12233] kmemdup_nul+0x36/0xc0 [ 200.746093][T12233] match_strdup+0x37/0x40 [ 200.746108][T12233] p9_client_create+0x2c9/0xbc0 [ 200.746135][T12233] v9fs_session_init+0xf7/0xde0 [ 200.746158][T12233] ? avc_has_perm_noaudit+0x1b1/0x200 [ 200.746211][T12233] ? should_fail_ex+0xdb/0x280 [ 200.746230][T12233] ? v9fs_mount+0x51/0x5c0 [ 200.746252][T12233] ? should_failslab+0x8c/0xb0 [ 200.746315][T12233] ? __kmalloc_cache_noprof+0x189/0x320 [ 200.746344][T12233] v9fs_mount+0x67/0x5c0 [ 200.746368][T12233] ? selinux_capable+0x31/0x40 [ 200.746398][T12233] ? __pfx_v9fs_mount+0x10/0x10 [ 200.746419][T12233] legacy_get_tree+0x78/0xd0 [ 200.746442][T12233] vfs_get_tree+0x57/0x1d0 [ 200.746462][T12233] do_new_mount+0x207/0x5e0 [ 200.746481][T12233] ? security_capable+0x83/0x90 [ 200.746540][T12233] path_mount+0x4a4/0xb20 [ 200.746558][T12233] ? user_path_at+0x109/0x130 [ 200.746588][T12233] __se_sys_mount+0x28f/0x2e0 [ 200.746642][T12233] ? fput+0x8f/0xc0 [ 200.746666][T12233] __x64_sys_mount+0x67/0x80 [ 200.746693][T12233] x64_sys_call+0x2b4d/0x2ff0 [ 200.746715][T12233] do_syscall_64+0xd2/0x200 [ 200.746791][T12233] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 200.746817][T12233] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 200.746843][T12233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.746862][T12233] RIP: 0033:0x7fc1cbc1eec9 [ 200.746925][T12233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.746940][T12233] RSP: 002b:00007fc1ca687038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 200.746958][T12233] RAX: ffffffffffffffda RBX: 00007fc1cbe75fa0 RCX: 00007fc1cbc1eec9 [ 200.746969][T12233] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 200.747028][T12233] RBP: 00007fc1ca687090 R08: 0000200000000340 R09: 0000000000000000 [ 200.747041][T12233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.747054][T12233] R13: 00007fc1cbe76038 R14: 00007fc1cbe75fa0 R15: 00007ffd3e2dd688 [ 200.747073][T12233] [ 200.783453][T12231] loop6: detected capacity change from 0 to 128 [ 200.843629][T12238] netlink: 'syz.0.3013': attribute type 1 has an invalid length. [ 201.015178][T12243] loop7: detected capacity change from 0 to 1024 [ 201.027322][T12234] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 201.059286][T12234] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 201.059449][T12234] vhci_hcd vhci_hcd.0: Device attached [ 201.078216][T12240] vhci_hcd: connection closed [ 201.078434][ T5974] vhci_hcd: stop threads [ 201.087508][ T5974] vhci_hcd: release socket [ 201.091969][ T5974] vhci_hcd: disconnect device [ 201.101394][T12243] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.125122][T12243] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.3014: Allocating blocks 385-513 which overlap fs metadata [ 201.144074][T12243] EXT4-fs (loop7): pa ffff888107251230: logic 16, phys. 129, len 24 [ 201.152160][T12243] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 201.195438][T12231] Process accounting resumed [ 201.213174][T12258] syzkaller1: entered promiscuous mode [ 201.218694][T12258] syzkaller1: entered allmulticast mode [ 201.225865][ T9608] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.254551][T12267] binfmt_misc: register: failed to install interpreter file ./file0 [ 201.323870][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3024'. [ 201.348102][T12278] netlink: 'syz.6.3025': attribute type 1 has an invalid length. [ 201.350330][T12276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3024'. [ 201.376759][T12276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.398081][T12276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12276 comm=syz.0.3024 [ 201.440909][ T5961] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.456513][T12250] chnl_net:caif_netlink_parms(): no params data found [ 201.497826][ T5961] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.528744][ T5961] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.540280][T12250] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.547429][T12250] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.557553][T12250] bridge_slave_0: entered allmulticast mode [ 201.564257][T12250] bridge_slave_0: entered promiscuous mode [ 201.571221][T12250] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.578399][T12250] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.588720][T12250] bridge_slave_1: entered allmulticast mode [ 201.596057][T12250] bridge_slave_1: entered promiscuous mode [ 201.612506][ T5961] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.637070][T12305] 9pnet: Could not find request transport: t [ 201.655585][T12250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.667663][T12250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.707629][T12250] team0: Port device team_slave_0 added [ 201.710211][T12312] netlink: 'syz.1.3037': attribute type 1 has an invalid length. [ 201.727423][T12250] team0: Port device team_slave_1 added [ 201.753746][ T5961] bridge_slave_1: left allmulticast mode [ 201.759415][ T5961] bridge_slave_1: left promiscuous mode [ 201.765181][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.773944][ T5961] bridge_slave_0: left allmulticast mode [ 201.779601][ T5961] bridge_slave_0: left promiscuous mode [ 201.785464][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.836401][ T5961] bridge0 (unregistering): left allmulticast mode [ 201.944333][ T5961] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.956250][ T5961] bond_slave_0: left promiscuous mode [ 201.979077][ T5961] $H (unregistering): (slave 4@0): Releasing backup interface [ 201.987828][ T5961] @0: left promiscuous mode [ 201.995403][ T5961] $H (unregistering): (slave dummy0): Releasing backup interface [ 202.003762][ T5961] dummy0: left promiscuous mode [ 202.009465][ T5961] $H (unregistering): Released all slaves [ 202.018314][ T5961] bond1 (unregistering): Released all slaves [ 202.046196][T12250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.053181][T12250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.079195][T12250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.091096][T12250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.098129][T12250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.124119][T12250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.140990][ T5961] tipc: Disabling bearer [ 202.146353][ T5961] tipc: Left network mode [ 202.160906][T12250] hsr_slave_0: entered promiscuous mode [ 202.167115][T12250] hsr_slave_1: entered promiscuous mode [ 202.173076][T12250] debugfs: 'hsr0' already exists in 'hsr' [ 202.178792][T12250] Cannot create hsr debugfs directory [ 202.221722][ T5961] hsr_slave_1: left promiscuous mode [ 202.227689][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.235110][ T5961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.245875][ T5961] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 202.252968][ T5961] batman_adv: batadv0: Removing interface: veth1_vlan [ 202.264991][ T5961] veth1_macvtap: left promiscuous mode [ 202.278702][ T5961] veth0_macvtap: left promiscuous mode [ 202.284399][ T5961] veth1_vlan: left promiscuous mode [ 202.289787][ T5961] veth0_vlan: left promiscuous mode [ 202.371489][ T5961] team0 (unregistering): Port device team_slave_1 removed [ 202.399269][ T5961] team0 (unregistering): Port device C removed [ 202.407700][ T5958] smc: removing ib device syz! [ 202.576755][T12345] netlink: 'syz.7.3048': attribute type 1 has an invalid length. [ 202.677865][T12351] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3051'. [ 202.829182][T12250] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 202.838810][T12250] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 202.847797][T12250] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 202.857231][T12250] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 202.890241][T12370] netlink: 'syz.7.3059': attribute type 1 has an invalid length. [ 202.898172][T12370] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3059'. [ 202.919586][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3059'. [ 203.066169][T12376] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3060'. [ 203.109080][T12250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.127078][T12250] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.164129][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.171204][ T5964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.193980][T12382] netlink: 'syz.1.3062': attribute type 10 has an invalid length. [ 203.205212][T12382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.214889][T12382] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 203.226061][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.233132][ T5964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.348613][T12250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.466559][T12417] erspan1: entered promiscuous mode [ 203.502577][T12250] veth0_vlan: entered promiscuous mode [ 203.510650][T12420] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3071'. [ 203.520273][T12250] veth1_vlan: entered promiscuous mode [ 203.539080][T12250] veth0_macvtap: entered promiscuous mode [ 203.559696][T12250] veth1_macvtap: entered promiscuous mode [ 203.587317][T12250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.740912][T12250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.751671][T12435] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3077'. [ 203.778267][ T5958] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.788343][ T5958] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.799565][ T5958] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.809386][ T5958] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.927951][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 203.928020][ T29] audit: type=1326 audit(1758733948.706:16451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311758eec9 code=0x7ffc0000 [ 203.957992][ T29] audit: type=1326 audit(1758733948.706:16452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f311758eec9 code=0x7ffc0000 [ 203.981703][ T29] audit: type=1326 audit(1758733948.706:16453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311758eec9 code=0x7ffc0000 [ 204.005504][ T29] audit: type=1326 audit(1758733948.706:16454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f311758eec9 code=0x7ffc0000 [ 204.029068][ T29] audit: type=1326 audit(1758733948.706:16455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311758eec9 code=0x7ffc0000 [ 204.052681][ T29] audit: type=1326 audit(1758733948.706:16456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f311758eec9 code=0x7ffc0000 [ 204.076408][ T29] audit: type=1326 audit(1758733948.706:16457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311758eec9 code=0x7ffc0000 [ 204.099953][ T29] audit: type=1326 audit(1758733948.706:16458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f311758eec9 code=0x7ffc0000 [ 204.123568][ T29] audit: type=1326 audit(1758733948.706:16459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311758eec9 code=0x7ffc0000 [ 204.147265][ T29] audit: type=1326 audit(1758733948.706:16460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.3081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311758eec9 code=0x7ffc0000 [ 204.268083][T12456] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 204.274661][T12456] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 204.282496][T12456] vhci_hcd vhci_hcd.0: Device attached [ 204.290142][T12458] vhci_hcd: connection closed [ 204.290407][ T5958] vhci_hcd: stop threads [ 204.299435][ T5958] vhci_hcd: release socket [ 204.303892][ T5958] vhci_hcd: disconnect device [ 204.371907][ T3391] usb 14-1: device descriptor read/8, error -110 [ 204.483155][ T3391] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd [ 204.502991][ T3391] usb 14-1: enqueue for inactive port 0 [ 204.511760][ T3391] usb 14-1: enqueue for inactive port 0 [ 204.523853][T12473] netlink: 'syz.2.3090': attribute type 1 has an invalid length. [ 204.526354][ T3391] usb 14-1: enqueue for inactive port 0 [ 204.611270][T12480] netlink: 'syz.6.3093': attribute type 1 has an invalid length. [ 204.983867][T12512] netlink: 'syz.1.3104': attribute type 1 has an invalid length. [ 205.673372][ T3391] usb usb14-port1: attempt power cycle [ 205.865339][T12545] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.3118' sets config #0 [ 205.984528][T12553] netlink: 'syz.7.3121': attribute type 1 has an invalid length. [ 206.034182][T12566] FAULT_INJECTION: forcing a failure. [ 206.034182][T12566] name failslab, interval 1, probability 0, space 0, times 0 [ 206.040805][T12568] syzkaller1: entered promiscuous mode [ 206.046959][T12566] CPU: 1 UID: 0 PID: 12566 Comm: syz.2.3127 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 206.047066][T12566] Tainted: [W]=WARN [ 206.047073][T12566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 206.047085][T12566] Call Trace: [ 206.047092][T12566] [ 206.047100][T12566] __dump_stack+0x1d/0x30 [ 206.047121][T12566] dump_stack_lvl+0xe8/0x140 [ 206.047141][T12566] dump_stack+0x15/0x1b [ 206.047220][T12566] should_fail_ex+0x265/0x280 [ 206.047318][T12566] should_failslab+0x8c/0xb0 [ 206.047427][T12566] kmem_cache_alloc_noprof+0x50/0x310 [ 206.047450][T12566] ? getname_flags+0x80/0x3b0 [ 206.047476][T12566] getname_flags+0x80/0x3b0 [ 206.047546][T12566] user_path_at+0x28/0x130 [ 206.047576][T12566] __se_sys_mount+0x25b/0x2e0 [ 206.047598][T12566] ? fput+0x8f/0xc0 [ 206.047644][T12566] __x64_sys_mount+0x67/0x80 [ 206.047666][T12566] x64_sys_call+0x2b4d/0x2ff0 [ 206.047687][T12566] do_syscall_64+0xd2/0x200 [ 206.047724][T12566] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 206.047748][T12566] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 206.047775][T12566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.047841][T12566] RIP: 0033:0x7f311758eec9 [ 206.047916][T12566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.047933][T12566] RSP: 002b:00007f3115ff7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 206.047952][T12566] RAX: ffffffffffffffda RBX: 00007f31177e5fa0 RCX: 00007f311758eec9 [ 206.047965][T12566] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 206.048035][T12566] RBP: 00007f3115ff7090 R08: 0000200000000600 R09: 0000000000000000 [ 206.048048][T12566] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 206.048060][T12566] R13: 00007f31177e6038 R14: 00007f31177e5fa0 R15: 00007ffe22e4d408 [ 206.048080][T12566] [ 206.241457][T12568] syzkaller1: entered allmulticast mode [ 206.417840][T12592] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3135'. [ 206.753578][T12606] syzkaller1: entered promiscuous mode [ 206.759157][T12606] syzkaller1: entered allmulticast mode [ 206.901941][T12612] netlink: 'syz.1.3142': attribute type 29 has an invalid length. [ 206.946761][T12621] FAULT_INJECTION: forcing a failure. [ 206.946761][T12621] name failslab, interval 1, probability 0, space 0, times 0 [ 206.959441][T12621] CPU: 1 UID: 0 PID: 12621 Comm: wޣ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 206.959475][T12621] Tainted: [W]=WARN [ 206.959484][T12621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 206.959577][T12621] Call Trace: [ 206.959584][T12621] [ 206.959592][T12621] __dump_stack+0x1d/0x30 [ 206.959615][T12621] dump_stack_lvl+0xe8/0x140 [ 206.959635][T12621] dump_stack+0x15/0x1b [ 206.959652][T12621] should_fail_ex+0x265/0x280 [ 206.959691][T12621] ? find_get_context+0x8f/0x540 [ 206.959733][T12621] should_failslab+0x8c/0xb0 [ 206.959755][T12621] __kmalloc_cache_noprof+0x4c/0x320 [ 206.959781][T12621] find_get_context+0x8f/0x540 [ 206.959819][T12621] __se_sys_perf_event_open+0x8a7/0x11c0 [ 206.959892][T12621] __x64_sys_perf_event_open+0x67/0x80 [ 206.959917][T12621] x64_sys_call+0x7bd/0x2ff0 [ 206.959990][T12621] do_syscall_64+0xd2/0x200 [ 206.960069][T12621] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 206.960089][T12621] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 206.960134][T12621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.960154][T12621] RIP: 0033:0x7fc1cbc1eec9 [ 206.960169][T12621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.960185][T12621] RSP: 002b:00007fc1ca687038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 206.960203][T12621] RAX: ffffffffffffffda RBX: 00007fc1cbe75fa0 RCX: 00007fc1cbc1eec9 [ 206.960264][T12621] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000100 [ 206.960277][T12621] RBP: 00007fc1ca687090 R08: 0000000000000000 R09: 0000000000000000 [ 206.960290][T12621] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 206.960356][T12621] R13: 00007fc1cbe76038 R14: 00007fc1cbe75fa0 R15: 00007ffd3e2dd688 [ 206.960373][T12621] [ 207.246774][T12637] netlink: 'syz.1.3151': attribute type 1 has an invalid length. [ 207.276681][T12639] syzkaller1: entered promiscuous mode [ 207.282229][T12639] syzkaller1: entered allmulticast mode [ 207.515648][T12657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3158'. [ 207.519404][T12658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3158'. [ 207.561966][ T3391] usb usb14-port1: unable to enumerate USB device [ 207.608852][T12665] FAULT_INJECTION: forcing a failure. [ 207.608852][T12665] name failslab, interval 1, probability 0, space 0, times 0 [ 207.621593][T12665] CPU: 1 UID: 0 PID: 12665 Comm: syz.6.3161 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 207.621685][T12665] Tainted: [W]=WARN [ 207.621693][T12665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 207.621705][T12665] Call Trace: [ 207.621713][T12665] [ 207.621721][T12665] __dump_stack+0x1d/0x30 [ 207.621744][T12665] dump_stack_lvl+0xe8/0x140 [ 207.621767][T12665] dump_stack+0x15/0x1b [ 207.621864][T12665] should_fail_ex+0x265/0x280 [ 207.621891][T12665] should_failslab+0x8c/0xb0 [ 207.621920][T12665] __kmalloc_node_noprof+0xa9/0x410 [ 207.621943][T12665] ? crypto_create_tfm_node+0x5c/0x250 [ 207.621965][T12665] crypto_create_tfm_node+0x5c/0x250 [ 207.621996][T12665] crypto_init_lskcipher_ops_sg+0x3f/0xa0 [ 207.622016][T12665] crypto_skcipher_init_tfm+0xb6/0x120 [ 207.622039][T12665] crypto_create_tfm_node+0x108/0x250 [ 207.622068][T12665] crypto_spawn_tfm2+0x43/0x80 [ 207.622094][T12665] crypto_authenc_init_tfm+0x50/0x100 [ 207.622155][T12665] ? __pfx_crypto_authenc_init_tfm+0x10/0x10 [ 207.622176][T12665] crypto_aead_init_tfm+0x9d/0xc0 [ 207.622194][T12665] crypto_create_tfm_node+0x108/0x250 [ 207.622208][T12665] crypto_spawn_tfm2+0x43/0x80 [ 207.622289][T12665] aead_init_geniv+0xe7/0x140 [ 207.622313][T12665] ? __pfx_aead_init_geniv+0x10/0x10 [ 207.622371][T12665] crypto_aead_init_tfm+0x9d/0xc0 [ 207.622419][T12665] crypto_create_tfm_node+0x108/0x250 [ 207.622470][T12665] crypto_alloc_tfm_node+0xdc/0x2b0 [ 207.622482][T12665] ? trace_event_raw_event_bpf_trace_printk+0xe6/0x160 [ 207.622502][T12665] crypto_alloc_aead+0x2d/0x40 [ 207.622596][T12665] esp_init_state+0x3f3/0xa00 [ 207.622622][T12665] ? bpf_trace_run3+0xfd/0x1d0 [ 207.622643][T12665] ? htab_lru_percpu_map_lookup_percpu_elem+0x75/0xf0 [ 207.622745][T12665] __xfrm_init_state+0x740/0xbb0 [ 207.622761][T12665] xfrm_init_state+0x1a/0x80 [ 207.622774][T12665] pfkey_add+0xebc/0x12e0 [ 207.622855][T12665] pfkey_sendmsg+0x715/0x900 [ 207.622876][T12665] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 207.622892][T12665] __sock_sendmsg+0x145/0x180 [ 207.622914][T12665] ____sys_sendmsg+0x31e/0x4e0 [ 207.622955][T12665] ___sys_sendmsg+0x17b/0x1d0 [ 207.622978][T12665] __x64_sys_sendmsg+0xd4/0x160 [ 207.622995][T12665] x64_sys_call+0x191e/0x2ff0 [ 207.623087][T12665] do_syscall_64+0xd2/0x200 [ 207.623104][T12665] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 207.623156][T12665] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 207.623172][T12665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.623211][T12665] RIP: 0033:0x7fe650e5eec9 [ 207.623221][T12665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.623280][T12665] RSP: 002b:00007fe64f8c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.623292][T12665] RAX: ffffffffffffffda RBX: 00007fe6510b5fa0 RCX: 00007fe650e5eec9 [ 207.623305][T12665] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 207.623312][T12665] RBP: 00007fe64f8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 207.623319][T12665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.623326][T12665] R13: 00007fe6510b6038 R14: 00007fe6510b5fa0 R15: 00007ffef182f078 [ 207.623338][T12665] [ 207.974827][T12671] atomic_op ffff888127354d28 conn xmit_atomic 0000000000000000 [ 208.028660][T12673] loop6: detected capacity change from 0 to 8192 [ 208.049665][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3168'. [ 208.070649][T12669] Process accounting resumed [ 208.082447][T12673] loop6: p1 p2 < > p3 p4 < p5 > [ 208.087419][T12673] loop6: partition table partially beyond EOD, truncated [ 208.102885][T12673] loop6: p1 size 100663296 extends beyond EOD, truncated [ 208.111239][T12673] loop6: p2 start 591104 is beyond EOD, truncated [ 208.117714][T12673] loop6: p3 start 33572980 is beyond EOD, truncated [ 208.142106][T12673] loop6: p5 size 100663296 extends beyond EOD, truncated [ 208.247207][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3177'. [ 208.295083][T12699] bridge_slave_1: left allmulticast mode [ 208.300762][T12699] bridge_slave_1: left promiscuous mode [ 208.306489][T12699] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.337890][T12699] bridge_slave_0: left allmulticast mode [ 208.343597][T12699] bridge_slave_0: left promiscuous mode [ 208.349291][T12699] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.386646][T12708] loop6: detected capacity change from 0 to 764 [ 208.393081][T12708] iso9660: Unknown parameter '00000000000000000000001[t' [ 208.485006][T12712] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3182'. [ 208.503715][T12710] netlink: 'syz.6.3181': attribute type 1 has an invalid length. [ 208.516662][T12702] Process accounting resumed [ 208.528561][T12716] netlink: 'syz.2.3184': attribute type 1 has an invalid length. [ 208.605378][T12725] tipc: Trying to set illegal importance in message [ 208.674166][T12731] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3190'. [ 208.696718][T12733] loop6: detected capacity change from 0 to 512 [ 208.715127][T12733] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.729215][T12733] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.815341][T12744] FAULT_INJECTION: forcing a failure. [ 208.815341][T12744] name failslab, interval 1, probability 0, space 0, times 0 [ 208.828014][T12744] CPU: 1 UID: 0 PID: 12744 Comm: syz.1.3193 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 208.828033][T12744] Tainted: [W]=WARN [ 208.828037][T12744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 208.828045][T12744] Call Trace: [ 208.828049][T12744] [ 208.828054][T12744] __dump_stack+0x1d/0x30 [ 208.828068][T12744] dump_stack_lvl+0xe8/0x140 [ 208.828095][T12744] dump_stack+0x15/0x1b [ 208.828104][T12744] should_fail_ex+0x265/0x280 [ 208.828118][T12744] ? rdma_create_trans+0x37f/0x9e0 [ 208.828130][T12744] should_failslab+0x8c/0xb0 [ 208.828209][T12744] __kmalloc_cache_noprof+0x4c/0x320 [ 208.828255][T12744] rdma_create_trans+0x37f/0x9e0 [ 208.828273][T12744] p9_client_create+0x60b/0xbc0 [ 208.828291][T12744] v9fs_session_init+0xf7/0xde0 [ 208.828379][T12744] ? avc_has_perm_noaudit+0x1b1/0x200 [ 208.828393][T12744] ? should_fail_ex+0xdb/0x280 [ 208.828477][T12744] ? v9fs_mount+0x51/0x5c0 [ 208.828530][T12744] ? should_failslab+0x8c/0xb0 [ 208.828551][T12744] ? __kmalloc_cache_noprof+0x189/0x320 [ 208.828580][T12744] v9fs_mount+0x67/0x5c0 [ 208.828602][T12744] ? selinux_capable+0x31/0x40 [ 208.828681][T12744] ? __pfx_v9fs_mount+0x10/0x10 [ 208.828706][T12744] legacy_get_tree+0x78/0xd0 [ 208.828726][T12744] vfs_get_tree+0x57/0x1d0 [ 208.828779][T12744] do_new_mount+0x207/0x5e0 [ 208.828798][T12744] ? security_capable+0x83/0x90 [ 208.828819][T12744] path_mount+0x4a4/0xb20 [ 208.828857][T12744] ? user_path_at+0x109/0x130 [ 208.828883][T12744] __se_sys_mount+0x28f/0x2e0 [ 208.828916][T12744] ? fput+0x8f/0xc0 [ 208.829003][T12744] __x64_sys_mount+0x67/0x80 [ 208.829024][T12744] x64_sys_call+0x2b4d/0x2ff0 [ 208.829047][T12744] do_syscall_64+0xd2/0x200 [ 208.829161][T12744] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 208.829192][T12744] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 208.829216][T12744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.829238][T12744] RIP: 0033:0x7f39751beec9 [ 208.829252][T12744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.829339][T12744] RSP: 002b:00007f3973c1f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 208.829357][T12744] RAX: ffffffffffffffda RBX: 00007f3975415fa0 RCX: 00007f39751beec9 [ 208.829420][T12744] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 00002000000013c0 [ 208.829431][T12744] RBP: 00007f3973c1f090 R08: 0000200000000080 R09: 0000000000000000 [ 208.829442][T12744] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 208.829455][T12744] R13: 00007f3975416038 R14: 00007f3975415fa0 R15: 00007ffdb8e09808 [ 208.829475][T12744] [ 209.127106][ T7186] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.138032][T12748] loop7: detected capacity change from 0 to 128 [ 209.147564][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 209.147578][ T29] audit: type=1326 audit(1758733953.926:16761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.7.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2876eec9 code=0x7ffc0000 [ 209.177469][ T29] audit: type=1326 audit(1758733953.926:16762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.7.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2876eec9 code=0x7ffc0000 [ 209.201111][ T29] audit: type=1326 audit(1758733953.926:16763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.7.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf2876eec9 code=0x7ffc0000 [ 209.224928][ T29] audit: type=1326 audit(1758733953.926:16764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.7.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2876eec9 code=0x7ffc0000 [ 209.248617][ T29] audit: type=1326 audit(1758733953.926:16765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.7.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2876eec9 code=0x7ffc0000 [ 209.272448][ T29] audit: type=1326 audit(1758733953.936:16766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.7.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf2876eec9 code=0x7ffc0000 [ 209.296030][ T29] audit: type=1326 audit(1758733953.936:16767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.7.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2876eec9 code=0x7ffc0000 [ 209.319628][ T29] audit: type=1326 audit(1758733953.936:16768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.7.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7faf2876eec9 code=0x7ffc0000 [ 209.343457][ T29] audit: type=1326 audit(1758733953.936:16769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.7.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2876eec9 code=0x7ffc0000 [ 209.367109][ T29] audit: type=1326 audit(1758733953.936:16770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.7.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7faf2876eec9 code=0x7ffc0000 [ 209.433657][T12764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3201'. [ 209.460484][T12747] Process accounting resumed [ 209.560282][T12773] 9pnet_fd: Insufficient options for proto=fd [ 209.693974][T12785] can: request_module (can-proto-0) failed. [ 209.700658][T12785] 9pnet_fd: Insufficient options for proto=fd [ 209.708280][T12783] vhci_hcd: invalid port number 96 [ 209.713474][T12783] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 209.749673][T12788] pimreg: entered allmulticast mode [ 209.757561][T12788] pimreg: left allmulticast mode [ 209.773974][T12790] syzkaller1: entered promiscuous mode [ 209.779491][T12790] syzkaller1: entered allmulticast mode [ 209.826426][T12794] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3213'. [ 209.864806][T12798] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 209.871422][T12798] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 209.879188][T12798] vhci_hcd vhci_hcd.0: Device attached [ 209.889013][T12799] vhci_hcd: connection closed [ 209.889110][ T5957] vhci_hcd: stop threads [ 209.898097][ T5957] vhci_hcd: release socket [ 209.902524][ T5957] vhci_hcd: disconnect device [ 209.999898][T12796] Process accounting resumed [ 210.135559][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3219'. [ 210.333880][T12816] loop6: detected capacity change from 0 to 512 [ 210.340482][T12816] EXT4-fs: Ignoring removed oldalloc option [ 210.346503][T12816] EXT4-fs: inline encryption not supported [ 210.352447][T12816] EXT4-fs: Ignoring removed mblk_io_submit option [ 210.362652][T12816] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 210.372394][T12820] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3225'. [ 210.384322][T12816] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3223: bg 0: block 64: padding at end of block bitmap is not set [ 210.404624][T12816] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.3223: Failed to acquire dquot type 0 [ 210.416508][T12816] EXT4-fs (loop6): 1 truncate cleaned up [ 210.423230][T12816] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.450428][T12827] netlink: 'syz.7.3226': attribute type 1 has an invalid length. [ 210.463008][T12816] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.541166][T12829] Process accounting resumed [ 210.578465][T12850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3234'. [ 210.646347][T12858] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3238'. [ 210.685752][T12863] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 210.692290][T12863] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 210.700137][T12863] vhci_hcd vhci_hcd.0: Device attached [ 210.711161][T12864] vhci_hcd: connection closed [ 210.711445][ T5964] vhci_hcd: stop threads [ 210.717791][T12867] loop6: detected capacity change from 0 to 1024 [ 210.720558][ T5964] vhci_hcd: release socket [ 210.731327][ T5964] vhci_hcd: disconnect device [ 210.773996][T12867] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.836862][ T7186] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.886267][T12871] netlink: 'syz.6.3241': attribute type 1 has an invalid length. [ 210.993427][T12876] loop6: detected capacity change from 0 to 128 [ 211.108385][T12876] Process accounting resumed [ 211.211530][T12880] loop6: detected capacity change from 0 to 8192 [ 211.254397][T12880] loop6: p1 p2 < > p3 p4 < p5 > [ 211.259371][T12880] loop6: partition table partially beyond EOD, truncated [ 211.273361][T12885] FAULT_INJECTION: forcing a failure. [ 211.273361][T12885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.275800][T12880] loop6: p1 size 100663296 extends beyond EOD, truncated [ 211.286559][T12885] CPU: 1 UID: 0 PID: 12885 Comm: syz.7.3247 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 211.286615][T12885] Tainted: [W]=WARN [ 211.286622][T12885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 211.286643][T12885] Call Trace: [ 211.286651][T12885] [ 211.286660][T12885] __dump_stack+0x1d/0x30 [ 211.286713][T12885] dump_stack_lvl+0xe8/0x140 [ 211.286733][T12885] dump_stack+0x15/0x1b [ 211.286749][T12885] should_fail_ex+0x265/0x280 [ 211.286773][T12885] should_fail+0xb/0x20 [ 211.286830][T12885] should_fail_usercopy+0x1a/0x20 [ 211.286874][T12885] _copy_to_user+0x20/0xa0 [ 211.286937][T12885] simple_read_from_buffer+0xb5/0x130 [ 211.286959][T12885] proc_fail_nth_read+0x10e/0x150 [ 211.286987][T12885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.287011][T12885] vfs_read+0x1a5/0x770 [ 211.287033][T12885] ? __rcu_read_unlock+0x4f/0x70 [ 211.287109][T12885] ? __fget_files+0x184/0x1c0 [ 211.287137][T12885] ksys_read+0xda/0x1a0 [ 211.287189][T12885] __x64_sys_read+0x40/0x50 [ 211.287210][T12885] x64_sys_call+0x27bc/0x2ff0 [ 211.287231][T12885] do_syscall_64+0xd2/0x200 [ 211.287262][T12885] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 211.287352][T12885] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 211.287380][T12885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.287400][T12885] RIP: 0033:0x7faf2876d8dc [ 211.287416][T12885] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 211.287434][T12885] RSP: 002b:00007faf271d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 211.287526][T12885] RAX: ffffffffffffffda RBX: 00007faf289c5fa0 RCX: 00007faf2876d8dc [ 211.287539][T12885] RDX: 000000000000000f RSI: 00007faf271d70a0 RDI: 0000000000000007 [ 211.287552][T12885] RBP: 00007faf271d7090 R08: 0000000000000000 R09: 0000000000000000 [ 211.287564][T12885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.287576][T12885] R13: 00007faf289c6038 R14: 00007faf289c5fa0 R15: 00007ffd6c1e0f98 [ 211.287595][T12885] [ 211.499892][T12880] loop6: p2 start 591104 is beyond EOD, truncated [ 211.503358][T12888] FAULT_INJECTION: forcing a failure. [ 211.503358][T12888] name failslab, interval 1, probability 0, space 0, times 0 [ 211.506389][T12880] loop6: p3 start 33572980 is beyond EOD, truncated [ 211.519023][T12888] CPU: 1 UID: 0 PID: 12888 Comm: syz.7.3248 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 211.519131][T12888] Tainted: [W]=WARN [ 211.519139][T12888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 211.519151][T12888] Call Trace: [ 211.519158][T12888] [ 211.519167][T12888] __dump_stack+0x1d/0x30 [ 211.519254][T12888] dump_stack_lvl+0xe8/0x140 [ 211.519274][T12888] dump_stack+0x15/0x1b [ 211.519290][T12888] should_fail_ex+0x265/0x280 [ 211.519370][T12888] should_failslab+0x8c/0xb0 [ 211.519395][T12888] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 211.519425][T12888] ? __request_module+0x1df/0x3e0 [ 211.519478][T12888] kstrdup+0x3e/0xd0 [ 211.519503][T12888] __request_module+0x1df/0x3e0 [ 211.519524][T12888] ? nf_tables_abort+0x4277/0x4380 [ 211.519741][T12888] nf_tables_abort+0x4291/0x4380 [ 211.519818][T12888] ? nf_tables_newset+0x14c3/0x14e0 [ 211.519864][T12888] nfnetlink_rcv+0x1078/0x1690 [ 211.519913][T12888] netlink_unicast+0x5c0/0x690 [ 211.519938][T12888] netlink_sendmsg+0x58b/0x6b0 [ 211.520030][T12888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.520056][T12888] __sock_sendmsg+0x145/0x180 [ 211.520087][T12888] ____sys_sendmsg+0x31e/0x4e0 [ 211.520115][T12888] ___sys_sendmsg+0x17b/0x1d0 [ 211.520176][T12888] __x64_sys_sendmsg+0xd4/0x160 [ 211.520205][T12888] x64_sys_call+0x191e/0x2ff0 [ 211.520271][T12888] do_syscall_64+0xd2/0x200 [ 211.520301][T12888] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 211.520325][T12888] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 211.520389][T12888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.520411][T12888] RIP: 0033:0x7faf2876eec9 [ 211.520427][T12888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.520445][T12888] RSP: 002b:00007faf271d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.520522][T12888] RAX: ffffffffffffffda RBX: 00007faf289c5fa0 RCX: 00007faf2876eec9 [ 211.520566][T12888] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 211.520579][T12888] RBP: 00007faf271d7090 R08: 0000000000000000 R09: 0000000000000000 [ 211.520592][T12888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.520604][T12888] R13: 00007faf289c6038 R14: 00007faf289c5fa0 R15: 00007ffd6c1e0f98 [ 211.520623][T12888] [ 211.757977][T12880] loop6: p5 size 100663296 extends beyond EOD, truncated [ 211.812840][T12902] syzkaller1: entered promiscuous mode [ 211.818343][T12902] syzkaller1: entered allmulticast mode [ 212.230119][T12925] loop6: detected capacity change from 0 to 128 [ 212.254019][T12925] vfat: Unknown parameter '" 9)&7ީV1Kg |sdS:ӳW@q'h{Հ4E> #Nr Rb' [ 212.363217][T12929] loop6: detected capacity change from 0 to 128 [ 212.414552][T12929] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 212.449320][T12929] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.521273][T12932] netlink: 'syz.2.3262': attribute type 10 has an invalid length. [ 212.532419][T12925] FAULT_INJECTION: forcing a failure. [ 212.532419][T12925] name failslab, interval 1, probability 0, space 0, times 0 [ 212.545140][T12925] CPU: 0 UID: 0 PID: 12925 Comm: syz.6.3261 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 212.545208][T12925] Tainted: [W]=WARN [ 212.545215][T12925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.545229][T12925] Call Trace: [ 212.545236][T12925] [ 212.545245][T12925] __dump_stack+0x1d/0x30 [ 212.545267][T12925] dump_stack_lvl+0xe8/0x140 [ 212.545287][T12925] dump_stack+0x15/0x1b [ 212.545346][T12925] should_fail_ex+0x265/0x280 [ 212.545432][T12925] should_failslab+0x8c/0xb0 [ 212.545458][T12925] __kmalloc_noprof+0xa5/0x3e0 [ 212.545503][T12925] ? ext4_find_extent+0x16b/0x7a0 [ 212.545529][T12925] ext4_find_extent+0x16b/0x7a0 [ 212.545556][T12925] ? ext4_ext_map_blocks+0xda/0x38a0 [ 212.545577][T12925] ext4_ext_map_blocks+0x11f/0x38a0 [ 212.545624][T12925] ? __es_insert_extent+0xc27/0xee0 [ 212.545658][T12925] ? _raw_write_unlock+0xd/0x30 [ 212.545683][T12925] ? ext4_es_insert_extent+0x1aec/0x1c10 [ 212.545713][T12925] ? ext4_es_lookup_extent+0x352/0x4f0 [ 212.545810][T12925] ext4_map_blocks+0x5ee/0xd00 [ 212.545846][T12925] _ext4_get_block+0x10a/0x350 [ 212.545874][T12925] ext4_get_block_unwritten+0x2a/0xb0 [ 212.545936][T12925] ext4_block_write_begin+0x5e5/0xc00 [ 212.546043][T12925] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 212.546124][T12925] ? folio_mapping+0xb9/0x120 [ 212.546147][T12925] ext4_write_begin+0x647/0xeb0 [ 212.546173][T12925] ext4_da_write_begin+0x1fb/0x6e0 [ 212.546220][T12925] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 212.546245][T12925] generic_perform_write+0x184/0x490 [ 212.546269][T12925] ext4_buffered_write_iter+0x1ee/0x3c0 [ 212.546296][T12925] ? ext4_file_write_iter+0xfe/0xf00 [ 212.546343][T12925] ext4_file_write_iter+0x383/0xf00 [ 212.546369][T12925] ? 0xffffffff81000000 [ 212.546381][T12925] ? __rcu_read_unlock+0x4f/0x70 [ 212.546468][T12925] ? avc_policy_seqno+0x15/0x30 [ 212.546488][T12925] ? selinux_file_permission+0x1e4/0x320 [ 212.546556][T12925] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 212.546587][T12925] vfs_write+0x527/0x960 [ 212.546616][T12925] __x64_sys_pwrite64+0xfd/0x150 [ 212.546639][T12925] x64_sys_call+0xc4d/0x2ff0 [ 212.546659][T12925] do_syscall_64+0xd2/0x200 [ 212.546720][T12925] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 212.546745][T12925] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 212.546771][T12925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.546847][T12925] RIP: 0033:0x7fe650e5eec9 [ 212.546863][T12925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.546878][T12925] RSP: 002b:00007fe64f8c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 212.546896][T12925] RAX: ffffffffffffffda RBX: 00007fe6510b5fa0 RCX: 00007fe650e5eec9 [ 212.546910][T12925] RDX: 00000000ffffff07 RSI: 0000200000000140 RDI: 0000000000000006 [ 212.546923][T12925] RBP: 00007fe64f8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 212.546947][T12925] R10: 0000000008000c61 R11: 0000000000000246 R12: 0000000000000002 [ 212.546957][T12925] R13: 00007fe6510b6038 R14: 00007fe6510b5fa0 R15: 00007ffef182f078 [ 212.546975][T12925] [ 212.550167][T12932] team0: Port device dummy0 added [ 212.863723][ T7186] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 212.955788][T12945] FAULT_INJECTION: forcing a failure. [ 212.955788][T12945] name failslab, interval 1, probability 0, space 0, times 0 [ 212.968502][T12945] CPU: 0 UID: 0 PID: 12945 Comm: syz.2.3266 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 212.968535][T12945] Tainted: [W]=WARN [ 212.968542][T12945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.968554][T12945] Call Trace: [ 212.968561][T12945] [ 212.968569][T12945] __dump_stack+0x1d/0x30 [ 212.968606][T12945] dump_stack_lvl+0xe8/0x140 [ 212.968623][T12945] dump_stack+0x15/0x1b [ 212.968637][T12945] should_fail_ex+0x265/0x280 [ 212.968660][T12945] ? nsim_fib_event_nb+0x1a0/0xcb0 [ 212.968760][T12945] should_failslab+0x8c/0xb0 [ 212.968782][T12945] __kmalloc_cache_noprof+0x4c/0x320 [ 212.968810][T12945] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 212.968839][T12945] nsim_fib_event_nb+0x1a0/0xcb0 [ 212.968908][T12945] ? ttwu_do_activate+0x1d0/0x210 [ 212.968934][T12945] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 212.968991][T12945] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 212.969026][T12945] atomic_notifier_call_chain+0x73/0x1c0 [ 212.969062][T12945] call_fib_notifiers+0x65/0xa0 [ 212.969090][T12945] call_fib6_notifiers+0x30/0x40 [ 212.969110][T12945] fib6_del+0x749/0x8b0 [ 212.969192][T12945] ? fib6_del+0x251/0x8b0 [ 212.969237][T12945] __ip6_del_rt+0x5e/0x120 [ 212.969258][T12945] ip6_del_rt+0x69/0x90 [ 212.969283][T12945] cleanup_prefix_route+0xb7/0x260 [ 212.969302][T12945] ipv6_del_addr+0x499/0x5e0 [ 212.969323][T12945] inet6_addr_del+0x2f4/0x400 [ 212.969400][T12945] addrconf_del_ifaddr+0xa7/0xe0 [ 212.969417][T12945] inet6_ioctl+0x84/0x190 [ 212.969453][T12945] ? ioctl_has_perm+0x257/0x2a0 [ 212.969583][T12945] sock_do_ioctl+0x73/0x220 [ 212.969615][T12945] sock_ioctl+0x41b/0x610 [ 212.969681][T12945] ? __pfx_sock_ioctl+0x10/0x10 [ 212.969707][T12945] __se_sys_ioctl+0xce/0x140 [ 212.969729][T12945] __x64_sys_ioctl+0x43/0x50 [ 212.969808][T12945] x64_sys_call+0x1816/0x2ff0 [ 212.969826][T12945] do_syscall_64+0xd2/0x200 [ 212.969923][T12945] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 212.969947][T12945] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 212.970015][T12945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.970070][T12945] RIP: 0033:0x7f311758eec9 [ 212.970084][T12945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.970098][T12945] RSP: 002b:00007f3115ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.970122][T12945] RAX: ffffffffffffffda RBX: 00007f31177e5fa0 RCX: 00007f311758eec9 [ 212.970133][T12945] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000004 [ 212.970199][T12945] RBP: 00007f3115ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 212.970210][T12945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.970220][T12945] R13: 00007f31177e6038 R14: 00007f31177e5fa0 R15: 00007ffe22e4d408 [ 212.970237][T12945] [ 212.989014][T12943] syzkaller1: entered promiscuous mode [ 213.255742][T12943] syzkaller1: entered allmulticast mode [ 213.378819][T12967] FAULT_INJECTION: forcing a failure. [ 213.378819][T12967] name failslab, interval 1, probability 0, space 0, times 0 [ 213.391471][T12967] CPU: 0 UID: 0 PID: 12967 Comm: syz.0.3273 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 213.391546][T12967] Tainted: [W]=WARN [ 213.391550][T12967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 213.391557][T12967] Call Trace: [ 213.391562][T12967] [ 213.391567][T12967] __dump_stack+0x1d/0x30 [ 213.391633][T12967] dump_stack_lvl+0xe8/0x140 [ 213.391644][T12967] dump_stack+0x15/0x1b [ 213.391658][T12967] should_fail_ex+0x265/0x280 [ 213.391674][T12967] should_failslab+0x8c/0xb0 [ 213.391705][T12967] kmem_cache_alloc_noprof+0x50/0x310 [ 213.391759][T12967] ? getname_flags+0x80/0x3b0 [ 213.391784][T12967] getname_flags+0x80/0x3b0 [ 213.391810][T12967] user_path_at+0x28/0x130 [ 213.391876][T12967] do_fchownat+0xb0/0x210 [ 213.391902][T12967] __x64_sys_lchown+0x4a/0x60 [ 213.392000][T12967] x64_sys_call+0x2861/0x2ff0 [ 213.392019][T12967] do_syscall_64+0xd2/0x200 [ 213.392048][T12967] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 213.392068][T12967] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 213.392123][T12967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.392135][T12967] RIP: 0033:0x7fc1cbc1eec9 [ 213.392149][T12967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.392159][T12967] RSP: 002b:00007fc1ca687038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 213.392237][T12967] RAX: ffffffffffffffda RBX: 00007fc1cbe75fa0 RCX: 00007fc1cbc1eec9 [ 213.392307][T12967] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000700 [ 213.392326][T12967] RBP: 00007fc1ca687090 R08: 0000000000000000 R09: 0000000000000000 [ 213.392375][T12967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.392382][T12967] R13: 00007fc1cbe76038 R14: 00007fc1cbe75fa0 R15: 00007ffd3e2dd688 [ 213.392393][T12967] [ 213.602806][T12970] tipc: Started in network mode [ 213.607743][T12970] tipc: Node identity c615c85a8d4, cluster identity 4711 [ 213.614875][T12970] tipc: Enabled bearer , priority 0 [ 213.624072][T12970] tipc: Resetting bearer [ 213.631365][T12969] tipc: Disabling bearer [ 213.754803][T12972] FAULT_INJECTION: forcing a failure. [ 213.754803][T12972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.768007][T12972] CPU: 1 UID: 0 PID: 12972 Comm: syz.0.3275 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 213.768040][T12972] Tainted: [W]=WARN [ 213.768123][T12972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 213.768134][T12972] Call Trace: [ 213.768140][T12972] [ 213.768145][T12972] __dump_stack+0x1d/0x30 [ 213.768159][T12972] dump_stack_lvl+0xe8/0x140 [ 213.768170][T12972] dump_stack+0x15/0x1b [ 213.768180][T12972] should_fail_ex+0x265/0x280 [ 213.768195][T12972] should_fail+0xb/0x20 [ 213.768206][T12972] should_fail_usercopy+0x1a/0x20 [ 213.768220][T12972] _copy_from_user+0x1c/0xb0 [ 213.768306][T12972] io_sqe_files_register+0x1e5/0x4f0 [ 213.768327][T12972] __se_sys_io_uring_register+0xb01/0xeb0 [ 213.768411][T12972] ? fput+0x8f/0xc0 [ 213.768447][T12972] ? ksys_write+0x192/0x1a0 [ 213.768470][T12972] __x64_sys_io_uring_register+0x55/0x70 [ 213.768486][T12972] x64_sys_call+0x18a3/0x2ff0 [ 213.768498][T12972] do_syscall_64+0xd2/0x200 [ 213.768594][T12972] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 213.768672][T12972] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 213.768690][T12972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.768707][T12972] RIP: 0033:0x7fc1cbc1eec9 [ 213.768717][T12972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.768727][T12972] RSP: 002b:00007fc1ca687038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 213.768739][T12972] RAX: ffffffffffffffda RBX: 00007fc1cbe75fa0 RCX: 00007fc1cbc1eec9 [ 213.768746][T12972] RDX: 0000200000000180 RSI: 0000000000000002 RDI: 0000000000000005 [ 213.768753][T12972] RBP: 00007fc1ca687090 R08: 0000000000000000 R09: 0000000000000000 [ 213.768837][T12972] R10: 00000000000000fe R11: 0000000000000246 R12: 0000000000000001 [ 213.768844][T12972] R13: 00007fc1cbe76038 R14: 00007fc1cbe75fa0 R15: 00007ffd3e2dd688 [ 213.768855][T12972] [ 214.025480][T12977] FAULT_INJECTION: forcing a failure. [ 214.025480][T12977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.038580][T12977] CPU: 1 UID: 0 PID: 12977 Comm: syz.6.3277 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 214.038601][T12977] Tainted: [W]=WARN [ 214.038605][T12977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 214.038613][T12977] Call Trace: [ 214.038617][T12977] [ 214.038622][T12977] __dump_stack+0x1d/0x30 [ 214.038701][T12977] dump_stack_lvl+0xe8/0x140 [ 214.038712][T12977] dump_stack+0x15/0x1b [ 214.038721][T12977] should_fail_ex+0x265/0x280 [ 214.038745][T12977] should_fail+0xb/0x20 [ 214.038756][T12977] should_fail_usercopy+0x1a/0x20 [ 214.038843][T12977] _copy_to_user+0x20/0xa0 [ 214.038860][T12977] __se_sys_move_pages+0xfbc/0x1360 [ 214.038884][T12977] ? get_pid_task+0x96/0xd0 [ 214.038955][T12977] ? ksys_write+0x192/0x1a0 [ 214.038968][T12977] __x64_sys_move_pages+0x78/0x90 [ 214.038985][T12977] x64_sys_call+0x2f78/0x2ff0 [ 214.039006][T12977] do_syscall_64+0xd2/0x200 [ 214.039110][T12977] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 214.039135][T12977] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 214.039199][T12977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.039211][T12977] RIP: 0033:0x7fe650e5eec9 [ 214.039221][T12977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.039273][T12977] RSP: 002b:00007fe64f8c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 214.039284][T12977] RAX: ffffffffffffffda RBX: 00007fe6510b5fa0 RCX: 00007fe650e5eec9 [ 214.039292][T12977] RDX: 0000200000000080 RSI: 0000000000001efe RDI: 0000000000000000 [ 214.039299][T12977] RBP: 00007fe64f8c7090 R08: 0000200000000040 R09: 0000000000000000 [ 214.039346][T12977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.039353][T12977] R13: 00007fe6510b6038 R14: 00007fe6510b5fa0 R15: 00007ffef182f078 [ 214.039364][T12977] [ 214.260140][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 214.260164][ T29] audit: type=1326 audit(1758733959.056:17050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.6.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe650e5eec9 code=0x7ffc0000 [ 214.290110][ T29] audit: type=1326 audit(1758733959.056:17051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.6.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fe650e5eec9 code=0x7ffc0000 [ 214.313709][ T29] audit: type=1326 audit(1758733959.056:17052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.6.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe650e5eec9 code=0x7ffc0000 [ 214.357168][T12983] syzkaller1: entered promiscuous mode [ 214.362728][T12983] syzkaller1: entered allmulticast mode [ 214.369383][T12987] netlink: 'syz.6.3281': attribute type 10 has an invalid length. [ 214.384247][ T29] audit: type=1326 audit(1758733959.186:17053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12984 comm="syz.1.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39751beec9 code=0x7ffc0000 [ 214.407912][ T29] audit: type=1326 audit(1758733959.186:17054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12984 comm="syz.1.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39751beec9 code=0x7ffc0000 [ 214.433358][T12987] bridge_slave_1: entered promiscuous mode [ 214.439721][T12987] $H: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 214.452604][ T29] audit: type=1326 audit(1758733959.186:17055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12984 comm="syz.1.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f39751beec9 code=0x7ffc0000 [ 214.476261][ T29] audit: type=1326 audit(1758733959.186:17056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12984 comm="syz.1.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39751beec9 code=0x7ffc0000 [ 214.499917][ T29] audit: type=1326 audit(1758733959.186:17057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12984 comm="syz.1.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39751beec9 code=0x7ffc0000 [ 214.523692][ T29] audit: type=1326 audit(1758733959.236:17058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12984 comm="syz.1.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f39751beec9 code=0x7ffc0000 [ 214.547365][ T29] audit: type=1326 audit(1758733959.236:17059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12984 comm="syz.1.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39751beec9 code=0x7ffc0000 [ 214.680516][T12995] netlink: 'syz.7.3285': attribute type 1 has an invalid length. [ 214.834518][T13004] netlink: 'syz.0.3288': attribute type 1 has an invalid length. [ 215.499097][T13009] team0: Port device dummy0 removed [ 215.509098][T13009] bridge_slave_0: left allmulticast mode [ 215.514845][T13009] bridge_slave_0: left promiscuous mode [ 215.520629][T13009] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.540133][T13009] bridge_slave_1: left allmulticast mode [ 215.545853][T13009] bridge_slave_1: left promiscuous mode [ 215.551521][T13009] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.563473][T13009] bond0: (slave bond_slave_0): Releasing backup interface [ 215.597871][T13009] bond0: (slave bond_slave_1): Releasing backup interface [ 215.610193][T13009] team0: Port device team_slave_0 removed [ 215.619649][T13009] team0: Port device team_slave_1 removed [ 215.628421][T13009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.635928][T13009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.653834][T13009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.661282][T13009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.757341][T13024] syzkaller1: entered promiscuous mode [ 215.762909][T13024] syzkaller1: entered allmulticast mode [ 215.949374][T13029] SELinux: ebitmap: truncated map [ 215.958591][T13029] SELinux: failed to load policy [ 215.990145][ T3391] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 215.993552][T13033] loop7: detected capacity change from 0 to 512 [ 216.004191][ T3391] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 216.028447][T13033] EXT4-fs (loop7): 1 orphan inode deleted [ 216.042136][ T5965] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:40: Failed to release dquot type 1 [ 216.045698][T13033] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.067070][T13033] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.112424][ T9608] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.403812][T13046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.412524][T13046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.866016][T13065] syzkaller1: entered promiscuous mode [ 216.871546][T13065] syzkaller1: entered allmulticast mode [ 216.938504][T13067] netlink: 'syz.1.3307': attribute type 1 has an invalid length. [ 217.043292][T13080] netlink: 'syz.1.3314': attribute type 1 has an invalid length. [ 217.051057][T13080] __nla_validate_parse: 4 callbacks suppressed [ 217.051072][T13080] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3314'. [ 217.075712][T13080] nfs: Unknown parameter ' ' [ 217.648722][T13102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3318'. [ 217.853729][T13107] loop7: detected capacity change from 0 to 512 [ 217.933641][T13107] EXT4-fs (loop7): can't mount with journal_checksum, fs mounted w/o journal [ 217.996879][T13110] syzkaller1: entered promiscuous mode [ 218.002554][T13110] syzkaller1: entered allmulticast mode [ 218.224692][T13135] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3331'. [ 218.250692][T13137] loop7: detected capacity change from 0 to 512 [ 218.303962][T13137] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.337784][T13137] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.439174][T13151] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=42 sclass=netlink_tcpdiag_socket pid=13151 comm=syz.2.3338 [ 218.552001][T13159] syzkaller1: entered promiscuous mode [ 218.557480][T13159] syzkaller1: entered allmulticast mode [ 218.576910][ T9608] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.469395][ T3384] hid-generic 0000:0000:0000.000C: unknown main item tag 0x1 [ 219.476855][ T3384] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 219.484390][ T3384] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 219.491833][ T3384] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 219.499237][ T3384] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 219.506643][ T3384] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 219.514038][ T3384] hid-generic 0000:0000:0000.000C: unknown main item tag 0x4 [ 219.521432][ T3384] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 219.528871][ T3384] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 219.557591][T13218] netlink: 'syz.1.3356': attribute type 10 has an invalid length. [ 219.569119][T13218] team0: Port device dummy0 added [ 219.580177][ T3384] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 219.592291][T13218] netlink: 'syz.1.3356': attribute type 10 has an invalid length. [ 219.610929][T13218] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 219.614613][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 219.614626][ T29] audit: type=1400 audit(1758733964.356:17315): avc: denied { bind } for pid=13217 comm="syz.1.3356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 219.646379][ T29] audit: type=1400 audit(1758733964.376:17316): avc: denied { create } for pid=13212 comm="syz.2.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 219.666228][ T29] audit: type=1400 audit(1758733964.406:17317): avc: denied { ioctl } for pid=13212 comm="syz.2.3355" path="socket:[40969]" dev="sockfs" ino=40969 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 219.691318][T13218] team0: Failed to send options change via netlink (err -105) [ 219.699646][T13218] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 219.700504][ T29] audit: type=1326 audit(1758733964.446:17318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.1.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39751beec9 code=0x7ffc0000 [ 219.731946][ T29] audit: type=1326 audit(1758733964.446:17319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.1.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39751beec9 code=0x7ffc0000 [ 219.757118][T13218] team0: Port device dummy0 removed [ 219.764623][T13218] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 219.786071][ T29] audit: type=1326 audit(1758733964.586:17320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cbc1eec9 code=0x7ffc0000 [ 219.809732][ T29] audit: type=1326 audit(1758733964.586:17321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cbc1eec9 code=0x7ffc0000 [ 219.839557][ T29] audit: type=1326 audit(1758733964.586:17322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc1cbc1eec9 code=0x7ffc0000 [ 219.863352][ T29] audit: type=1326 audit(1758733964.616:17323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cbc1eec9 code=0x7ffc0000 [ 219.886953][ T29] audit: type=1326 audit(1758733964.636:17324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1cbc1eec9 code=0x7ffc0000 [ 219.933893][T13227] loop6: detected capacity change from 0 to 164 [ 219.942097][T13227] ISOFS: unable to read i-node block [ 219.947396][T13227] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 220.016616][T13242] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3364'. [ 220.065406][T13246] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 220.071958][T13246] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 220.079666][T13246] vhci_hcd vhci_hcd.0: Device attached [ 220.147395][T13247] vhci_hcd: connection closed [ 220.147835][ T5974] vhci_hcd: stop threads [ 220.156862][ T5974] vhci_hcd: release socket [ 220.161262][ T5974] vhci_hcd: disconnect device [ 220.881048][T13267] 9p: Unknown access argument : -22 [ 220.950918][T13274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3374'. [ 221.069860][T13290] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3380'. [ 221.199256][T13300] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 221.205871][T13300] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 221.213645][T13300] vhci_hcd vhci_hcd.0: Device attached [ 221.264031][T13301] vhci_hcd: connection closed [ 221.264300][ T5965] vhci_hcd: stop threads [ 221.273371][ T5965] vhci_hcd: release socket [ 221.277780][ T5965] vhci_hcd: disconnect device [ 222.231206][T13332] loop7: detected capacity change from 0 to 128 [ 222.351338][T13330] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 222.357876][T13330] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 222.365576][T13330] vhci_hcd vhci_hcd.0: Device attached [ 222.374820][T13335] vhci_hcd: connection closed [ 222.375119][ T5974] vhci_hcd: stop threads [ 222.384172][ T5974] vhci_hcd: release socket [ 222.388577][ T5974] vhci_hcd: disconnect device [ 222.486504][T13353] loop7: detected capacity change from 0 to 128 [ 222.496384][T13353] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 222.504252][T13353] FAT-fs (loop7): Filesystem has been set read-only [ 222.513591][T13353] syz.7.3403: attempt to access beyond end of device [ 222.513591][T13353] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 222.528486][T13353] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 222.536350][T13353] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 222.545563][T13353] syz.7.3403: attempt to access beyond end of device [ 222.545563][T13353] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 222.559285][T13353] syz.7.3403: attempt to access beyond end of device [ 222.559285][T13353] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 222.575616][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3403'. [ 222.585049][T13353] syz.7.3403: attempt to access beyond end of device [ 222.585049][T13353] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 222.602164][T13353] syz.7.3403: attempt to access beyond end of device [ 222.602164][T13353] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 222.617761][T13353] syz.7.3403: attempt to access beyond end of device [ 222.617761][T13353] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 222.635378][T13353] syz.7.3403: attempt to access beyond end of device [ 222.635378][T13353] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 222.649122][T13353] syz.7.3403: attempt to access beyond end of device [ 222.649122][T13353] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 222.663559][T13353] syz.7.3403: attempt to access beyond end of device [ 222.663559][T13353] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 222.678606][T13353] syz.7.3403: attempt to access beyond end of device [ 222.678606][T13353] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 222.763215][T13361] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 222.763630][T13362] netlink: 'syz.1.3404': attribute type 27 has an invalid length. [ 222.779048][ T3597] IPVS: starting estimator thread 0... [ 222.856983][T13362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.868018][T13362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.881845][T13363] IPVS: using max 2592 ests per chain, 129600 per kthread [ 222.910266][ T5958] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.921633][ T5958] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.944756][ T5958] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.956469][ T5958] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.977220][T13370] syzkaller1: entered promiscuous mode [ 222.982885][T13370] syzkaller1: entered allmulticast mode [ 223.078723][T13379] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3410'. [ 223.098535][T13379] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3410'. [ 223.149261][T13387] loop6: detected capacity change from 0 to 512 [ 223.163284][T13387] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 223.228687][T13392] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 223.235262][T13392] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 223.242942][T13392] vhci_hcd vhci_hcd.0: Device attached [ 223.281534][T13396] syzkaller1: entered promiscuous mode [ 223.287111][T13396] syzkaller1: entered allmulticast mode [ 223.301949][T13393] vhci_hcd: connection closed [ 223.303681][ T5958] vhci_hcd: stop threads [ 223.312665][ T5958] vhci_hcd: release socket [ 223.317107][ T5958] vhci_hcd: disconnect device [ 223.459279][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3421'. [ 223.693125][T13420] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3428'. [ 223.827337][T13424] syzkaller1: entered promiscuous mode [ 223.832919][T13424] syzkaller1: entered allmulticast mode [ 224.030304][T13432] netlink: 'syz.0.3432': attribute type 10 has an invalid length. [ 224.062222][T13432] team0: Port device dummy0 added [ 224.070123][T13432] netlink: 'syz.0.3432': attribute type 10 has an invalid length. [ 224.150816][T13447] loop6: detected capacity change from 0 to 2048 [ 224.155407][T13453] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 224.157501][T13447] ext4: Unknown parameter '' [ 224.163651][T13453] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 224.176388][T13453] vhci_hcd vhci_hcd.0: Device attached [ 224.184822][T13454] vhci_hcd: connection closed [ 224.185064][ T5974] vhci_hcd: stop threads [ 224.194290][ T5974] vhci_hcd: release socket [ 224.198856][ T5974] vhci_hcd: disconnect device [ 224.205523][T13457] syzkaller1: entered promiscuous mode [ 224.211075][T13457] syzkaller1: entered allmulticast mode [ 224.384660][T13481] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 224.426724][T13491] syzkaller1: entered promiscuous mode [ 224.432266][T13491] syzkaller1: entered allmulticast mode [ 224.446161][T13487] syzkaller1: entered promiscuous mode [ 224.451692][T13487] syzkaller1: entered allmulticast mode [ 224.558322][T13499] @0: renamed from bond_slave_1 [ 225.159454][T13514] netlink: '+}[@': attribute type 10 has an invalid length. [ 225.167308][T13514] FAULT_INJECTION: forcing a failure. [ 225.167308][T13514] name failslab, interval 1, probability 0, space 0, times 0 [ 225.179948][T13514] CPU: 1 UID: 0 PID: 13514 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 225.179977][T13514] Tainted: [W]=WARN [ 225.179984][T13514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 225.179996][T13514] Call Trace: [ 225.180004][T13514] [ 225.180070][T13514] __dump_stack+0x1d/0x30 [ 225.180089][T13514] dump_stack_lvl+0xe8/0x140 [ 225.180108][T13514] dump_stack+0x15/0x1b [ 225.180125][T13514] should_fail_ex+0x265/0x280 [ 225.180149][T13514] should_failslab+0x8c/0xb0 [ 225.180179][T13514] __kmalloc_noprof+0xa5/0x3e0 [ 225.180201][T13514] ? fib_create_info+0xbb1/0x1980 [ 225.180226][T13514] fib_create_info+0xbb1/0x1980 [ 225.180276][T13514] fib_table_insert+0x60/0xeb0 [ 225.180310][T13514] ? fib_new_table+0xad/0x1c0 [ 225.180369][T13514] fib_magic+0x19a/0x1f0 [ 225.180393][T13514] fib_add_ifaddr+0x279/0x320 [ 225.180413][T13514] fib_netdev_event+0x355/0x430 [ 225.180451][T13514] ? __pfx_fib_netdev_event+0x10/0x10 [ 225.180484][T13514] raw_notifier_call_chain+0x6f/0x1b0 [ 225.180568][T13514] ? call_netdevice_notifiers_info+0x9c/0x100 [ 225.180600][T13514] call_netdevice_notifiers_info+0xae/0x100 [ 225.180632][T13514] netif_open+0xad/0xf0 [ 225.180690][T13514] dev_open+0xc0/0x170 [ 225.180735][T13514] team_add_slave+0x751/0x17c0 [ 225.180757][T13514] ? prb_read_valid+0x3c/0x60 [ 225.180862][T13514] ? _raw_spin_unlock_bh+0x36/0x40 [ 225.180882][T13514] ? dev_set_rx_mode+0x17c/0x190 [ 225.180901][T13514] ? __dev_change_flags+0x343/0x400 [ 225.180923][T13514] ? __pfx_team_add_slave+0x10/0x10 [ 225.180942][T13514] do_set_master+0x390/0x460 [ 225.180983][T13514] do_setlink+0xa43/0x2810 [ 225.181003][T13514] ? save_fpregs_to_fpstate+0x100/0x160 [ 225.181071][T13514] ? _raw_spin_unlock+0x26/0x50 [ 225.181090][T13514] ? finish_task_switch+0xad/0x2b0 [ 225.181107][T13514] ? __schedule+0x6b9/0xb30 [ 225.181130][T13514] rtnl_newlink+0xe75/0x12d0 [ 225.181196][T13514] ? __rcu_read_unlock+0x34/0x70 [ 225.181214][T13514] ? bpf_trace_run3+0x12c/0x1d0 [ 225.181254][T13514] ? __kfree_skb+0x109/0x150 [ 225.181279][T13514] ? __rcu_read_unlock+0x4f/0x70 [ 225.181300][T13514] ? __kfree_skb+0x109/0x150 [ 225.181324][T13514] ? __rcu_read_unlock+0x4f/0x70 [ 225.181345][T13514] ? avc_has_perm_noaudit+0x1b1/0x200 [ 225.181385][T13514] ? cred_has_capability+0x210/0x280 [ 225.181424][T13514] ? selinux_capable+0x31/0x40 [ 225.181449][T13514] ? security_capable+0x83/0x90 [ 225.181474][T13514] ? ns_capable+0x7d/0xb0 [ 225.181492][T13514] ? __pfx_rtnl_newlink+0x10/0x10 [ 225.181580][T13514] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 225.181615][T13514] netlink_rcv_skb+0x120/0x220 [ 225.181711][T13514] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 225.181766][T13514] rtnetlink_rcv+0x1c/0x30 [ 225.181788][T13514] netlink_unicast+0x5c0/0x690 [ 225.181808][T13514] netlink_sendmsg+0x58b/0x6b0 [ 225.181833][T13514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.181882][T13514] __sock_sendmsg+0x145/0x180 [ 225.181915][T13514] ____sys_sendmsg+0x31e/0x4e0 [ 225.181938][T13514] ___sys_sendmsg+0x17b/0x1d0 [ 225.182111][T13514] __x64_sys_sendmsg+0xd4/0x160 [ 225.182154][T13514] x64_sys_call+0x191e/0x2ff0 [ 225.182173][T13514] do_syscall_64+0xd2/0x200 [ 225.182279][T13514] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 225.182304][T13514] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 225.182362][T13514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.182383][T13514] RIP: 0033:0x7fe650e5eec9 [ 225.182456][T13514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.182477][T13514] RSP: 002b:00007fe64f8c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.182493][T13514] RAX: ffffffffffffffda RBX: 00007fe6510b5fa0 RCX: 00007fe650e5eec9 [ 225.182577][T13514] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000009 [ 225.182591][T13514] RBP: 00007fe64f8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 225.182604][T13514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.182617][T13514] R13: 00007fe6510b6038 R14: 00007fe6510b5fa0 R15: 00007ffef182f078 [ 225.182692][T13514] [ 225.584004][T13514] team0: Port device dummy0 added [ 225.619668][T13518] syzkaller1: entered promiscuous mode [ 225.625286][T13518] syzkaller1: entered allmulticast mode [ 225.664523][T13521] syzkaller1: entered promiscuous mode [ 225.670087][T13521] syzkaller1: entered allmulticast mode [ 225.746513][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 225.746526][ T29] audit: type=1326 audit(1758733970.546:17507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13536 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311758eec9 code=0x7ffc0000 [ 225.818141][ T29] audit: type=1326 audit(1758733970.576:17508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13536 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f311758eec9 code=0x7ffc0000 [ 225.841763][ T29] audit: type=1326 audit(1758733970.576:17509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13536 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311758eec9 code=0x7ffc0000 [ 225.865427][ T29] audit: type=1326 audit(1758733970.576:17510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13536 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311758eec9 code=0x7ffc0000 [ 225.888994][ T29] audit: type=1326 audit(1758733970.576:17511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13536 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f311758eec9 code=0x7ffc0000 [ 225.912548][ T29] audit: type=1326 audit(1758733970.576:17512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13536 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311758eec9 code=0x7ffc0000 [ 225.936243][ T29] audit: type=1326 audit(1758733970.576:17513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13536 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f311758eec9 code=0x7ffc0000 [ 225.959888][ T29] audit: type=1326 audit(1758733970.576:17514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13536 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311758eec9 code=0x7ffc0000 [ 225.983448][ T29] audit: type=1326 audit(1758733970.576:17515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13536 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f311758eec9 code=0x7ffc0000 [ 226.007179][ T29] audit: type=1326 audit(1758733970.576:17516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13536 comm="syz.2.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311758eec9 code=0x7ffc0000 [ 226.614692][T13551] serio: Serial port ptm0 [ 226.628579][T13557] FAULT_INJECTION: forcing a failure. [ 226.628579][T13557] name failslab, interval 1, probability 0, space 0, times 0 [ 226.641338][T13557] CPU: 1 UID: 0 PID: 13557 Comm: syz.6.3480 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 226.641372][T13557] Tainted: [W]=WARN [ 226.641379][T13557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 226.641425][T13557] Call Trace: [ 226.641430][T13557] [ 226.641485][T13557] __dump_stack+0x1d/0x30 [ 226.641508][T13557] dump_stack_lvl+0xe8/0x140 [ 226.641527][T13557] dump_stack+0x15/0x1b [ 226.641545][T13557] should_fail_ex+0x265/0x280 [ 226.641569][T13557] should_failslab+0x8c/0xb0 [ 226.641670][T13557] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 226.641700][T13557] ? p9_client_create+0x207/0xbc0 [ 226.641784][T13557] kstrdup+0x3e/0xd0 [ 226.641886][T13557] p9_client_create+0x207/0xbc0 [ 226.641914][T13557] v9fs_session_init+0xf7/0xde0 [ 226.641988][T13557] ? avc_has_perm_noaudit+0x1b1/0x200 [ 226.642013][T13557] ? v9fs_mount+0x51/0x5c0 [ 226.642039][T13557] ? __kmalloc_cache_noprof+0x299/0x320 [ 226.642070][T13557] v9fs_mount+0x67/0x5c0 [ 226.642146][T13557] ? selinux_capable+0x31/0x40 [ 226.642171][T13557] ? __pfx_v9fs_mount+0x10/0x10 [ 226.642274][T13557] legacy_get_tree+0x78/0xd0 [ 226.642296][T13557] vfs_get_tree+0x57/0x1d0 [ 226.642322][T13557] do_new_mount+0x207/0x5e0 [ 226.642340][T13557] ? security_capable+0x83/0x90 [ 226.642363][T13557] path_mount+0x4a4/0xb20 [ 226.642395][T13557] ? user_path_at+0x109/0x130 [ 226.642484][T13557] __se_sys_mount+0x28f/0x2e0 [ 226.642506][T13557] ? fput+0x8f/0xc0 [ 226.642532][T13557] __x64_sys_mount+0x67/0x80 [ 226.642611][T13557] x64_sys_call+0x2b4d/0x2ff0 [ 226.642632][T13557] do_syscall_64+0xd2/0x200 [ 226.642659][T13557] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 226.642737][T13557] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 226.642766][T13557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.642787][T13557] RIP: 0033:0x7fe650e5eec9 [ 226.642839][T13557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.642854][T13557] RSP: 002b:00007fe64f8c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 226.642870][T13557] RAX: ffffffffffffffda RBX: 00007fe6510b5fa0 RCX: 00007fe650e5eec9 [ 226.642951][T13557] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 226.642965][T13557] RBP: 00007fe64f8c7090 R08: 0000200000000300 R09: 0000000000000000 [ 226.642978][T13557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.643072][T13557] R13: 00007fe6510b6038 R14: 00007fe6510b5fa0 R15: 00007ffef182f078 [ 226.643090][T13557] [ 226.650667][T13559] tc_dump_action: action bad kind [ 226.871086][T13568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3481'. [ 226.878680][T13563] syzkaller1: entered promiscuous mode [ 226.914038][T13563] syzkaller1: entered allmulticast mode [ 226.936906][T13570] netlink: 'syz.2.3483': attribute type 10 has an invalid length. [ 226.950305][T13570] team0: Port device dummy0 added [ 226.956605][T13570] netlink: 'syz.2.3483': attribute type 10 has an invalid length. [ 226.965239][T13570] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 226.989738][T13570] team0: Failed to send options change via netlink (err -105) [ 226.998137][T13570] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 227.007316][T13570] team0: Port device dummy0 removed [ 227.016496][T13570] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 227.031447][T13574] syzkaller1: entered promiscuous mode [ 227.037199][T13574] syzkaller1: entered allmulticast mode [ 227.339963][T13595] ================================================================== [ 227.348071][T13595] BUG: KCSAN: data-race in try_to_migrate_one / zap_page_range_single_batched [ 227.356908][T13595] [ 227.359213][T13595] write to 0xffff88810adfd798 of 8 bytes by task 13594 on cpu 1: [ 227.366929][T13595] try_to_migrate_one+0x918/0x16e0 [ 227.372067][T13595] __rmap_walk_file+0x1ec/0x2b0 [ 227.376902][T13595] try_to_migrate+0x1db/0x210 [ 227.381562][T13595] migrate_pages_batch+0x6e1/0x1ae0 [ 227.386834][T13595] migrate_pages+0xf5f/0x1770 [ 227.391500][T13595] __se_sys_mbind+0x975/0xac0 [ 227.396511][T13595] __x64_sys_mbind+0x78/0x90 [ 227.401089][T13595] x64_sys_call+0x2932/0x2ff0 [ 227.405753][T13595] do_syscall_64+0xd2/0x200 [ 227.410248][T13595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.416157][T13595] [ 227.418463][T13595] write to 0xffff88810adfd798 of 8 bytes by task 13595 on cpu 0: [ 227.426167][T13595] zap_page_range_single_batched+0x182/0x450 [ 227.432139][T13595] unmap_mapping_range_tree+0xfd/0x160 [ 227.437589][T13595] unmap_mapping_range+0xe4/0xf0 [ 227.442510][T13595] shmem_fallocate+0x262/0x840 [ 227.447258][T13595] vfs_fallocate+0x3b6/0x400 [ 227.451833][T13595] madvise_vma_behavior+0x192d/0x1cf0 [ 227.457194][T13595] madvise_do_behavior+0x5b7/0x970 [ 227.462292][T13595] do_madvise+0x10e/0x190 [ 227.466607][T13595] __x64_sys_madvise+0x64/0x80 [ 227.471359][T13595] x64_sys_call+0x1f1a/0x2ff0 [ 227.476018][T13595] do_syscall_64+0xd2/0x200 [ 227.480520][T13595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.486397][T13595] [ 227.488701][T13595] value changed: 0x0000000000001645 -> 0x0000000000002165 [ 227.495787][T13595] [ 227.498091][T13595] Reported by Kernel Concurrency Sanitizer on: [ 227.504222][T13595] CPU: 0 UID: 0 PID: 13595 Comm: syz.1.3492 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 227.515577][T13595] Tainted: [W]=WARN [ 227.519357][T13595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 227.529394][T13595] ==================================================================