last executing test programs: 37.52782866s ago: executing program 0 (id=8824): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"}) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r9 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x1}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r9, 0x7bfe, 0x3ffb, 0xd, 0x0, 0xffffffffffffff73) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r11, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r12}, 0x18) sendmsg$rds(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@fadd={0x58, 0x114, 0x6, {{0x7, 0x8}, &(0x7f0000000240)=0xfbd4, 0x0, 0x53a, 0x4, 0xe, 0x8, 0x24, 0xffffffffffffff1c}}], 0x58, 0x48000}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9e1748e5b2621cdd, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 36.608899898s ago: executing program 0 (id=8837): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r3, 0x4bfa, 0x10000000000004) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x4}, 0x18) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000580)="d3ddd3447bb778d548a759a16ed259795619349884ed0093c2bb99fe0bde45ee3e384b557d79aa269882d8138f3f11671c06742b5b08f248985ccc5959", 0x3d}], 0x1}}], 0x1, 0x404c484) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0x4) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x72d, &(0x7f00000014c0)="$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") 35.323681652s ago: executing program 0 (id=8866): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0xffffff8f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f00000007c0)="f2e659a0b00d26c2ee15bbdf21c625bd1e67dee03c0d5862d425c076b8577bb0b50607802b1c3ab21a39c9eb5b6ca033319be5ed6e5d21f0f39fee6a8c98dc0bc39a76bf896971072aec737f00aee7ead58ba42e1f7efe0c445b1d1d5de272c3d774e063c4ade85dd1cf6c8c85472590721bb64c154d689cec735b3ac1b8f96dedff166668803830d4d526e16c68", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1"}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000000580)="b8a2f681134502fe2f602543e7bf1919be9eb6378d8fc15ac1699c0c424dc215b3ec95771fb5a5fa942353cba2caf2acea06b89d8425f97404638b33f24a9b32ab61cd414aa8acaa07ba1b0ea45b2361f8442e6af44fa5e9f10de0aa6dc5d9a9a43a20771650db53f5432f5abd100417", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)}, {&(0x7f0000000340)='\x00', 0x1}, {&(0x7f0000000880)="87141af223663a746046bdc339de81564cdbc76b336cf021dc7c2550b78b77295a37c903f475800f412569837c24ddf6b71979c1b606045926349dcd37c3077cb901d70a559c57ff65222c60c7bb8241d643c290505f23e07dc853"}, {&(0x7f0000000900)="11e08017bdf05fba2a819e173635d3d3e587f540a7622b34ab1069b87bf90bd82a92f94be0630ec07478c68309574d4fb0b1cb100d7d7a2461a1b6ec9df5e794356055d324ef4b72a433640925616bb2bd694ad8453d43bbbb91f97aa18dd52c9372c785e178180fe94fe7cac6ac486e131d1da39a4bab332c8a634ea393612b1be8d2b7d6dece01f6d5891bcf73f2d902c003facf086a1d84c11781cbb3ec57798068f71764c936cd63"}, {&(0x7f00000009c0)="c71924d7ea9bc5971a0c58640e8be19cab192cbcc2e315e72c441a5b0c0bb0fa1728e32d3bd7cd210bc2e5abeba55e9d8626bc0e11a884d140c83c4d40f46ea66a5bdab9888ffe03d639b5c19ae7243b451e6572bacf66051d51b9fb2f22ca8b69f8a53f890035bcb884820df6246909e21fda8c820c1a3a1b678ebfdf"}], 0x2}}], 0x4, 0x4000000) 35.213424314s ago: executing program 0 (id=8869): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_GET_PROG(0x9, &(0x7f0000000600)=@generic={0x0, 0x11, 0x10}, 0xc) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0x0) request_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, r0) 35.114046186s ago: executing program 0 (id=8871): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsmount(0xffffffffffffffff, 0x0, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb00182", 0xb}], 0x1}}], 0x1, 0x20008000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x39}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000000000000000000000000000000000000000000d9cec175b3e54c5d43e9e617f9db7b84790f6f6606dea280858295c3d66a8930b269e85ac0320d05f0f83da99af09e0d2dfde9562dee36967ab234e2643daaf885c2"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x3b2}, 0x0, 0x0, 0x800000, 0x2, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095", @ANYBLOB="4b92e642696f4a4ac9daadc9646ef3d07ed5e8370c6296d9124217a8542ea018b6f3404133f9d6148610020c3ed3dac54bc888aa797aff607b2644406fafcb3c9b2e9c5435ad067917311962985e3d4e3bf9bc357b3cc5009213de0166f89ea608198ab7efb2f166acf1c7be4c5602195f73359b7aabad7e7b5eeeb007368a8f52e8c805bcaec29d3c6e58ce0b785c6745fc0a0982616b37e7b8eb0feb6ed7761c07352bfc233bdb9fa51248802cd741c89a21c1213bd7adcd4f6c5ce24b11b3cf50fed64d9998bfa1ece84d7a785d5ddef52303299a0c1fd8c56cb7f1eabfa547ff0905a4e9ebbb767e797e832a3378b907398382", @ANYRESDEC, @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@private=0xa010102, @remote, 0x1, "c32b857e9db768101d6da0cb4ba895655da240019f15cdb24112641cb5b04d06", 0x3, 0x8d9f, 0xd}, 0x3c) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000240)={0x19, 0x3d24, 0x1575, 0x0, 0x0, 0xfffe}) 33.613653665s ago: executing program 0 (id=8893): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4c24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$sock(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)="5fe1b79eee488b5f9e4f89bb211d18ee71ef023c2eeab16f21a4ceb7751a6ca96815d0b2ddd891e3e97b86e0dcd9f7ebbc931f5f4e493d567f14eb913b", 0x3d}, {&(0x7f0000000100)="0fd1be6770", 0x5}, {&(0x7f0000000300)="6326a9e12d1f0c0f1dcb47b57f2e9e5dc5d58236f397a3b3eff8b3f0e9aa110c70ce55", 0x23}], 0x3}, 0x4000800) 33.572940676s ago: executing program 32 (id=8893): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4c24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$sock(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)="5fe1b79eee488b5f9e4f89bb211d18ee71ef023c2eeab16f21a4ceb7751a6ca96815d0b2ddd891e3e97b86e0dcd9f7ebbc931f5f4e493d567f14eb913b", 0x3d}, {&(0x7f0000000100)="0fd1be6770", 0x5}, {&(0x7f0000000300)="6326a9e12d1f0c0f1dcb47b57f2e9e5dc5d58236f397a3b3eff8b3f0e9aa110c70ce55", 0x23}], 0x3}, 0x4000800) 2.955260553s ago: executing program 2 (id=9481): r0 = open(0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468"], 0xa8}}, 0x0) 2.718787947s ago: executing program 1 (id=9487): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsmount(0xffffffffffffffff, 0x0, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'ip6gre0\x00', 0x0}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb00182", 0xb}], 0x1}}], 0x1, 0x20008000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x39}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000000000000000000000000000000000000000000d9cec175b3e54c5d43e9e617f9db7b84790f6f6606dea280858295c3d66a8930b269e85ac0320d05f0f83da99af09e0d2dfde9562dee36967ab234e2643daaf885c2"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x3b2}, 0x0, 0x0, 0x800000, 0x2, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095", @ANYBLOB="4b92e642696f4a4ac9daadc9646ef3d07ed5e8370c6296d9124217a8542ea018b6f3404133f9d6148610020c3ed3dac54bc888aa797aff607b2644406fafcb3c9b2e9c5435ad067917311962985e3d4e3bf9bc357b3cc5009213de0166f89ea608198ab7efb2f166acf1c7be4c5602195f73359b7aabad7e7b5eeeb007368a8f52e8c805bcaec29d3c6e58ce0b785c6745fc0a0982616b37e7b8eb0feb6ed7761c07352bfc233bdb9fa51248802cd741c89a21c1213bd7adcd4f6c5ce24b11b3cf50fed64d9998bfa1ece84d7a785d5ddef52303299a0c1fd8c56cb7f1eabfa547ff0905a4e9ebbb767e797e832a3378b907398382", @ANYRESDEC, @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@private=0xa010102, @remote, 0x1, "c32b857e9db768101d6da0cb4ba895655da240019f15cdb24112641cb5b04d06", 0x3, 0x8d9f, 0xd}, 0x3c) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000240)={0x19, 0x3d24, 0x1575, 0x0, 0x0, 0xfffe}) 2.57553175s ago: executing program 1 (id=9491): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) 2.018535921s ago: executing program 2 (id=9500): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\b\x00\x00'], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r1, 0x0, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x48) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x81) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="180500000000000000000000860c6e94b7ee3afad73700000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff97420200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="283ff80d", @ANYRES16=r7, @ANYBLOB="01002abd7000f9dbdf2501000000000000000b000000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r8 = socket(0x2, 0x2, 0x1) readahead(r3, 0x1ff, 0x40) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x200000, &(0x7f0000000740)=ANY=[@ANYBLOB="747261ff700f0cbb21df31646e6f3dd07bea4ad0af23d9113d86e024d65bbc937f43a4557426bb8b96ca31321d1feaae57d0a8980ac7dc14c38860b5dad27145449bd50f92e07d8620b1745dfe23ac263274e64c88381ed495ea2634a5e5df3caefc7c754edeeb3d4ad7d421", @ANYRES16=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000040b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r9}, 0x18) 1.796498555s ago: executing program 2 (id=9504): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x10, 0x7f, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x20, 0x70, 0x8}}}}}]}}]}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.573565049s ago: executing program 1 (id=9507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x10, 0x7f, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x20, 0x70, 0x8}}}}}]}}]}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.076219579s ago: executing program 2 (id=9511): r0 = open(0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468"], 0xa8}}, 0x0) 1.04109904s ago: executing program 3 (id=9512): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e24, @empty}}, 0x0, 0x20000000005, 0x2e, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000007fffffff00000000000000230000000900"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240087f9, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r4 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xc1, 0x0, 0xffffffffffffffff, 0x21, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={&(0x7f0000000640)}, 0x0, 0x0, 0x4, 0x4, 0x200, 0x0, 0x0, 0x0, 0x2}, r2, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000b80)={0xa21, 0xffffffffffff0001, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095", @ANYRES16=r3, @ANYRES8=r5, @ANYRESOCT=r4], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000007c, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x6, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r8}, 0x10) write$cgroup_subtree(r7, &(0x7f00000005c0)=ANY=[], 0xfdef) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r11, 0x2405, r7) tkill(r2, 0x7) r12 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r12, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r13 = syz_io_uring_setup(0x495, &(0x7f0000000a40)={0x0, 0x4661, 0x80, 0x4, 0x20b}, &(0x7f00000000c0)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r13, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close(r0) 1.01824782s ago: executing program 4 (id=9513): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e24, @empty}}, 0x0, 0x20000000005, 0x2e, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000007fffffff00000000000000230000000900"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240087f9, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r4 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xc1, 0x0, 0xffffffffffffffff, 0x21, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={&(0x7f0000000640)}, 0x0, 0x0, 0x4, 0x4, 0x200, 0x0, 0x0, 0x0, 0x2}, r2, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000b80)={0xa21, 0xffffffffffff0001, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095", @ANYRES16=r3, @ANYRES8=r5, @ANYRESOCT=r4], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000007c, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x6, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000600)=ANY=[@ANYRES16=r7, @ANYRES16=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) write$cgroup_subtree(r7, &(0x7f00000005c0)=ANY=[], 0xfdef) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r10, 0x2405, r7) tkill(r2, 0x7) r11 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r11, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r12 = syz_io_uring_setup(0x495, &(0x7f0000000a40)={0x0, 0x4661, 0x80, 0x4, 0x20b}, &(0x7f00000000c0)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r12, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close(r0) 949.802131ms ago: executing program 5 (id=9515): r0 = syz_io_uring_setup(0x14d9, &(0x7f0000000480)={0x0, 0x5121, 0x0, 0x0, 0x2cf}, &(0x7f0000000040), &(0x7f0000000600)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1, 0x0, 0x401}, 0x18) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x2, 0x6b1, &(0x7f0000001100)="$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") r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f0000000bc0)="$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") socket(0x0, 0x5, 0xffff) openat(0xffffffffffffff9c, 0x0, 0x141840, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r3, 0x0, 0x11000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r7, r6, 0x0, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) 905.825222ms ago: executing program 5 (id=9516): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\b\x00\x00'], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r1, 0x0, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x81) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="180500000000000000000000860c6e94b7ee3afad73700000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff97420200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="283ff80d", @ANYRES16=r7, @ANYBLOB="01002abd7000f9dbdf2501000000000000000b000000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r8 = socket(0x2, 0x2, 0x1) readahead(r3, 0x1ff, 0x40) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x200000, &(0x7f0000000740)=ANY=[@ANYBLOB="747261ff700f0cbb21df31646e6f3dd07bea4ad0af23d9113d86e024d65bbc937f43a4557426bb8b96ca31321d1feaae57d0a8980ac7dc14c38860b5dad27145449bd50f92e07d8620b1745dfe23ac263274e64c88381ed495ea2634a5e5df3caefc7c754edeeb3d4ad7d421", @ANYRES16=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000040b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r9}, 0x18) 895.209523ms ago: executing program 4 (id=9517): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, @fallback=0x1e460cdc5f987664, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f00000004c0), &(0x7f0000001c40)=r2}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 794.822944ms ago: executing program 5 (id=9518): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0xffffff8f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f00000007c0)="f2e659a0b00d26c2ee15bbdf21c625bd1e67dee03c0d5862d425c076b8577bb0b50607802b1c3ab21a39c9eb5b6ca033319be5ed6e5d21f0f39fee6a8c98dc0bc39a76bf896971072aec737f00aee7ead58ba42e1f7efe0c445b1d1d5de272c3d774e063c4ade85dd1cf6c8c85472590721bb64c154d689cec735b3ac1b8f96dedff166668803830d4d526e16c68", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1"}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000000580)="b8a2f681134502fe2f602543e7bf1919be9eb6378d8fc15ac1699c0c424dc215b3ec95771fb5a5fa942353cba2caf2acea06b89d8425f97404638b33f24a9b32ab61cd414aa8acaa07ba1b0ea45b2361f8442e6af44fa5e9f10de0aa6dc5d9a9a43a20771650db53f5432f5abd100417", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)}, {&(0x7f0000000340)='\x00', 0x1}, {&(0x7f0000000880)="87141af223663a746046bdc339de81564cdbc76b336cf021dc7c2550b78b77295a37c903f475800f412569837c24ddf6b71979c1b606045926349dcd37c3077cb901d70a559c57ff65222c60c7bb8241d643c290505f23e07dc853"}, {&(0x7f0000000900)="11e08017bdf05fba2a819e173635d3d3e587f540a7622b34ab1069b87bf90bd82a92f94be0630ec07478c68309574d4fb0b1cb100d7d7a2461a1b6ec9df5e794356055d324ef4b72a433640925616bb2bd694ad8453d43bbbb91f97aa18dd52c9372c785e178180fe94fe7cac6ac486e131d1da39a4bab332c8a634ea393612b1be8d2b7d6dece01f6d5891bcf73f2d902c003facf086a1d84c11781cbb3ec57798068f71764c936cd63"}, {&(0x7f00000009c0)="c71924d7ea9bc5971a0c58640e8be19cab192cbcc2e315e72c441a5b0c0bb0fa1728e32d3bd7cd210bc2e5abeba55e9d8626bc0e11a884d140c83c4d40f46ea66a5bdab9888ffe03d639b5c19ae7243b451e6572bacf66051d51b9fb2f22ca8b69f8a53f890035bcb884820df6246909e21fda8c820c1a3a1b678ebfdf"}], 0x2}}], 0x4, 0x4000000) 793.894554ms ago: executing program 1 (id=9519): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 790.841444ms ago: executing program 3 (id=9520): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) close(r0) 773.210885ms ago: executing program 5 (id=9521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 735.051305ms ago: executing program 1 (id=9522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) (fail_nth: 1) 361.838063ms ago: executing program 3 (id=9523): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0xffffff8f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f00000007c0)="f2e659a0b00d26c2ee15bbdf21c625bd1e67dee03c0d5862d425c076b8577bb0b50607802b1c3ab21a39c9eb5b6ca033319be5ed6e5d21f0f39fee6a8c98dc0bc39a76bf896971072aec737f00aee7ead58ba42e1f7efe0c445b1d1d5de272c3d774e063c4ade85dd1cf6c8c85472590721bb64c154d689cec735b3ac1b8f96dedff166668803830d4d526e16c68", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1"}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000000580)="b8a2f681134502fe2f602543e7bf1919be9eb6378d8fc15ac1699c0c424dc215b3ec95771fb5a5fa942353cba2caf2acea06b89d8425f97404638b33f24a9b32ab61cd414aa8acaa07ba1b0ea45b2361f8442e6af44fa5e9f10de0aa6dc5d9a9a43a20771650db53f5432f5abd100417", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)}, {&(0x7f0000000340)='\x00', 0x1}, {&(0x7f0000000880)="87141af223663a746046bdc339de81564cdbc76b336cf021dc7c2550b78b77295a37c903f475800f412569837c24ddf6b71979c1b606045926349dcd37c3077cb901d70a559c57ff65222c60c7bb8241d643c290505f23e07dc853"}, {&(0x7f0000000900)="11e08017bdf05fba2a819e173635d3d3e587f540a7622b34ab1069b87bf90bd82a92f94be0630ec07478c68309574d4fb0b1cb100d7d7a2461a1b6ec9df5e794356055d324ef4b72a433640925616bb2bd694ad8453d43bbbb91f97aa18dd52c9372c785e178180fe94fe7cac6ac486e131d1da39a4bab332c8a634ea393612b1be8d2b7d6dece01f6d5891bcf73f2d902c003facf086a1d84c11781cbb3ec57798068f71764c936cd63"}, {&(0x7f00000009c0)="c71924d7ea9bc5971a0c58640e8be19cab192cbcc2e315e72c441a5b0c0bb0fa1728e32d3bd7cd210bc2e5abeba55e9d8626bc0e11a884d140c83c4d40f46ea66a5bdab9888ffe03d639b5c19ae7243b451e6572bacf66051d51b9fb2f22ca8b69f8a53f890035bcb884820df6246909e21fda8c820c1a3a1b678ebfdf"}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 301.319624ms ago: executing program 1 (id=9524): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000700)={0xf21c, {{0xa, 0x4e24, 0x1, @mcast2, 0x80000001}}, 0x1, 0x1, [{{0xa, 0x4e22, 0xfffffff7, @loopback, 0x3}}]}, 0x110) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000440)=@req3={0x4, 0x40000003, 0x100003, 0xd81, 0x400000, 0x2, 0xd}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000640)=0x13) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) pread64(r3, &(0x7f0000000300)=""/1, 0x1, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) shutdown(r3, 0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 279.356934ms ago: executing program 4 (id=9525): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e24, @empty}}, 0x0, 0x20000000005, 0x2e, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000007fffffff00000000000000230000000900"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240087f9, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) close(r0) 266.955314ms ago: executing program 5 (id=9526): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0xffffff8f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f00000007c0)="f2e659a0b00d26c2ee15bbdf21c625bd1e67dee03c0d5862d425c076b8577bb0b50607802b1c3ab21a39c9eb5b6ca033319be5ed6e5d21f0f39fee6a8c98dc0bc39a76bf896971072aec737f00aee7ead58ba42e1f7efe0c445b1d1d5de272c3d774e063c4ade85dd1cf6c8c85472590721bb64c154d689cec735b3ac1b8f96dedff166668803830d4d526e16c68", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1"}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000000580)="b8a2f681134502fe2f602543e7bf1919be9eb6378d8fc15ac1699c0c424dc215b3ec95771fb5a5fa942353cba2caf2acea06b89d8425f97404638b33f24a9b32ab61cd414aa8acaa07ba1b0ea45b2361f8442e6af44fa5e9f10de0aa6dc5d9a9a43a20771650db53f5432f5abd100417", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)}, {&(0x7f0000000340)='\x00', 0x1}, {&(0x7f0000000880)="87141af223663a746046bdc339de81564cdbc76b336cf021dc7c2550b78b77295a37c903f475800f412569837c24ddf6b71979c1b606045926349dcd37c3077cb901d70a559c57ff65222c60c7bb8241d643c290505f23e07dc853"}, {&(0x7f0000000900)="11e08017bdf05fba2a819e173635d3d3e587f540a7622b34ab1069b87bf90bd82a92f94be0630ec07478c68309574d4fb0b1cb100d7d7a2461a1b6ec9df5e794356055d324ef4b72a433640925616bb2bd694ad8453d43bbbb91f97aa18dd52c9372c785e178180fe94fe7cac6ac486e131d1da39a4bab332c8a634ea393612b1be8d2b7d6dece01f6d5891bcf73f2d902c003facf086a1d84c11781cbb3ec57798068f71764c936cd63"}, {&(0x7f00000009c0)="c71924d7ea9bc5971a0c58640e8be19cab192cbcc2e315e72c441a5b0c0bb0fa1728e32d3bd7cd210bc2e5abeba55e9d8626bc0e11a884d140c83c4d40f46ea66a5bdab9888ffe03d639b5c19ae7243b451e6572bacf66051d51b9fb2f22ca8b69f8a53f890035bcb884820df6246909e21fda8c820c1a3a1b678ebfdf"}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 236.876875ms ago: executing program 4 (id=9527): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000020, &(0x7f00000004c0)=0x3fa, 0x23) bpf$MAP_CREATE(0x0, 0x0, 0x48) munlockall() stat(0x0, &(0x7f0000000400)) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) syz_emit_ethernet(0x72, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x100}, 0x18) 209.733376ms ago: executing program 4 (id=9528): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001d0001008a0000000000000007000000", @ANYRES32=r3, @ANYBLOB="f60012000a0002"], 0x28}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x99cf71e96b06a30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x200000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r7}, 0x10) setitimer(0x2, 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000019c0)={0xf8, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x58}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, {0x2c, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x33d}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xd2}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_SELECT={0x48, 0xe3, 0x0, 0x1, {0x44, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x2}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x1}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x8}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x7f}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xbe6}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x9}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bf9843f69dfc"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xde}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}], @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, 0xf8}, 0x1, 0x0, 0x0, 0x5}, 0x84) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x1c0002, 0x0) write$vga_arbiter(r11, &(0x7f0000000180)=ANY=[@ANYBLOB="6c6f636b206d656d98"], 0x9) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r11, &(0x7f0000000140)) write$vga_arbiter(r11, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xd) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'}) write$UHID_INPUT(r12, &(0x7f0000000980)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x18) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 122.721897ms ago: executing program 2 (id=9529): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsmount(0xffffffffffffffff, 0x0, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'ip6gre0\x00', 0x0}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb00182", 0xb}], 0x1}}], 0x1, 0x20008000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x39}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000000000000000000000000000000000000000000d9cec175b3e54c5d43e9e617f9db7b84790f6f6606dea280858295c3d66a8930b269e85ac0320d05f0f83da99af09e0d2dfde9562dee36967ab234e2643daaf885c2"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x3b2}, 0x0, 0x0, 0x800000, 0x2, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095", @ANYBLOB="4b92e642696f4a4ac9daadc9646ef3d07ed5e8370c6296d9124217a8542ea018b6f3404133f9d6148610020c3ed3dac54bc888aa797aff607b2644406fafcb3c9b2e9c5435ad067917311962985e3d4e3bf9bc357b3cc5009213de0166f89ea608198ab7efb2f166acf1c7be4c5602195f73359b7aabad7e7b5eeeb007368a8f52e8c805bcaec29d3c6e58ce0b785c6745fc0a0982616b37e7b8eb0feb6ed7761c07352bfc233bdb9fa51248802cd741c89a21c1213bd7adcd4f6c5ce24b11b3cf50fed64d9998bfa1ece84d7a785d5ddef52303299a0c1fd8c56cb7f1eabfa547ff0905a4e9ebbb767e797e832a3378b907398382", @ANYRESDEC, @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@private=0xa010102, @remote, 0x1, "c32b857e9db768101d6da0cb4ba895655da240019f15cdb24112641cb5b04d06", 0x3, 0x8d9f, 0xd}, 0x3c) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000240)={0x19, 0x3d24, 0x1575, 0x0, 0x0, 0xfffe}) 122.409387ms ago: executing program 3 (id=9530): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\b\x00\x00'], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r1, 0x0, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x81) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="180500000000000000000000860c6e94b7ee3afad73700000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff97420200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="283ff80d", @ANYRES16=r7, @ANYBLOB="01002abd7000f9dbdf2501000000000000000b000000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r8 = socket(0x2, 0x2, 0x1) readahead(r3, 0x1ff, 0x40) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x200000, &(0x7f0000000740)=ANY=[@ANYBLOB="747261ff700f0cbb21df31646e6f3dd07bea4ad0af23d9113d86e024d65bbc937f43a4557426bb8b96ca31321d1feaae57d0a8980ac7dc14c38860b5dad27145449bd50f92e07d8620b1745dfe23ac263274e64c88381ed495ea2634a5e5df3caefc7c754edeeb3d4ad7d421", @ANYRES16=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000040b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r9}, 0x18) 112.248188ms ago: executing program 5 (id=9531): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x10, 0x7f, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x20, 0x70, 0x8}}}}}]}}]}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 81.150408ms ago: executing program 4 (id=9532): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e24, @empty}}, 0x0, 0x20000000005, 0x2e, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000007fffffff00000000000000230000000900"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240087f9, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r4 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xc1, 0x0, 0xffffffffffffffff, 0x21, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={&(0x7f0000000640)}, 0x0, 0x0, 0x4, 0x4, 0x200, 0x0, 0x0, 0x0, 0x2}, r2, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000b80)={0xa21, 0xffffffffffff0001, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095", @ANYRES16=r3, @ANYRES8=r5, @ANYRESOCT=r4], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000007c, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x6, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r8}, 0x10) write$cgroup_subtree(r7, &(0x7f00000005c0)=ANY=[], 0xfdef) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r11, 0x2405, r7) tkill(r2, 0x7) r12 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r12, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r13 = syz_io_uring_setup(0x495, &(0x7f0000000a40)={0x0, 0x4661, 0x80, 0x4, 0x20b}, &(0x7f00000000c0)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r13, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close(r0) 20.725829ms ago: executing program 3 (id=9533): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000020, &(0x7f00000004c0)=0x3fa, 0x23) bpf$MAP_CREATE(0x0, 0x0, 0x48) munlockall() stat(0x0, &(0x7f0000000400)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) syz_emit_ethernet(0x72, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x100}, 0x18) 20.116859ms ago: executing program 3 (id=9534): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) close(r0) 0s ago: executing program 2 (id=9535): connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0x2, 0x1}}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x2}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7d86}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000041) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) kernel console output (not intermixed with test programs): call=308 compat=0 ip=0x7fc2a57a0417 code=0x7ffc0000 [ 489.508431][ T29] audit: type=1326 audit(1757121037.150:38906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26778 comm="syz.1.8580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc2a579d84a code=0x7ffc0000 [ 489.531952][ T29] audit: type=1326 audit(1757121037.150:38907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26778 comm="syz.1.8580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a579ebe9 code=0x7ffc0000 [ 489.593787][T26794] atomic_op ffff8881043f9128 conn xmit_atomic 0000000000000000 [ 489.738820][T26805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.747529][T26805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.947802][T26820] __nla_validate_parse: 7 callbacks suppressed [ 489.947822][T26820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8590'. [ 489.963221][T26820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8590'. [ 490.003687][T26824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26824 comm=syz.1.8590 [ 490.038493][T26824] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 490.062007][T26820] hub 9-0:1.0: USB hub found [ 490.067891][T26820] hub 9-0:1.0: 8 ports detected [ 490.114249][T26816] lo speed is unknown, defaulting to 1000 [ 490.138324][T26830] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8591'. [ 490.249497][T26832] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8592'. [ 490.275112][ C1] I/O error, dev loop2, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 490.284810][T21393] FAT-fs (loop2): unable to read inode block for updating (i_pos 1050) [ 490.294038][ C1] I/O error, dev loop2, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 490.304716][T21393] FAT-fs (loop2): unable to read inode block for updating (i_pos 1050) [ 490.313024][T21393] FAT-fs (loop2): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 490.397259][T26848] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8598'. [ 490.455995][T26816] chnl_net:caif_netlink_parms(): no params data found [ 490.490092][T26846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8597'. [ 490.598580][T26816] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.605777][T26816] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.636011][T26816] bridge_slave_0: entered allmulticast mode [ 490.661536][T26816] bridge_slave_0: entered promiscuous mode [ 490.701113][T26865] macvtap0: refused to change device tx_queue_len [ 490.710188][T26816] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.717284][T26816] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.759706][T26816] bridge_slave_1: entered allmulticast mode [ 490.775553][T26816] bridge_slave_1: entered promiscuous mode [ 490.784827][T26878] atomic_op ffff888106ee0528 conn xmit_atomic 0000000000000000 [ 490.832773][T26884] @: renamed from vlan0 (while UP) [ 490.871354][T26816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.901160][T26816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.925296][T26888] netlink: 'syz.4.8608': attribute type 4 has an invalid length. [ 490.933185][T26888] netlink: 17 bytes leftover after parsing attributes in process `syz.4.8608'. [ 490.969245][T26816] team0: Port device team_slave_0 added [ 490.983597][T26816] team0: Port device team_slave_1 added [ 491.039312][T26816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.046304][T26816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.072494][T26816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.086928][T26816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.094046][T26816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.120177][T26816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.181620][T26892] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8610'. [ 491.195321][T26816] hsr_slave_0: entered promiscuous mode [ 491.202480][T26816] hsr_slave_1: entered promiscuous mode [ 491.209007][T26816] debugfs: 'hsr0' already exists in 'hsr' [ 491.214769][T26816] Cannot create hsr debugfs directory [ 491.282316][T26895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8611'. [ 491.332850][T26816] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.343315][T26816] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.406299][T26816] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.416707][T26816] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.486223][T26816] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.496843][T26816] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.564746][T26816] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.575145][T26816] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.655272][T26926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8622'. [ 491.687310][T26816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 491.716467][T26816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 491.726836][T26816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 491.736858][T26816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 491.795402][T26943] macvtap0: refused to change device tx_queue_len [ 491.810708][T26816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.825979][T26816] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.842663][ T4993] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.849811][ T4993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.864102][ T4993] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.871271][ T4993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.912185][T26949] atomic_op ffff88812b188d28 conn xmit_atomic 0000000000000000 [ 491.979036][T26816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.091919][T26816] veth0_vlan: entered promiscuous mode [ 492.103445][T26816] veth1_vlan: entered promiscuous mode [ 492.125981][T26816] veth0_macvtap: entered promiscuous mode [ 492.135348][T26816] veth1_macvtap: entered promiscuous mode [ 492.165463][T26816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.182228][T26816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.196548][ T5008] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.208188][ T5008] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.220512][ T5008] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.230705][ T5008] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.315744][T26971] wireguard0: entered promiscuous mode [ 492.321476][T26971] wireguard0: entered allmulticast mode [ 493.218538][T27016] wireguard0: entered promiscuous mode [ 493.224073][T27016] wireguard0: entered allmulticast mode [ 493.570598][T27059] @: renamed from vlan0 (while UP) [ 493.704900][T27069] netlink: 'syz.0.8663': attribute type 4 has an invalid length. [ 494.075838][T27087] netlink: 'syz.1.8670': attribute type 4 has an invalid length. [ 494.105508][T27091] lo speed is unknown, defaulting to 1000 [ 494.284046][ T29] kauditd_printk_skb: 723 callbacks suppressed [ 494.284063][ T29] audit: type=1326 audit(1757121042.090:39631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27094 comm="syz.0.8676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc7b9ebe9 code=0x7ffc0000 [ 494.357235][ T29] audit: type=1326 audit(1757121042.120:39632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27094 comm="syz.0.8676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1fc7b9d550 code=0x7ffc0000 [ 494.381220][ T29] audit: type=1326 audit(1757121042.120:39633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27094 comm="syz.0.8676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1fc7ba0417 code=0x7ffc0000 [ 494.405364][ T29] audit: type=1326 audit(1757121042.120:39634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27094 comm="syz.0.8676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1fc7b9ebe9 code=0x7ffc0000 [ 494.428905][ T29] audit: type=1326 audit(1757121042.120:39635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27094 comm="syz.0.8676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1fc7ba0417 code=0x7ffc0000 [ 494.452549][ T29] audit: type=1326 audit(1757121042.120:39636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27094 comm="syz.0.8676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1fc7b9d84a code=0x7ffc0000 [ 494.476007][ T29] audit: type=1326 audit(1757121042.120:39637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27094 comm="syz.0.8676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc7b9ebe9 code=0x7ffc0000 [ 494.499624][ T29] audit: type=1326 audit(1757121042.120:39638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27094 comm="syz.0.8676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1fc7b9ebe9 code=0x7ffc0000 [ 494.523298][ T29] audit: type=1326 audit(1757121042.120:39639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27094 comm="syz.0.8676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc7b9ebe9 code=0x7ffc0000 [ 494.547084][ T29] audit: type=1326 audit(1757121042.120:39640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27094 comm="syz.0.8676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1fc7b9ebe9 code=0x7ffc0000 [ 494.715118][T27116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.725073][T27116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.122196][ T5008] bridge_slave_1: left allmulticast mode [ 495.129044][ T5008] bridge_slave_1: left promiscuous mode [ 495.134795][ T5008] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.145536][ T5008] bridge_slave_0: left allmulticast mode [ 495.151402][ T5008] bridge_slave_0: left promiscuous mode [ 495.157289][ T5008] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.175961][ T5008] tipc: Resetting bearer [ 495.431595][ T5008] tipc: Disabling bearer [ 495.436392][T27137] netlink: 'syz.3.8693': attribute type 4 has an invalid length. [ 495.445238][T27137] __nla_validate_parse: 7 callbacks suppressed [ 495.445250][T27137] netlink: 17 bytes leftover after parsing attributes in process `syz.3.8693'. [ 495.668035][ T5008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.687264][ T5008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.721274][ T5008] bond0 (unregistering): Released all slaves [ 495.782488][ T5008] tipc: Left network mode [ 495.797355][ T5008] hsr_slave_0: left promiscuous mode [ 495.817872][ T5008] hsr_slave_1: left promiscuous mode [ 495.823713][ T5008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.831530][ T5008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.878723][ T5008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.886300][ T5008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.936009][ T5008] veth1_macvtap: left promiscuous mode [ 495.941825][ T5008] veth0_macvtap: left promiscuous mode [ 495.947534][ T5008] veth1_vlan: left promiscuous mode [ 495.956398][ T5008] veth0_vlan: left promiscuous mode [ 495.975224][T27161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.986842][T27159] loop4: detected capacity change from 0 to 2048 [ 495.996879][T27161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.035827][T27159] EXT4-fs (loop4): failed to initialize system zone (-117) [ 496.053985][T27159] EXT4-fs (loop4): mount failed [ 496.194724][ T5008] team0 (unregistering): Port device team_slave_1 removed [ 496.205159][ T5008] team0 (unregistering): Port device C removed [ 496.542751][ T5008] IPVS: stop unused estimator thread 0... [ 496.594609][ T5008] bridge_slave_1: left allmulticast mode [ 496.600478][ T5008] bridge_slave_1: left promiscuous mode [ 496.606505][ T5008] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.669089][ T5008] bridge_slave_0: left allmulticast mode [ 496.674976][ T5008] bridge_slave_0: left promiscuous mode [ 496.680792][ T5008] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.706845][ T5008] batman_adv: batadv0: Interface deactivated: gretap1 [ 496.715428][T27183] netlink: 'syz.0.8708': attribute type 4 has an invalid length. [ 496.723321][T27183] netlink: 17 bytes leftover after parsing attributes in process `syz.0.8708'. [ 496.908821][ T5008] batman_adv: batadv0: Removing interface: gretap1 [ 497.000688][T27193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8716'. [ 497.009927][T27193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8716'. [ 497.087067][ T5008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.106114][ T5008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.112248][T27197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27197 comm=syz.2.8716 [ 497.133194][ T5008] bond0 (unregistering): Released all slaves [ 497.134603][T27197] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 497.156374][T27197] hub 9-0:1.0: USB hub found [ 497.161793][T27197] hub 9-0:1.0: 8 ports detected [ 497.211632][ T5008] hsr_slave_0: left promiscuous mode [ 497.227607][ T5008] hsr_slave_1: left promiscuous mode [ 497.244151][ T5008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.251958][ T5008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.326620][ T5008] veth1_macvtap: left promiscuous mode [ 497.346569][ T5008] veth0_macvtap: left promiscuous mode [ 497.437030][T27212] loop2: detected capacity change from 0 to 2048 [ 497.514859][T27212] EXT4-fs (loop2): failed to initialize system zone (-117) [ 497.557756][T27212] EXT4-fs (loop2): mount failed [ 497.576059][ T5008] team0 (unregistering): Port device team_slave_1 removed [ 497.590084][ T5008] team0 (unregistering): Port device C removed [ 497.979961][ T5008] IPVS: stop unused estimator thread 0... [ 498.098538][T27241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8732'. [ 498.150595][T27245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.160791][T27245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.735156][T27280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8743'. [ 498.955078][T27295] @: renamed from vlan0 (while UP) [ 498.977950][T27296] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8751'. [ 499.031562][T27296] netlink: 'syz.3.8751': attribute type 4 has an invalid length. [ 499.039382][T27296] netlink: 17 bytes leftover after parsing attributes in process `syz.3.8751'. [ 499.123270][T27304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.149545][T27304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.374664][T27315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8759'. [ 499.673204][ T29] kauditd_printk_skb: 652 callbacks suppressed [ 499.673218][ T29] audit: type=1326 audit(1757121047.480:40293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27330 comm="syz.4.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34cf7ebe9 code=0x7ffc0000 [ 499.703627][ T29] audit: type=1326 audit(1757121047.480:40294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27330 comm="syz.4.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34cf7ebe9 code=0x7ffc0000 [ 500.031298][ T29] audit: type=1326 audit(1757121047.480:40295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27330 comm="syz.4.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa34cf7ebe9 code=0x7ffc0000 [ 500.054932][ T29] audit: type=1326 audit(1757121047.480:40296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27330 comm="syz.4.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34cf7ebe9 code=0x7ffc0000 [ 500.078962][ T29] audit: type=1326 audit(1757121047.480:40297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27330 comm="syz.4.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa34cf7ebe9 code=0x7ffc0000 [ 500.102677][ T29] audit: type=1326 audit(1757121047.480:40298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27330 comm="syz.4.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34cf7ebe9 code=0x7ffc0000 [ 500.126339][ T29] audit: type=1326 audit(1757121047.480:40299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27330 comm="syz.4.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa34cf7ebe9 code=0x7ffc0000 [ 500.150174][ T29] audit: type=1326 audit(1757121047.480:40300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27330 comm="syz.4.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34cf7ebe9 code=0x7ffc0000 [ 500.173954][ T29] audit: type=1326 audit(1757121047.480:40301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27330 comm="syz.4.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fa34cf7ebe9 code=0x7ffc0000 [ 500.197686][ T29] audit: type=1326 audit(1757121047.480:40302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27330 comm="syz.4.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34cf7ebe9 code=0x7ffc0000 [ 500.305741][T27325] chnl_net:caif_netlink_parms(): no params data found [ 500.319107][T27355] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8770'. [ 500.429159][T27355] netlink: 'syz.2.8770': attribute type 4 has an invalid length. [ 500.440332][ C1] I/O error, dev loop0, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 500.449735][T20642] FAT-fs (loop0): unable to read inode block for updating (i_pos 1050) [ 500.488799][ C1] I/O error, dev loop0, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 500.498204][T20642] FAT-fs (loop0): unable to read inode block for updating (i_pos 1050) [ 500.506678][T20642] FAT-fs (loop0): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 500.587782][T27364] __nla_validate_parse: 1 callbacks suppressed [ 500.587862][T27364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8771'. [ 500.701752][T27325] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.709092][T27325] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.720510][T27325] bridge_slave_0: entered allmulticast mode [ 500.727440][T27325] bridge_slave_0: entered promiscuous mode [ 500.735691][T27325] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.742821][T27325] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.752919][T27325] bridge_slave_1: entered allmulticast mode [ 500.759650][T27325] bridge_slave_1: entered promiscuous mode [ 500.805199][T27379] macvtap0: refused to change device tx_queue_len [ 500.835893][T27325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.851589][ T4993] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.862080][ T4993] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.880398][T27389] atomic_op ffff88811a296128 conn xmit_atomic 0000000000000000 [ 500.893512][T27325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.956412][T27325] team0: Port device team_slave_0 added [ 500.979994][ T4993] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.990402][ T4993] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.009864][T27325] team0: Port device team_slave_1 added [ 501.043965][T27325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.051103][T27325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.077124][T27325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.093416][ T4993] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.103926][ T4993] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.119541][T27325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.126508][T27325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.152514][T27325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.191878][T27325] hsr_slave_0: entered promiscuous mode [ 501.207066][T27325] hsr_slave_1: entered promiscuous mode [ 501.214381][T27325] debugfs: 'hsr0' already exists in 'hsr' [ 501.220168][T27325] Cannot create hsr debugfs directory [ 501.229952][ T4993] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.240445][ T4993] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.362772][T27406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8786'. [ 501.515550][ T4993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.531080][ T4993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.541393][ T4993] bond0 (unregistering): Released all slaves [ 501.627696][ T4993] hsr_slave_0: left promiscuous mode [ 501.638225][ T4993] hsr_slave_1: left promiscuous mode [ 501.643887][ T4993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.651737][ T4993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.707076][ T4993] veth1_macvtap: left promiscuous mode [ 501.715808][ T4993] veth0_macvtap: left promiscuous mode [ 501.723174][ T4993] veth1_vlan: left promiscuous mode [ 501.728839][ T4993] veth0_vlan: left promiscuous mode [ 501.835062][T27430] netlink: 'syz.3.8793': attribute type 4 has an invalid length. [ 501.843139][T27430] netlink: 17 bytes leftover after parsing attributes in process `syz.3.8793'. [ 501.901194][ T4993] team0 (unregistering): Port device team_slave_1 removed [ 501.934750][ T4993] team0 (unregistering): Port device team_slave_0 removed [ 502.005056][T27428] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8793'. [ 502.097956][T27447] wireguard0: entered promiscuous mode [ 502.103510][T27447] wireguard0: entered allmulticast mode [ 502.121606][T27450] macvtap0: refused to change device tx_queue_len [ 502.235167][T27460] atomic_op ffff8881023e7528 conn xmit_atomic 0000000000000000 [ 502.262278][T27325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 502.271806][T27325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 502.290707][T27325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 502.302521][T27325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 502.359570][T27325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.376791][T27325] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.392124][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.399350][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.412561][ T5008] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.419755][ T5008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.509624][T27325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.606832][T27325] veth0_vlan: entered promiscuous mode [ 502.617362][T27325] veth1_vlan: entered promiscuous mode [ 502.638788][T27325] veth0_macvtap: entered promiscuous mode [ 502.646807][T27325] veth1_macvtap: entered promiscuous mode [ 502.660539][T27325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.673108][T27325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.685705][ T4988] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.694974][ T4988] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.705177][ T4988] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.719290][ T4988] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.901926][T27492] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8810'. [ 502.931448][T27492] netlink: 'syz.0.8810': attribute type 4 has an invalid length. [ 502.939302][T27492] netlink: 17 bytes leftover after parsing attributes in process `syz.0.8810'. [ 503.121979][T27506] loop4: detected capacity change from 0 to 2048 [ 503.203882][T27510] wireguard0: entered promiscuous mode [ 503.209745][T27510] wireguard0: entered allmulticast mode [ 503.289337][T27506] EXT4-fs (loop4): failed to initialize system zone (-117) [ 503.296993][T27506] EXT4-fs (loop4): mount failed [ 503.426291][T27529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8823'. [ 503.435265][T27529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8823'. [ 503.468516][T27529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27529 comm=syz.0.8823 [ 503.484392][T27529] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 503.497305][T27529] hub 9-0:1.0: USB hub found [ 503.502415][T27529] hub 9-0:1.0: 8 ports detected [ 503.542808][T27532] macvtap0: refused to change device tx_queue_len [ 503.618462][T27534] atomic_op ffff88812a409d28 conn xmit_atomic 0000000000000000 [ 504.369316][T27560] wireguard0: entered promiscuous mode [ 504.374936][T27560] wireguard0: entered allmulticast mode [ 504.615512][T27579] loop0: detected capacity change from 0 to 2048 [ 504.678205][T27579] EXT4-fs (loop0): failed to initialize system zone (-117) [ 504.685517][T27579] EXT4-fs (loop0): mount failed [ 504.950792][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 504.950870][ T29] audit: type=1326 audit(1757121052.760:40534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27600 comm="syz.4.8849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34cf7ebe9 code=0x7ffc0000 [ 505.025670][ T29] audit: type=1326 audit(1757121052.790:40535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27600 comm="syz.4.8849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34cf7ebe9 code=0x7ffc0000 [ 505.049650][ T29] audit: type=1326 audit(1757121052.790:40536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27600 comm="syz.4.8849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa34cf7ebe9 code=0x7ffc0000 [ 505.073272][ T29] audit: type=1326 audit(1757121052.790:40537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27600 comm="syz.4.8849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34cf7ebe9 code=0x7ffc0000 [ 505.097116][ T29] audit: type=1326 audit(1757121052.790:40538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27600 comm="syz.4.8849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34cf7ebe9 code=0x7ffc0000 [ 505.121306][ T29] audit: type=1326 audit(1757121052.790:40539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27600 comm="syz.4.8849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa34cf7ebe9 code=0x7ffc0000 [ 505.145031][ T29] audit: type=1326 audit(1757121052.790:40540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27600 comm="syz.4.8849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34cf7ebe9 code=0x7ffc0000 [ 505.169138][ T29] audit: type=1326 audit(1757121052.790:40541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27600 comm="syz.4.8849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34cf7ebe9 code=0x7ffc0000 [ 505.193003][ T29] audit: type=1326 audit(1757121052.790:40542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27600 comm="syz.4.8849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa34cf7ebe9 code=0x7ffc0000 [ 505.216782][ T29] audit: type=1326 audit(1757121052.790:40543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27600 comm="syz.4.8849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34cf7ebe9 code=0x7ffc0000 [ 505.513371][T27628] netlink: 'syz.2.8861': attribute type 10 has an invalid length. [ 505.524401][T27628] team0: Device hsr_slave_0 failed to register rx_handler [ 505.727047][T27637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8865'. [ 505.815704][T27644] loop2: detected capacity change from 0 to 1024 [ 505.908266][T27644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 505.924753][T27644] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.971646][T27644] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.8868: lblock 0 mapped to illegal pblock 0 (length 1) [ 506.000422][T27644] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.8868: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 506.043835][T27656] netlink: 'syz.1.8873': attribute type 10 has an invalid length. [ 506.056292][T27656] team0: Port device dummy0 added [ 506.063817][T27656] netlink: 'syz.1.8873': attribute type 10 has an invalid length. [ 506.077516][T27656] team0: Port device dummy0 removed [ 506.085712][T27656] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 506.102300][T26816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 506.616720][T27682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8885'. [ 506.625792][T27682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8885'. [ 506.704403][T27682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27682 comm=syz.4.8885 [ 506.745657][T27682] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 506.759196][T27682] hub 9-0:1.0: USB hub found [ 506.763962][T27682] hub 9-0:1.0: 8 ports detected [ 507.436135][ T5008] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.533915][ T5008] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.607147][ T5008] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.689277][ T5008] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.859966][ T5008] bridge_slave_1: left allmulticast mode [ 507.865669][ T5008] bridge_slave_1: left promiscuous mode [ 507.871585][ T5008] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.923966][T27734] FAULT_INJECTION: forcing a failure. [ 507.923966][T27734] name failslab, interval 1, probability 0, space 0, times 0 [ 507.927455][ T5008] bridge_slave_0: left allmulticast mode [ 507.936647][T27734] CPU: 1 UID: 0 PID: 27734 Comm: syz.1.8903 Not tainted syzkaller #0 PREEMPT(voluntary) [ 507.936689][T27734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 507.936745][T27734] Call Trace: [ 507.936753][T27734] [ 507.936763][T27734] __dump_stack+0x1d/0x30 [ 507.936788][T27734] dump_stack_lvl+0xe8/0x140 [ 507.936859][T27734] dump_stack+0x15/0x1b [ 507.936879][T27734] should_fail_ex+0x265/0x280 [ 507.936942][T27734] should_failslab+0x8c/0xb0 [ 507.936980][T27734] kmem_cache_alloc_noprof+0x50/0x310 [ 507.937070][T27734] ? prepare_creds+0x37/0x4c0 [ 507.937105][T27734] prepare_creds+0x37/0x4c0 [ 507.937137][T27734] copy_creds+0x8f/0x3f0 [ 507.937170][T27734] copy_process+0x658/0x2000 [ 507.937233][T27734] ? copy_clone_args_from_user+0x3ce/0x490 [ 507.937282][T27734] kernel_clone+0x16c/0x5c0 [ 507.937337][T27734] __se_sys_clone3+0x1c2/0x200 [ 507.937394][T27734] __x64_sys_clone3+0x31/0x40 [ 507.937509][T27734] x64_sys_call+0x1fc9/0x2ff0 [ 507.937539][T27734] do_syscall_64+0xd2/0x200 [ 507.937654][T27734] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 507.937692][T27734] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 507.937734][T27734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.937764][T27734] RIP: 0033:0x7fc2a579ebe9 [ 507.937794][T27734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.937818][T27734] RSP: 002b:00007fc2a41fef08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 507.937844][T27734] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc2a579ebe9 [ 507.937862][T27734] RDX: 00007fc2a41fef20 RSI: 0000000000000058 RDI: 00007fc2a41fef20 [ 507.937880][T27734] RBP: 00007fc2a41ff090 R08: 0000000000000000 R09: 0000000000000058 [ 507.937965][T27734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.938049][T27734] R13: 00007fc2a59d6038 R14: 00007fc2a59d5fa0 R15: 00007ffd3258bab8 [ 507.938076][T27734] [ 508.139465][ T5008] bridge_slave_0: left promiscuous mode [ 508.145146][ T5008] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.423585][ T5008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.444292][ T5008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.479168][ T5008] bond0 (unregistering): Released all slaves [ 508.545093][ T5008] hsr_slave_0: left promiscuous mode [ 508.554268][ T5008] hsr_slave_1: left promiscuous mode [ 508.572873][ T5008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.580430][ T5008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.600033][ T5008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.607509][ T5008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.635605][ T5008] veth1_macvtap: left promiscuous mode [ 508.641959][ T5008] veth0_macvtap: left promiscuous mode [ 508.659504][ T5008] veth1_vlan: left promiscuous mode [ 508.664937][ T5008] veth0_vlan: left promiscuous mode [ 508.840759][ T5008] team0 (unregistering): Port device team_slave_1 removed [ 508.852262][ T5008] team0 (unregistering): Port device team_slave_0 removed [ 509.033791][T27783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8922'. [ 509.042890][T27783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8922'. [ 509.084727][T27709] chnl_net:caif_netlink_parms(): no params data found [ 509.150850][T27783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27783 comm=syz.4.8922 [ 509.160207][T27793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8925'. [ 509.172249][T27793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8925'. [ 509.188665][T27783] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 509.210545][T27783] hub 9-0:1.0: USB hub found [ 509.216018][T27783] hub 9-0:1.0: 8 ports detected [ 509.238409][T27709] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.245618][T27709] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.267635][T27709] bridge_slave_0: entered allmulticast mode [ 509.274400][T27709] bridge_slave_0: entered promiscuous mode [ 509.284351][T27709] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.291602][T27709] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.295912][T27797] loop2: detected capacity change from 0 to 512 [ 509.306218][T27709] bridge_slave_1: entered allmulticast mode [ 509.318588][T27709] bridge_slave_1: entered promiscuous mode [ 509.337055][T27797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.351888][T27797] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.365398][T27797] EXT4-fs error (device loop2): ext4_empty_dir:3077: inode #12: comm +}[@: invalid size [ 509.388312][T27803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8927'. [ 509.398290][T27793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27793 comm=syz.3.8925 [ 509.414491][T27709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.418541][T26816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.440609][T27709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.454266][T27793] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 509.504151][T27793] hub 9-0:1.0: USB hub found [ 509.525696][T27793] hub 9-0:1.0: 8 ports detected [ 509.533403][T27709] team0: Port device team_slave_0 added [ 509.553834][T27709] team0: Port device team_slave_1 added [ 509.630254][T27709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.637273][T27709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.663299][T27709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.687105][T27709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.694117][T27709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.720119][T27709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.812872][T27709] hsr_slave_0: entered promiscuous mode [ 509.819792][T27709] hsr_slave_1: entered promiscuous mode [ 509.826460][T27709] debugfs: 'hsr0' already exists in 'hsr' [ 509.832498][T27709] Cannot create hsr debugfs directory [ 509.882053][T27824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8937'. [ 509.890981][T27824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8937'. [ 509.930331][T27832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.942437][T27833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27833 comm=syz.4.8937 [ 509.949389][T27832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.975868][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 509.975887][ T29] audit: type=1326 audit(1757121057.780:40852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27834 comm="syz.3.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996287ebe9 code=0x7ffc0000 [ 510.005985][ T29] audit: type=1326 audit(1757121057.780:40853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27834 comm="syz.3.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f996287ebe9 code=0x7ffc0000 [ 510.029655][ T29] audit: type=1326 audit(1757121057.780:40854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27834 comm="syz.3.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996287ebe9 code=0x7ffc0000 [ 510.053339][ T29] audit: type=1326 audit(1757121057.780:40855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27834 comm="syz.3.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f996287ebe9 code=0x7ffc0000 [ 510.077219][ T29] audit: type=1326 audit(1757121057.780:40856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27834 comm="syz.3.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996287ebe9 code=0x7ffc0000 [ 510.101392][ T29] audit: type=1326 audit(1757121057.780:40857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27834 comm="syz.3.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f996287ebe9 code=0x7ffc0000 [ 510.125126][ T29] audit: type=1326 audit(1757121057.780:40858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27834 comm="syz.3.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996287ebe9 code=0x7ffc0000 [ 510.148771][ T29] audit: type=1326 audit(1757121057.780:40859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27834 comm="syz.3.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f996287ebe9 code=0x7ffc0000 [ 510.172458][ T29] audit: type=1326 audit(1757121057.780:40860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27834 comm="syz.3.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996287ebe9 code=0x7ffc0000 [ 510.196118][ T29] audit: type=1326 audit(1757121057.780:40861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27834 comm="syz.3.8940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f996287ebe9 code=0x7ffc0000 [ 510.251987][T27824] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 510.265434][T27824] hub 9-0:1.0: USB hub found [ 510.270145][T27824] hub 9-0:1.0: 8 ports detected [ 510.428128][T27709] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 510.452113][T27709] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 510.465318][T27848] netlink: 'syz.3.8945': attribute type 3 has an invalid length. [ 510.473348][T27709] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 510.494258][T27709] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 510.652203][T27709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.672575][T27709] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.687451][ T5023] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.694586][ T5023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.749434][ T5023] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.756561][ T5023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.781083][T27709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 510.791723][T27709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 510.835213][T27882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.848771][T27882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.950616][T27709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.997413][T27899] __nla_validate_parse: 2 callbacks suppressed [ 510.997510][T27899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8961'. [ 511.037547][T27907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8963'. [ 511.046725][T27907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8963'. [ 511.084069][T27907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27907 comm=syz.4.8963 [ 511.104998][T27907] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 511.120226][T27907] hub 9-0:1.0: USB hub found [ 511.129445][T27907] hub 9-0:1.0: 8 ports detected [ 511.306595][T27709] veth0_vlan: entered promiscuous mode [ 511.323506][T27709] veth1_vlan: entered promiscuous mode [ 511.366025][T27709] veth0_macvtap: entered promiscuous mode [ 511.380116][T27709] veth1_macvtap: entered promiscuous mode [ 511.402250][T27709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.417387][T27709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.447629][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.483335][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.516242][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.534474][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.559858][T27943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8973'. [ 511.568817][T27943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8973'. [ 511.577719][T27938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8972'. [ 511.628511][T27949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27949 comm=syz.4.8973 [ 511.676752][T27943] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 511.745999][T27943] hub 9-0:1.0: USB hub found [ 511.752615][T27943] hub 9-0:1.0: 8 ports detected [ 511.788758][T27957] atomic_op ffff888106efc128 conn xmit_atomic 0000000000000000 [ 511.850290][T27965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.859555][T27965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.940702][T27976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8984'. [ 511.949818][T27976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8984'. [ 511.981403][T27979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8983'. [ 511.994365][T27976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27976 comm=syz.2.8984 [ 512.021731][T27976] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 512.043426][T27976] hub 9-0:1.0: USB hub found [ 512.059006][T27976] hub 9-0:1.0: 8 ports detected [ 512.163358][T27991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8988'. [ 512.200968][T27991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27991 comm=syz.1.8988 [ 512.215454][T27992] loop2: detected capacity change from 0 to 2048 [ 512.280779][T27991] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 512.293583][T27991] hub 9-0:1.0: USB hub found [ 512.298462][T27991] hub 9-0:1.0: 8 ports detected [ 512.326407][T27992] EXT4-fs (loop2): failed to initialize system zone (-117) [ 512.351754][T27992] EXT4-fs (loop2): mount failed [ 512.621412][T28013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28013 comm=syz.5.8997 [ 512.666685][T28013] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 512.711034][T28013] hub 9-0:1.0: USB hub found [ 512.723567][T28013] hub 9-0:1.0: 8 ports detected [ 512.817028][T28023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.839281][T28023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.973090][T28032] wireguard0: entered promiscuous mode [ 512.978949][T28032] wireguard0: entered allmulticast mode [ 513.218088][T28018] chnl_net:caif_netlink_parms(): no params data found [ 513.297328][T28018] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.304622][T28018] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.326070][T28018] bridge_slave_0: entered allmulticast mode [ 513.336521][T28018] bridge_slave_0: entered promiscuous mode [ 513.343873][T28018] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.351103][T28018] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.360034][T28018] bridge_slave_1: entered allmulticast mode [ 513.366866][T28018] bridge_slave_1: entered promiscuous mode [ 513.420084][ T4993] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.430891][ T4993] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.455216][T28018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.470410][T28018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.509187][ T4993] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.519700][ T4993] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.555687][T28018] team0: Port device team_slave_0 added [ 513.575908][ T4993] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.586488][ T4993] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.646873][T28018] team0: Port device team_slave_1 added [ 513.685816][ T4993] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.696277][ T4993] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.711319][T28018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.718349][T28018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.744334][T28018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.756708][T28018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.763815][T28018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.789894][T28018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.900136][T28018] hsr_slave_0: entered promiscuous mode [ 513.906250][T28018] hsr_slave_1: entered promiscuous mode [ 513.913050][T28018] debugfs: 'hsr0' already exists in 'hsr' [ 513.918947][T28018] Cannot create hsr debugfs directory [ 513.958336][ T4993] bridge_slave_1: left allmulticast mode [ 513.964097][ T4993] bridge_slave_1: left promiscuous mode [ 513.969947][ T4993] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.985398][ T4993] bridge_slave_0: left promiscuous mode [ 513.991512][ T4993] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.006508][ T4993] tipc: Resetting bearer [ 514.121103][ T4993] tipc: Disabling bearer [ 514.212318][ T4993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.235228][ T4993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.256107][ T4993] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 514.268648][ T4993] bond0 (unregistering): Released all slaves [ 514.285510][ T3365] infiniband syz2: ib_query_port failed (-19) [ 514.310461][T28096] wireguard0: entered promiscuous mode [ 514.316038][T28096] wireguard0: entered allmulticast mode [ 514.359207][ T4993] tipc: Left network mode [ 514.376858][ T4993] hsr_slave_0: left promiscuous mode [ 514.382752][ T4993] hsr_slave_1: left promiscuous mode [ 514.390581][ T4993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.398403][ T4993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.437189][ T4993] veth1_macvtap: left promiscuous mode [ 514.447793][ T4993] veth0_macvtap: left promiscuous mode [ 514.453396][ T4993] veth1_vlan: left promiscuous mode [ 514.477925][ T4993] veth0_vlan: left promiscuous mode [ 514.590103][ T4993] team0 (unregistering): Port device team_slave_1 removed [ 514.609554][ T4993] team0 (unregistering): Port device team_slave_0 removed [ 514.915254][T28122] loop4: detected capacity change from 0 to 2048 [ 514.934438][T28122] EXT4-fs (loop4): failed to initialize system zone (-117) [ 514.948700][ T4993] IPVS: stop unused estimator thread 0... [ 514.960105][T28122] EXT4-fs (loop4): mount failed [ 515.005643][T28018] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 515.018793][ T29] kauditd_printk_skb: 446 callbacks suppressed [ 515.018830][ T29] audit: type=1326 audit(1757121062.830:41308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.3.9037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996287ebe9 code=0x7ffc0000 [ 515.020642][T28018] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 515.025147][ T29] audit: type=1326 audit(1757121062.830:41309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.3.9037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996287ebe9 code=0x7ffc0000 [ 515.112162][T28018] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 515.134945][T28018] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 515.141721][ T29] audit: type=1326 audit(1757121062.890:41310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.3.9037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f996287ebe9 code=0x7ffc0000 [ 515.141775][ T29] audit: type=1326 audit(1757121062.890:41311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.3.9037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996287ebe9 code=0x7ffc0000 [ 515.141869][ T29] audit: type=1326 audit(1757121062.890:41312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.3.9037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996287ebe9 code=0x7ffc0000 [ 515.141958][ T29] audit: type=1326 audit(1757121062.890:41313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.3.9037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f996287ebe9 code=0x7ffc0000 [ 515.141994][ T29] audit: type=1326 audit(1757121062.890:41314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.3.9037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996287ebe9 code=0x7ffc0000 [ 515.260002][ T29] audit: type=1326 audit(1757121062.890:41315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.3.9037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996287ebe9 code=0x7ffc0000 [ 515.283722][ T29] audit: type=1326 audit(1757121062.890:41316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.3.9037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f996287ebe9 code=0x7ffc0000 [ 515.307327][ T29] audit: type=1326 audit(1757121062.890:41317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28125 comm="syz.3.9037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996287ebe9 code=0x7ffc0000 [ 515.522441][T28018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.569205][T28018] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.611653][ T4993] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.618866][ T4993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.676912][ T4993] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.684057][ T4993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.725367][T28018] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 515.735916][T28018] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 515.893972][T28018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.097940][T28018] veth0_vlan: entered promiscuous mode [ 516.106378][T28018] veth1_vlan: entered promiscuous mode [ 516.130846][T28018] veth0_macvtap: entered promiscuous mode [ 516.140336][T28018] veth1_macvtap: entered promiscuous mode [ 516.154031][T28018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.166331][T28018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.178029][ T5006] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.186780][ T5006] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.186982][ T5006] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.187044][ T5006] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.292054][T28165] wireguard0: entered promiscuous mode [ 516.297682][T28165] wireguard0: entered allmulticast mode [ 516.304154][T28163] __nla_validate_parse: 8 callbacks suppressed [ 516.304174][T28163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9043'. [ 516.453806][T28183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9049'. [ 516.737276][T28210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9060'. [ 516.741235][T28211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.754943][T28211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.786386][T28215] macvtap0: refused to change device tx_queue_len [ 516.898395][T28228] atomic_op ffff88810236fd28 conn xmit_atomic 0000000000000000 [ 517.460894][T28276] loop2: detected capacity change from 0 to 512 [ 517.461920][T28276] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 517.484238][T28276] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 517.493217][T28273] loop1: detected capacity change from 0 to 512 [ 517.496375][T28276] System zones: 0-2, 18-18, 34-34 [ 517.505976][T28276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.509334][T28273] EXT4-fs: Ignoring removed mblk_io_submit option [ 517.522588][T28276] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.528003][T28273] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 517.546978][T28273] EXT4-fs (loop1): 1 truncate cleaned up [ 517.553598][T28273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.556058][T28276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9087'. [ 517.574828][T28276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9087'. [ 517.596854][T28018] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.674800][T26816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.965022][T28339] macvtap0: refused to change device tx_queue_len [ 518.091787][T28359] atomic_op ffff8881166f1528 conn xmit_atomic 0000000000000000 [ 519.127577][T28553] macvtap0: refused to change device tx_queue_len [ 519.263579][T28580] atomic_op ffff88810236f528 conn xmit_atomic 0000000000000000 [ 519.567973][T28627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9143'. [ 519.577124][T28627] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9143'. [ 519.616865][T28627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28627 comm=syz.5.9143 [ 519.651444][T28627] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 519.681419][T28627] hub 9-0:1.0: USB hub found [ 519.686590][T28627] hub 9-0:1.0: 8 ports detected [ 519.741584][T28647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.753783][T28647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.028284][ T29] kauditd_printk_skb: 481 callbacks suppressed [ 520.028303][ T29] audit: type=1326 audit(1757121067.840:41799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28694 comm="syz.1.9159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e95aebe9 code=0x7ffc0000 [ 520.072806][ T29] audit: type=1326 audit(1757121067.870:41800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28694 comm="syz.1.9159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3e95aebe9 code=0x7ffc0000 [ 520.096759][ T29] audit: type=1326 audit(1757121067.870:41801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28694 comm="syz.1.9159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e95aebe9 code=0x7ffc0000 [ 520.120450][ T29] audit: type=1326 audit(1757121067.870:41802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28694 comm="syz.1.9159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3e95aebe9 code=0x7ffc0000 [ 520.144095][ T29] audit: type=1326 audit(1757121067.870:41803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28694 comm="syz.1.9159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e95aebe9 code=0x7ffc0000 [ 520.167821][ T29] audit: type=1326 audit(1757121067.870:41804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28694 comm="syz.1.9159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e95aebe9 code=0x7ffc0000 [ 520.195332][T28711] wireguard0: entered promiscuous mode [ 520.201080][T28711] wireguard0: entered allmulticast mode [ 520.587035][ T29] audit: type=1326 audit(1757121068.390:41805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28759 comm="syz.2.9167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604517ebe9 code=0x7ffc0000 [ 520.610860][ T29] audit: type=1326 audit(1757121068.390:41806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28759 comm="syz.2.9167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604517ebe9 code=0x7ffc0000 [ 520.634570][ T29] audit: type=1326 audit(1757121068.390:41807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28759 comm="syz.2.9167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f604517ebe9 code=0x7ffc0000 [ 520.658454][ T29] audit: type=1326 audit(1757121068.390:41808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28759 comm="syz.2.9167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604517ebe9 code=0x7ffc0000 [ 520.718204][T28775] macvtap0: refused to change device tx_queue_len [ 520.853160][T28800] atomic_op ffff888104076d28 conn xmit_atomic 0000000000000000 [ 521.142954][T28762] chnl_net:caif_netlink_parms(): no params data found [ 521.238463][T28762] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.245671][T28762] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.261493][T28762] bridge_slave_0: entered allmulticast mode [ 521.273024][T28762] bridge_slave_0: entered promiscuous mode [ 521.291289][T28762] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.298634][T28762] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.309161][T28762] bridge_slave_1: entered allmulticast mode [ 521.316102][T28762] bridge_slave_1: entered promiscuous mode [ 521.357462][T28762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.395258][T28762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.442618][T28762] team0: Port device team_slave_0 added [ 521.453874][T28762] team0: Port device team_slave_1 added [ 521.483156][ T5009] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.493608][ T5009] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.509378][T28762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.516387][T28762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.542457][T28762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.581935][T28762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.589098][T28762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.615212][T28762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.634416][ T5009] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.644840][ T5009] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.676233][T28762] hsr_slave_0: entered promiscuous mode [ 521.682514][T28762] hsr_slave_1: entered promiscuous mode [ 521.688603][T28762] debugfs: 'hsr0' already exists in 'hsr' [ 521.694362][T28762] Cannot create hsr debugfs directory [ 521.703337][ T5009] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.713697][ T5009] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.770529][ T5009] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.780920][ T5009] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.881708][T28899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.897516][T28899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.005836][ T5009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.061659][ T5009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.106882][ T5009] bond0 (unregistering): Released all slaves [ 522.171233][ T5009] tipc: Left network mode [ 522.178369][ T5009] hsr_slave_0: left promiscuous mode [ 522.184045][ T5009] hsr_slave_1: left promiscuous mode [ 522.190980][ T5009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.198457][ T5009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.219803][ T5009] veth1_macvtap: left promiscuous mode [ 522.225329][ T5009] veth0_macvtap: left promiscuous mode [ 522.237873][ T5009] veth1_vlan: left promiscuous mode [ 522.248158][ T5009] veth0_vlan: left promiscuous mode [ 522.366784][ T5009] team0 (unregistering): Port device team_slave_1 removed [ 522.377820][ T5009] team0 (unregistering): Port device team_slave_0 removed [ 522.609165][T28762] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 522.635368][T28762] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 522.699764][T28762] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 522.727171][T28762] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 522.925081][T28762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.989316][T28762] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.001036][ T5023] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.008196][ T5023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.036829][ T4993] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.043995][ T4993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.187889][T28762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.405304][T29016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.423022][T28762] veth0_vlan: entered promiscuous mode [ 523.430049][T29016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.444531][T28762] veth1_vlan: entered promiscuous mode [ 523.464507][T28762] veth0_macvtap: entered promiscuous mode [ 523.474024][T28762] veth1_macvtap: entered promiscuous mode [ 523.486590][T28762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.501058][T28762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.515951][ T4993] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.526937][ T4993] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.557316][ T4993] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.573112][ T4993] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.794823][T29073] wireguard0: entered promiscuous mode [ 523.800540][T29073] wireguard0: entered allmulticast mode [ 524.023445][T29117] wireguard0: entered promiscuous mode [ 524.029060][T29117] wireguard0: entered allmulticast mode [ 524.341545][T29164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9231'. [ 524.350499][T29164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9231'. [ 524.374063][T29164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29164 comm=syz.1.9231 [ 524.391380][T29164] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 524.405961][T29164] hub 9-0:1.0: USB hub found [ 524.410860][T29164] hub 9-0:1.0: 8 ports detected [ 524.484947][T29187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.496052][T29187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.594504][T29203] wireguard0: entered promiscuous mode [ 524.600179][T29203] wireguard0: entered allmulticast mode [ 524.881543][T29250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9242'. [ 524.890651][T29250] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9242'. [ 524.915893][T29250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29250 comm=syz.5.9242 [ 524.935105][T29250] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 524.951741][T29250] hub 9-0:1.0: USB hub found [ 524.956593][T29250] hub 9-0:1.0: 8 ports detected [ 525.091071][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 525.091089][ T29] audit: type=1326 audit(1757121072.900:42182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29287 comm="syz.1.9252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e95aebe9 code=0x7ffc0000 [ 525.124837][ T29] audit: type=1326 audit(1757121072.900:42183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29287 comm="syz.1.9252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fb3e95aebe9 code=0x7ffc0000 [ 525.148728][ T29] audit: type=1326 audit(1757121072.900:42184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29287 comm="syz.1.9252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e95aebe9 code=0x7ffc0000 [ 525.178081][T29291] wireguard0: entered promiscuous mode [ 525.183615][T29291] wireguard0: entered allmulticast mode [ 525.215000][ T29] audit: type=1326 audit(1757121073.020:42185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29295 comm="syz.5.9254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde09ebe9 code=0x7ffc0000 [ 525.238810][ T29] audit: type=1326 audit(1757121073.020:42186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29295 comm="syz.5.9254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde09ebe9 code=0x7ffc0000 [ 525.262533][ T29] audit: type=1326 audit(1757121073.020:42187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29295 comm="syz.5.9254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbcde09ebe9 code=0x7ffc0000 [ 525.286170][ T29] audit: type=1326 audit(1757121073.020:42188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29295 comm="syz.5.9254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde09ebe9 code=0x7ffc0000 [ 525.309828][ T29] audit: type=1326 audit(1757121073.020:42189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29295 comm="syz.5.9254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde09ebe9 code=0x7ffc0000 [ 525.333461][ T29] audit: type=1326 audit(1757121073.020:42190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29295 comm="syz.5.9254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbcde09ebe9 code=0x7ffc0000 [ 525.358555][ T29] audit: type=1326 audit(1757121073.020:42191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29295 comm="syz.5.9254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcde09ebe9 code=0x7ffc0000 [ 525.410742][T29306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.420310][T29306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.430555][T29309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9259'. [ 525.439571][T29309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9259'. [ 525.461042][T29309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29309 comm=syz.1.9259 [ 525.475907][T29309] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 525.519548][T29309] hub 9-0:1.0: USB hub found [ 525.527888][T29309] hub 9-0:1.0: 8 ports detected [ 525.553076][T29326] macvtap0: refused to change device tx_queue_len [ 525.671058][T29356] atomic_op ffff8881045d3528 conn xmit_atomic 0000000000000000 [ 525.951672][T29404] wireguard0: entered promiscuous mode [ 525.957282][T29404] wireguard0: entered allmulticast mode [ 526.105365][T29432] netlink: 'syz.5.9275': attribute type 2 has an invalid length. [ 526.527193][T29489] wireguard0: entered promiscuous mode [ 526.534637][T29489] wireguard0: entered allmulticast mode [ 526.557578][T29493] wireguard0: entered promiscuous mode [ 526.563221][T29493] wireguard0: entered allmulticast mode [ 526.789485][T29522] loop5: detected capacity change from 0 to 512 [ 526.796993][T29522] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 526.863935][T29522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9302'. [ 526.873049][T29522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9302'. [ 526.902747][T29532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9305'. [ 526.911787][T29532] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9305'. [ 526.933245][T29532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29532 comm=syz.5.9305 [ 526.953772][T29532] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 526.967160][T29532] hub 9-0:1.0: USB hub found [ 526.973415][T29532] hub 9-0:1.0: 8 ports detected [ 527.052708][T29544] wireguard0: entered promiscuous mode [ 527.058299][T29544] wireguard0: entered allmulticast mode [ 527.397481][T29559] FAULT_INJECTION: forcing a failure. [ 527.397481][T29559] name failslab, interval 1, probability 0, space 0, times 0 [ 527.410286][T29559] CPU: 1 UID: 0 PID: 29559 Comm: syz.4.9316 Not tainted syzkaller #0 PREEMPT(voluntary) [ 527.410335][T29559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 527.410348][T29559] Call Trace: [ 527.410353][T29559] [ 527.410360][T29559] __dump_stack+0x1d/0x30 [ 527.410389][T29559] dump_stack_lvl+0xe8/0x140 [ 527.410412][T29559] dump_stack+0x15/0x1b [ 527.410525][T29559] should_fail_ex+0x265/0x280 [ 527.410557][T29559] should_failslab+0x8c/0xb0 [ 527.410588][T29559] __kmalloc_noprof+0xa5/0x3e0 [ 527.410619][T29559] ? bpf_test_init+0xa9/0x160 [ 527.410647][T29559] bpf_test_init+0xa9/0x160 [ 527.410703][T29559] bpf_prog_test_run_xdp+0x274/0x910 [ 527.410732][T29559] ? kstrtouint+0x76/0xc0 [ 527.410753][T29559] ? __rcu_read_unlock+0x4f/0x70 [ 527.410778][T29559] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 527.410813][T29559] bpf_prog_test_run+0x227/0x390 [ 527.410868][T29559] __sys_bpf+0x4b9/0x7b0 [ 527.410956][T29559] __x64_sys_bpf+0x41/0x50 [ 527.410988][T29559] x64_sys_call+0x2aea/0x2ff0 [ 527.411011][T29559] do_syscall_64+0xd2/0x200 [ 527.411055][T29559] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 527.411101][T29559] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 527.411187][T29559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.411210][T29559] RIP: 0033:0x7f0971e1ebe9 [ 527.411226][T29559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.411249][T29559] RSP: 002b:00007f097087f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 527.411330][T29559] RAX: ffffffffffffffda RBX: 00007f0972055fa0 RCX: 00007f0971e1ebe9 [ 527.411342][T29559] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 527.411354][T29559] RBP: 00007f097087f090 R08: 0000000000000000 R09: 0000000000000000 [ 527.411368][T29559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.411467][T29559] R13: 00007f0972056038 R14: 00007f0972055fa0 R15: 00007fff0ca7fb48 [ 527.411491][T29559] [ 527.685832][T29569] loop4: detected capacity change from 0 to 256 [ 527.698332][T29569] msdos: Bad value for 'time_offset' [ 527.751510][ C0] I/O error, dev loop3, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 527.762286][T21105] FAT-fs (loop3): unable to read inode block for updating (i_pos 1050) [ 527.772099][ C0] I/O error, dev loop3, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 527.784339][T29552] chnl_net:caif_netlink_parms(): no params data found [ 527.792865][T21105] FAT-fs (loop3): unable to read inode block for updating (i_pos 1050) [ 527.801247][T21105] FAT-fs (loop3): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 527.868773][T29573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29573 comm=syz.5.9318 [ 527.901996][T29573] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 527.917401][T29573] hub 9-0:1.0: USB hub found [ 527.928920][T29552] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.929157][T29573] hub 9-0:1.0: 8 ports detected [ 527.936105][T29552] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.948285][T29552] bridge_slave_0: entered allmulticast mode [ 527.954917][T29552] bridge_slave_0: entered promiscuous mode [ 527.961849][T29552] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.969048][T29552] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.976219][T29552] bridge_slave_1: entered allmulticast mode [ 527.983023][T29552] bridge_slave_1: entered promiscuous mode [ 528.017609][T29552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.042033][T29552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.082656][T29552] team0: Port device team_slave_0 added [ 528.092505][T29552] team0: Port device team_slave_1 added [ 528.105681][ T5025] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.167073][T29552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.174110][T29552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.200073][T29552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.246595][T29552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.253644][T29552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.279669][T29552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.297013][ T5025] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.367974][T29552] hsr_slave_0: entered promiscuous mode [ 528.380270][T29552] hsr_slave_1: entered promiscuous mode [ 528.393607][ T5025] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.437816][T29604] macvtap0: refused to change device tx_queue_len [ 528.481224][ T5025] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.507723][T29610] wireguard0: entered promiscuous mode [ 528.513235][T29610] wireguard0: entered allmulticast mode [ 528.558837][T29615] atomic_op ffff88812b189528 conn xmit_atomic 0000000000000000 [ 528.600468][ T5025] bridge_slave_1: left allmulticast mode [ 528.606250][ T5025] bridge_slave_1: left promiscuous mode [ 528.612066][ T5025] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.623059][ T5025] bridge_slave_0: left allmulticast mode [ 528.628800][ T5025] bridge_slave_0: left promiscuous mode [ 528.634613][ T5025] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.730585][ T5025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.741563][ T5025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.768012][ T5025] bond0 (unregistering): Released all slaves [ 528.774498][T29619] FAULT_INJECTION: forcing a failure. [ 528.774498][T29619] name failslab, interval 1, probability 0, space 0, times 0 [ 528.787239][T29619] CPU: 0 UID: 0 PID: 29619 Comm: syz.1.9330 Not tainted syzkaller #0 PREEMPT(voluntary) [ 528.787309][T29619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 528.787321][T29619] Call Trace: [ 528.787327][T29619] [ 528.787360][T29619] __dump_stack+0x1d/0x30 [ 528.787386][T29619] dump_stack_lvl+0xe8/0x140 [ 528.787406][T29619] dump_stack+0x15/0x1b [ 528.787428][T29619] should_fail_ex+0x265/0x280 [ 528.787536][T29619] should_failslab+0x8c/0xb0 [ 528.787569][T29619] __kmalloc_noprof+0xa5/0x3e0 [ 528.787669][T29619] ? security_prepare_creds+0x52/0x120 [ 528.787697][T29619] security_prepare_creds+0x52/0x120 [ 528.787760][T29619] prepare_creds+0x34a/0x4c0 [ 528.787791][T29619] copy_creds+0x8f/0x3f0 [ 528.787822][T29619] copy_process+0x658/0x2000 [ 528.787847][T29619] ? kstrtouint+0x76/0xc0 [ 528.787886][T29619] ? __rcu_read_unlock+0x4f/0x70 [ 528.787914][T29619] kernel_clone+0x16c/0x5c0 [ 528.787942][T29619] ? vfs_write+0x7e8/0x960 [ 528.787965][T29619] __x64_sys_clone+0xe6/0x120 [ 528.788045][T29619] x64_sys_call+0x119c/0x2ff0 [ 528.788066][T29619] do_syscall_64+0xd2/0x200 [ 528.788105][T29619] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 528.788135][T29619] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 528.788263][T29619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.788292][T29619] RIP: 0033:0x7fb3e95aebe9 [ 528.788311][T29619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.788329][T29619] RSP: 002b:00007fb3e800efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 528.788402][T29619] RAX: ffffffffffffffda RBX: 00007fb3e97e5fa0 RCX: 00007fb3e95aebe9 [ 528.788468][T29619] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000000004021400 [ 528.788485][T29619] RBP: 00007fb3e800f090 R08: 0000000000000000 R09: 0000000000000000 [ 528.788501][T29619] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 528.788517][T29619] R13: 00007fb3e97e6038 R14: 00007fb3e97e5fa0 R15: 00007ffdc23ec4a8 [ 528.788548][T29619] [ 529.031529][ T5025] tipc: Left network mode [ 529.039957][ T5025] hsr_slave_0: left promiscuous mode [ 529.045661][ T5025] hsr_slave_1: left promiscuous mode [ 529.051487][ T5025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.058921][ T5025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.077449][ T5025] veth1_macvtap: left promiscuous mode [ 529.083127][ T5025] veth0_macvtap: left promiscuous mode [ 529.088766][ T5025] veth1_vlan: left promiscuous mode [ 529.094039][ T5025] veth0_vlan: left promiscuous mode [ 529.157413][ T5025] team0 (unregistering): Port device team_slave_1 removed [ 529.167352][ T5025] team0 (unregistering): Port device team_slave_0 removed [ 529.432931][T29552] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 529.453621][T29552] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 529.454626][T29638] ------------[ cut here ]------------ [ 529.465892][T29638] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0x1f, 0x1f] s64=[0x1f, 0x1f] u32=[0x1f, 0x17] s32=[0x1f, 0x1f] var_off=(0x1f, 0x0)(1) [ 529.482862][T29638] WARNING: CPU: 0 PID: 29638 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 529.493350][T29638] Modules linked in: [ 529.497481][T29638] CPU: 0 UID: 0 PID: 29638 Comm: syz.1.9338 Not tainted syzkaller #0 PREEMPT(voluntary) [ 529.507351][T29638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 529.517535][T29638] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 529.523926][T29638] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 02 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 529.543590][T29638] RSP: 0018:ffffc9000164f440 EFLAGS: 00010292 [ 529.549694][T29638] RAX: f9cc106acbfbad00 RBX: ffff88810a5001a8 RCX: ffff8881023d4200 [ 529.557762][T29638] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 529.565890][T29638] RBP: 000000000000001f R08: 0001c9000164f27f R09: 0000000000000000 [ 529.574299][T29638] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff88810a500168 [ 529.582330][T29638] R13: ffffc90001411000 R14: ffffc90001411000 R15: ffff88810a5001a0 [ 529.590352][T29638] FS: 00007fb3e800f6c0(0000) GS:ffff8882aee43000(0000) knlGS:0000000000000000 [ 529.599338][T29638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 529.605948][T29638] CR2: 00007fb3e7fedf98 CR3: 0000000113f32000 CR4: 00000000003506f0 [ 529.613988][T29638] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 529.622063][T29638] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 529.630079][T29638] Call Trace: [ 529.633388][T29638] [ 529.636353][T29638] reg_set_min_max+0x1c1/0x260 [ 529.641198][T29638] check_cond_jmp_op+0x1080/0x16e0 [ 529.646429][T29638] do_check+0x332a/0x7a10 [ 529.650840][T29638] do_check_common+0xc3a/0x12a0 [ 529.655807][T29638] bpf_check+0x942b/0xd9e0 [ 529.660278][T29638] ? __rcu_read_unlock+0x4f/0x70 [ 529.665298][T29638] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 529.671380][T29638] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 529.677138][T29638] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 529.683580][T29638] ? pcpu_block_refresh_hint+0x10b/0x170 [ 529.689568][T29638] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 529.695800][T29638] ? css_rstat_updated+0xb7/0x240 [ 529.700899][T29638] ? __rcu_read_unlock+0x4f/0x70 [ 529.705895][T29638] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 529.711780][T29638] ? should_fail_ex+0xdb/0x280 [ 529.716582][T29638] ? selinux_bpf_prog_load+0x36/0xf0 [ 529.721922][T29638] ? should_failslab+0x8c/0xb0 [ 529.726767][T29638] ? __kmalloc_cache_noprof+0x189/0x320 [ 529.732476][T29638] ? selinux_bpf_prog_load+0xbf/0xf0 [ 529.737796][T29638] ? security_bpf_prog_load+0x2c/0xa0 [ 529.743265][T29638] bpf_prog_load+0xedd/0x1070 [ 529.748066][T29638] ? security_bpf+0x2b/0x90 [ 529.752653][T29638] __sys_bpf+0x462/0x7b0 [ 529.757004][T29638] __x64_sys_bpf+0x41/0x50 [ 529.761632][T29638] x64_sys_call+0x2aea/0x2ff0 [ 529.766392][T29638] do_syscall_64+0xd2/0x200 [ 529.771064][T29638] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 529.777234][T29638] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 529.783085][T29638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.789037][T29638] RIP: 0033:0x7fb3e95aebe9 [ 529.793487][T29638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.813224][T29638] RSP: 002b:00007fb3e800f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 529.821747][T29638] RAX: ffffffffffffffda RBX: 00007fb3e97e5fa0 RCX: 00007fb3e95aebe9 [ 529.829804][T29638] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 529.837866][T29638] RBP: 00007fb3e800f090 R08: 0000000000000000 R09: 0000000000000000 [ 529.845869][T29638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 529.854078][T29638] R13: 00007fb3e97e6038 R14: 00007fb3e97e5fa0 R15: 00007ffdc23ec4a8 [ 529.862142][T29638] [ 529.865195][T29638] ---[ end trace 0000000000000000 ]--- [ 529.876768][T29552] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 529.892831][T29552] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 529.986611][T29552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.997123][T29684] random: crng reseeded on system resumption [ 530.030768][T29552] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.050387][ T5009] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.057499][ T5009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.102029][ T5018] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.109200][ T5018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.216516][T29706] geneve2: entered promiscuous mode [ 530.221861][T29706] geneve2: entered allmulticast mode [ 530.250480][T29714] random: crng reseeded on system resumption [ 530.296102][T29719] __nla_validate_parse: 3 callbacks suppressed [ 530.296120][T29719] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9343'. [ 530.348319][T29552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.637231][T29552] veth0_vlan: entered promiscuous mode [ 530.694985][T29552] veth1_vlan: entered promiscuous mode [ 530.803979][T29552] veth0_macvtap: entered promiscuous mode [ 530.812871][T29779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9349'. [ 530.821840][T29779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9349'. [ 530.866998][T29552] veth1_macvtap: entered promiscuous mode [ 530.902152][T29552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.910942][T29790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29790 comm=syz.1.9349 [ 530.965781][T29552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.973465][T29779] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 530.994007][T29779] hub 9-0:1.0: USB hub found [ 530.999172][T29779] hub 9-0:1.0: 8 ports detected [ 531.015563][ T4993] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.051093][ T4993] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.076161][ T4993] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.106825][ T4993] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.325818][T29834] FAULT_INJECTION: forcing a failure. [ 531.325818][T29834] name failslab, interval 1, probability 0, space 0, times 0 [ 531.338608][T29834] CPU: 1 UID: 0 PID: 29834 Comm: syz.5.9365 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 531.338652][T29834] Tainted: [W]=WARN [ 531.338715][T29834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 531.338729][T29834] Call Trace: [ 531.338735][T29834] [ 531.338742][T29834] __dump_stack+0x1d/0x30 [ 531.338821][T29834] dump_stack_lvl+0xe8/0x140 [ 531.338896][T29834] dump_stack+0x15/0x1b [ 531.338917][T29834] should_fail_ex+0x265/0x280 [ 531.338943][T29834] ? alloc_fs_context+0x44/0x4e0 [ 531.338977][T29834] should_failslab+0x8c/0xb0 [ 531.339040][T29834] __kmalloc_cache_noprof+0x4c/0x320 [ 531.339081][T29834] alloc_fs_context+0x44/0x4e0 [ 531.339119][T29834] fs_context_for_mount+0x22/0x30 [ 531.339144][T29834] do_new_mount+0xe9/0x5e0 [ 531.339172][T29834] ? security_capable+0x83/0x90 [ 531.339204][T29834] path_mount+0x4a4/0xb20 [ 531.339226][T29834] ? user_path_at+0x109/0x130 [ 531.339285][T29834] __se_sys_mount+0x28f/0x2e0 [ 531.339307][T29834] ? fput+0x8f/0xc0 [ 531.339344][T29834] __x64_sys_mount+0x67/0x80 [ 531.339426][T29834] x64_sys_call+0x2b4d/0x2ff0 [ 531.339448][T29834] do_syscall_64+0xd2/0x200 [ 531.339520][T29834] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 531.339618][T29834] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 531.339686][T29834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.339717][T29834] RIP: 0033:0x7fbcde09ebe9 [ 531.339877][T29834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.339900][T29834] RSP: 002b:00007fbcdcb07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 531.339956][T29834] RAX: ffffffffffffffda RBX: 00007fbcde2d5fa0 RCX: 00007fbcde09ebe9 [ 531.339968][T29834] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 531.340057][T29834] RBP: 00007fbcdcb07090 R08: 0000200000000240 R09: 0000000000000000 [ 531.340071][T29834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.340082][T29834] R13: 00007fbcde2d6038 R14: 00007fbcde2d5fa0 R15: 00007fff71a2fc28 [ 531.340101][T29834] [ 531.383010][T29838] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9367'. [ 531.548961][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 531.548980][ T29] audit: type=1326 audit(1757121079.360:42376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29837 comm="syz.4.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0971e1ebe9 code=0x7ffc0000 [ 531.599282][ T29] audit: type=1326 audit(1757121079.360:42377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29837 comm="syz.4.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0971e1ebe9 code=0x7ffc0000 [ 531.622970][ T29] audit: type=1326 audit(1757121079.360:42378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29837 comm="syz.4.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0971e1ebe9 code=0x7ffc0000 [ 531.656081][T29838] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 531.658580][ T29] audit: type=1326 audit(1757121079.410:42379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29837 comm="syz.4.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0971e1ebe9 code=0x7ffc0000 [ 531.685761][ T29] audit: type=1326 audit(1757121079.410:42380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29837 comm="syz.4.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0971e1ebe9 code=0x7ffc0000 [ 531.709356][ T29] audit: type=1326 audit(1757121079.410:42381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29837 comm="syz.4.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f0971e1ebe9 code=0x7ffc0000 [ 531.732945][ T29] audit: type=1326 audit(1757121079.410:42382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29837 comm="syz.4.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0971e1ebe9 code=0x7ffc0000 [ 531.756642][ T29] audit: type=1326 audit(1757121079.410:42383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29837 comm="syz.4.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0971e1ebe9 code=0x7ffc0000 [ 531.780348][ T29] audit: type=1326 audit(1757121079.410:42384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29837 comm="syz.4.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f0971e1ebe9 code=0x7ffc0000 [ 531.781679][T29856] atomic_op ffff88811a27cd28 conn xmit_atomic 0000000000000000 [ 531.811746][ T29] audit: type=1326 audit(1757121079.520:42385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29837 comm="syz.4.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0971e1ebe9 code=0x7ffc0000 [ 531.813648][T29838] 0ªî{X¹¦: entered allmulticast mode [ 531.843982][T29838] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 531.869023][T29841] macvtap0: refused to change device tx_queue_len [ 531.926588][T29858] loop4: detected capacity change from 0 to 8192 [ 532.017763][T29864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9371'. [ 532.616874][T29883] loop5: detected capacity change from 0 to 8192 [ 532.651867][T29883] FAULT_INJECTION: forcing a failure. [ 532.651867][T29883] name failslab, interval 1, probability 0, space 0, times 0 [ 532.664607][T29883] CPU: 1 UID: 0 PID: 29883 Comm: syz.5.9379 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 532.664642][T29883] Tainted: [W]=WARN [ 532.664649][T29883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.664679][T29883] Call Trace: [ 532.664686][T29883] [ 532.664695][T29883] __dump_stack+0x1d/0x30 [ 532.664739][T29883] dump_stack_lvl+0xe8/0x140 [ 532.664761][T29883] dump_stack+0x15/0x1b [ 532.664776][T29883] should_fail_ex+0x265/0x280 [ 532.664799][T29883] should_failslab+0x8c/0xb0 [ 532.664825][T29883] kmem_cache_alloc_noprof+0x50/0x310 [ 532.664895][T29883] ? getname_flags+0x80/0x3b0 [ 532.664940][T29883] getname_flags+0x80/0x3b0 [ 532.664968][T29883] do_sys_openat2+0x60/0x110 [ 532.665000][T29883] __x64_sys_openat+0xf2/0x120 [ 532.665034][T29883] x64_sys_call+0x2e9c/0x2ff0 [ 532.665123][T29883] do_syscall_64+0xd2/0x200 [ 532.665161][T29883] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 532.665193][T29883] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 532.665260][T29883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.665289][T29883] RIP: 0033:0x7fbcde09ebe9 [ 532.665308][T29883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.665488][T29883] RSP: 002b:00007fbcdcb07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 532.665508][T29883] RAX: ffffffffffffffda RBX: 00007fbcde2d5fa0 RCX: 00007fbcde09ebe9 [ 532.665520][T29883] RDX: 0000000000000042 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 532.665532][T29883] RBP: 00007fbcdcb07090 R08: 0000000000000000 R09: 0000000000000000 [ 532.665545][T29883] R10: 0000000000000081 R11: 0000000000000246 R12: 0000000000000001 [ 532.665618][T29883] R13: 00007fbcde2d6038 R14: 00007fbcde2d5fa0 R15: 00007fff71a2fc28 [ 532.665636][T29883] [ 532.977101][T29894] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9383'. [ 532.986100][T29894] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9383'. [ 533.006273][T29894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29894 comm=syz.5.9383 [ 533.023633][T29894] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 533.036243][T29894] hub 9-0:1.0: USB hub found [ 533.041073][T29894] hub 9-0:1.0: 8 ports detected [ 533.067084][T29903] FAULT_INJECTION: forcing a failure. [ 533.067084][T29903] name failslab, interval 1, probability 0, space 0, times 0 [ 533.079913][T29903] CPU: 1 UID: 0 PID: 29903 Comm: syz.1.9387 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 533.079956][T29903] Tainted: [W]=WARN [ 533.079965][T29903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 533.079981][T29903] Call Trace: [ 533.079988][T29903] [ 533.080041][T29903] __dump_stack+0x1d/0x30 [ 533.080067][T29903] dump_stack_lvl+0xe8/0x140 [ 533.080099][T29903] dump_stack+0x15/0x1b [ 533.080169][T29903] should_fail_ex+0x265/0x280 [ 533.080198][T29903] ? __se_sys_memfd_create+0x1cc/0x590 [ 533.080225][T29903] should_failslab+0x8c/0xb0 [ 533.080257][T29903] __kmalloc_cache_noprof+0x4c/0x320 [ 533.080350][T29903] ? fput+0x8f/0xc0 [ 533.080467][T29903] __se_sys_memfd_create+0x1cc/0x590 [ 533.080496][T29903] __x64_sys_memfd_create+0x31/0x40 [ 533.080524][T29903] x64_sys_call+0x2abe/0x2ff0 [ 533.080571][T29903] do_syscall_64+0xd2/0x200 [ 533.080610][T29903] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 533.080699][T29903] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 533.080738][T29903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.080766][T29903] RIP: 0033:0x7fb3e95aebe9 [ 533.080864][T29903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.080906][T29903] RSP: 002b:00007fb3e800ed68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 533.080985][T29903] RAX: ffffffffffffffda RBX: 00000000000005e5 RCX: 00007fb3e95aebe9 [ 533.080998][T29903] RDX: 00007fb3e800edec RSI: 0000000000000000 RDI: 00007fb3e96327e8 [ 533.081009][T29903] RBP: 0000200000000000 R08: 00007fb3e800eb07 R09: 0000000000000000 [ 533.081021][T29903] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 533.081033][T29903] R13: 00007fb3e800edec R14: 00007fb3e800edf0 R15: 00007ffdc23ec4a8 [ 533.081051][T29903] [ 533.281915][T29920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9393'. [ 533.359081][T29924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9396'. [ 533.359105][T29924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9396'. [ 533.383350][T29924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29924 comm=syz.3.9396 [ 533.388426][T29924] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 533.457108][T29928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29928 comm=syz.1.9397 [ 533.474131][T29928] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 533.489061][T29928] hub 9-0:1.0: USB hub found [ 533.494025][T29928] hub 9-0:1.0: 8 ports detected [ 533.519941][T29924] hub 9-0:1.0: USB hub found [ 533.524782][T29924] hub 9-0:1.0: 8 ports detected [ 533.531479][T29933] loop1: detected capacity change from 0 to 512 [ 533.557395][T29935] loop2: detected capacity change from 0 to 512 [ 533.579943][T29933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.595629][T29933] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.609870][T29935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.637001][T29935] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.793048][T26816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.867154][T29963] loop2: detected capacity change from 0 to 2048 [ 533.878481][T28018] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.901075][T29964] wireguard0: entered promiscuous mode [ 533.906613][T29964] wireguard0: entered allmulticast mode [ 534.023512][T29970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29970 comm=syz.2.9411 [ 534.043847][T29970] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 534.059701][T29970] hub 9-0:1.0: USB hub found [ 534.064513][T29970] hub 9-0:1.0: 8 ports detected [ 534.279079][T29983] macvtap0: refused to change device tx_queue_len [ 534.390564][T30007] atomic_op ffff888103736128 conn xmit_atomic 0000000000000000 [ 534.409193][T30008] wireguard0: entered promiscuous mode [ 534.414715][T30008] wireguard0: entered allmulticast mode [ 534.447468][T30011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30011 comm=syz.4.9424 [ 534.478248][T30011] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 534.502054][T30011] hub 9-0:1.0: USB hub found [ 534.506870][T30011] hub 9-0:1.0: 8 ports detected [ 534.644215][T30026] bridge_slave_0: left allmulticast mode [ 534.650178][T30026] bridge_slave_0: left promiscuous mode [ 534.655850][T30026] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.677197][T30026] bridge_slave_1: left allmulticast mode [ 534.683109][T30026] bridge_slave_1: left promiscuous mode [ 534.689286][T30026] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.700677][T30026] bond0: (slave bond_slave_0): Releasing backup interface [ 534.710093][T30026] bond0: (slave bond_slave_1): Releasing backup interface [ 534.721967][T30026] team0: Port device team_slave_0 removed [ 534.785640][T30030] loop4: detected capacity change from 0 to 512 [ 534.855470][T30031] loop4: detected capacity change from 0 to 512 [ 534.863399][T30031] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 534.895266][T30031] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.9429: invalid indirect mapped block 4294967295 (level 0) [ 534.909627][T30031] EXT4-fs (loop4): Remounting filesystem read-only [ 534.916471][T30031] EXT4-fs (loop4): 1 orphan inode deleted [ 534.922320][T30031] EXT4-fs (loop4): 1 truncate cleaned up [ 534.928980][T30031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.321549][T30026] team0: Port device team_slave_1 removed [ 535.328857][T30026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.336258][T30026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.356376][T30026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.364271][T30026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.501324][T28762] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.533921][T30051] SELinux: Context @ is not valid (left unmapped). [ 535.547251][T30053] __nla_validate_parse: 7 callbacks suppressed [ 535.547272][T30053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9438'. [ 535.562416][T30053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9438'. [ 535.606741][T30053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30053 comm=syz.4.9438 [ 535.648389][T30053] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 535.669102][T30053] hub 9-0:1.0: USB hub found [ 535.838165][T30053] hub 9-0:1.0: 8 ports detected [ 535.896116][T30063] FAULT_INJECTION: forcing a failure. [ 535.896116][T30063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.909305][T30063] CPU: 1 UID: 0 PID: 30063 Comm: syz.2.9442 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 535.909336][T30063] Tainted: [W]=WARN [ 535.909346][T30063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.909358][T30063] Call Trace: [ 535.909365][T30063] [ 535.909373][T30063] __dump_stack+0x1d/0x30 [ 535.909399][T30063] dump_stack_lvl+0xe8/0x140 [ 535.909497][T30063] dump_stack+0x15/0x1b [ 535.909590][T30063] should_fail_ex+0x265/0x280 [ 535.909621][T30063] should_fail+0xb/0x20 [ 535.909643][T30063] should_fail_usercopy+0x1a/0x20 [ 535.909688][T30063] _copy_from_user+0x1c/0xb0 [ 535.909722][T30063] __sys_sendto+0x19e/0x330 [ 535.909818][T30063] __x64_sys_sendto+0x76/0x90 [ 535.909843][T30063] x64_sys_call+0x2d05/0x2ff0 [ 535.909873][T30063] do_syscall_64+0xd2/0x200 [ 535.909921][T30063] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 535.909953][T30063] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 535.909986][T30063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.910085][T30063] RIP: 0033:0x7f604517ebe9 [ 535.910099][T30063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.910122][T30063] RSP: 002b:00007f6043bdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 535.910146][T30063] RAX: ffffffffffffffda RBX: 00007f60453b5fa0 RCX: 00007f604517ebe9 [ 535.910163][T30063] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000006 [ 535.910214][T30063] RBP: 00007f6043bdf090 R08: 0000200000000140 R09: 000000000000001c [ 535.910230][T30063] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 535.910246][T30063] R13: 00007f60453b6038 R14: 00007f60453b5fa0 R15: 00007fff56755548 [ 535.910270][T30063] [ 536.393141][T30082] wireguard0: entered promiscuous mode [ 536.398892][T30082] wireguard0: entered allmulticast mode [ 536.435321][T30094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9452'. [ 536.444369][T30094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9452'. [ 536.475856][T30094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30094 comm=syz.2.9452 [ 536.494146][T30094] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 536.507209][T30094] hub 9-0:1.0: USB hub found [ 536.513265][T30094] hub 9-0:1.0: 8 ports detected [ 536.597493][ T29] kauditd_printk_skb: 418 callbacks suppressed [ 536.597511][ T29] audit: type=1400 audit(1757121084.400:42804): avc: denied { accept } for pid=30119 comm="syz.3.9459" lport=39608 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 536.662861][T30124] FAULT_INJECTION: forcing a failure. [ 536.662861][T30124] name failslab, interval 1, probability 0, space 0, times 0 [ 536.675698][T30124] CPU: 1 UID: 0 PID: 30124 Comm: syz.2.9460 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 536.675739][T30124] Tainted: [W]=WARN [ 536.675747][T30124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 536.675763][T30124] Call Trace: [ 536.675772][T30124] [ 536.675782][T30124] __dump_stack+0x1d/0x30 [ 536.675807][T30124] dump_stack_lvl+0xe8/0x140 [ 536.675826][T30124] dump_stack+0x15/0x1b [ 536.675842][T30124] should_fail_ex+0x265/0x280 [ 536.675865][T30124] should_failslab+0x8c/0xb0 [ 536.675895][T30124] kmem_cache_alloc_noprof+0x50/0x310 [ 536.675930][T30124] ? vm_area_dup+0x33/0x2c0 [ 536.675964][T30124] vm_area_dup+0x33/0x2c0 [ 536.675993][T30124] __split_vma+0xe9/0x650 [ 536.676025][T30124] ? avc_has_perm+0xf7/0x180 [ 536.676058][T30124] vms_gather_munmap_vmas+0x17a/0x7b0 [ 536.676090][T30124] ? mntput_no_expire+0x6f/0x460 [ 536.676133][T30124] do_vmi_align_munmap+0x1a4/0x3d0 [ 536.676173][T30124] do_vmi_munmap+0x1db/0x220 [ 536.676204][T30124] mremap_at+0x110/0x630 [ 536.676242][T30124] __se_sys_mremap+0x6fa/0xb50 [ 536.676290][T30124] ? fput+0x8f/0xc0 [ 536.676320][T30124] ? ksys_write+0x192/0x1a0 [ 536.676345][T30124] __x64_sys_mremap+0x67/0x80 [ 536.676382][T30124] x64_sys_call+0x2a24/0x2ff0 [ 536.676408][T30124] do_syscall_64+0xd2/0x200 [ 536.676462][T30124] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 536.676492][T30124] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 536.676522][T30124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.676550][T30124] RIP: 0033:0x7f604517ebe9 [ 536.676566][T30124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.676585][T30124] RSP: 002b:00007f6043bdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 536.676605][T30124] RAX: ffffffffffffffda RBX: 00007f60453b5fa0 RCX: 00007f604517ebe9 [ 536.676618][T30124] RDX: 0000000000001000 RSI: 0000000000c00000 RDI: 0000200000400000 [ 536.676631][T30124] RBP: 00007f6043bdf090 R08: 00002000008b5000 R09: 0000000000000000 [ 536.676643][T30124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.676656][T30124] R13: 00007f60453b6038 R14: 00007f60453b5fa0 R15: 00007fff56755548 [ 536.676704][T30124] [ 536.681813][ T29] audit: type=1400 audit(1757121084.460:42805): avc: denied { write } for pid=30119 comm="syz.3.9459" lport=39608 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 536.925492][ T29] audit: type=1400 audit(1757121084.460:42806): avc: denied { setopt } for pid=30119 comm="syz.3.9459" lport=39608 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 537.641956][T30191] netlink: 'syz.1.9468': attribute type 13 has an invalid length. [ 537.737926][T30191] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 537.812970][T30207] loop4: detected capacity change from 0 to 1024 [ 537.814034][ T29] audit: type=1326 audit(1757121085.610:42807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30204 comm="syz.2.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604517ebe9 code=0x7ffc0000 [ 537.823972][T30207] EXT4-fs: Ignoring removed nobh option [ 537.843082][ T29] audit: type=1326 audit(1757121085.610:42808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30204 comm="syz.2.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604517ebe9 code=0x7ffc0000 [ 537.848769][T30207] EXT4-fs: inline encryption not supported [ 537.880036][ T29] audit: type=1326 audit(1757121085.610:42809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30204 comm="syz.2.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f604517ebe9 code=0x7ffc0000 [ 537.903605][ T29] audit: type=1326 audit(1757121085.610:42810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30204 comm="syz.2.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604517ebe9 code=0x7ffc0000 [ 537.927599][ T29] audit: type=1326 audit(1757121085.610:42811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30204 comm="syz.2.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604517ebe9 code=0x7ffc0000 [ 537.951392][ T29] audit: type=1326 audit(1757121085.610:42812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30204 comm="syz.2.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f604517ebe9 code=0x7ffc0000 [ 537.975162][ T29] audit: type=1326 audit(1757121085.610:42813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30204 comm="syz.2.9474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604517ebe9 code=0x7ffc0000 [ 538.031588][T30207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.060594][ T3401] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 538.068085][ T3401] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 538.075663][ T3401] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 538.083199][ T3401] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 538.090892][ T3401] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 538.098386][ T3401] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 538.105793][ T3401] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 538.113466][ T3401] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 538.118115][T30224] program syz.3.9480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.120896][ T3401] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 538.137577][ T3401] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 538.176935][ T3401] hid-generic 0000:0000:0000.0090: hidraw0: HID v8.00 Device [syz0] on syz0 [ 538.190853][T28762] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.455680][T30251] wireguard0: entered promiscuous mode [ 538.461282][T30251] wireguard0: entered allmulticast mode [ 538.917231][T30268] bridge_slave_0: left allmulticast mode [ 538.923036][T30268] bridge_slave_0: left promiscuous mode [ 538.928937][T30268] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.939761][T30268] bridge_slave_1: left allmulticast mode [ 538.945531][T30268] bridge_slave_1: left promiscuous mode [ 538.951493][T30268] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.962390][T30268] bond0: (slave bond_slave_0): Releasing backup interface [ 538.972721][T30268] bond0: (slave bond_slave_1): Releasing backup interface [ 539.062678][T30268] team0: Port device team_slave_0 removed [ 539.073243][T30268] team0: Port device team_slave_1 removed [ 539.080692][T30268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.088257][T30268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.106371][T30268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.113932][T30268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.251748][T30291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9503'. [ 539.260736][T30291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9503'. [ 539.319691][T30295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30295 comm=syz.4.9503 [ 539.334282][T30296] dummy0: entered allmulticast mode [ 539.341138][T30296] 9p: Unknown access argument 00000000000000000000: -22 [ 539.442542][T30295] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 539.530533][T30302] hub 9-0:1.0: USB hub found [ 539.543297][T30302] hub 9-0:1.0: 8 ports detected [ 539.713344][T30305] loop5: detected capacity change from 0 to 256 [ 539.729674][T30305] FAULT_INJECTION: forcing a failure. [ 539.729674][T30305] name failslab, interval 1, probability 0, space 0, times 0 [ 539.742509][T30305] CPU: 1 UID: 0 PID: 30305 Comm: syz.5.9508 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 539.742543][T30305] Tainted: [W]=WARN [ 539.742550][T30305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 539.742561][T30305] Call Trace: [ 539.742567][T30305] [ 539.742574][T30305] __dump_stack+0x1d/0x30 [ 539.742639][T30305] dump_stack_lvl+0xe8/0x140 [ 539.742664][T30305] dump_stack+0x15/0x1b [ 539.742685][T30305] should_fail_ex+0x265/0x280 [ 539.742722][T30305] ? alloc_pipe_info+0xae/0x350 [ 539.742753][T30305] should_failslab+0x8c/0xb0 [ 539.742786][T30305] __kmalloc_cache_noprof+0x4c/0x320 [ 539.742865][T30305] alloc_pipe_info+0xae/0x350 [ 539.742897][T30305] splice_direct_to_actor+0x592/0x680 [ 539.742978][T30305] ? __pfx_direct_splice_actor+0x10/0x10 [ 539.743061][T30305] ? selinux_file_permission+0x2f0/0x320 [ 539.743083][T30305] do_splice_direct+0xda/0x150 [ 539.743103][T30305] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 539.743137][T30305] do_sendfile+0x380/0x650 [ 539.743212][T30305] __x64_sys_sendfile64+0x105/0x150 [ 539.743244][T30305] x64_sys_call+0x2bb0/0x2ff0 [ 539.743272][T30305] do_syscall_64+0xd2/0x200 [ 539.743392][T30305] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 539.743512][T30305] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 539.743551][T30305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.743579][T30305] RIP: 0033:0x7fbcde09ebe9 [ 539.743598][T30305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.743621][T30305] RSP: 002b:00007fbcdcb07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 539.743665][T30305] RAX: ffffffffffffffda RBX: 00007fbcde2d5fa0 RCX: 00007fbcde09ebe9 [ 539.743677][T30305] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 539.743728][T30305] RBP: 00007fbcdcb07090 R08: 0000000000000000 R09: 0000000000000000 [ 539.743848][T30305] R10: 0000000011000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.743864][T30305] R13: 00007fbcde2d6038 R14: 00007fbcde2d5fa0 R15: 00007fff71a2fc28 [ 539.743888][T30305] [ 539.962190][T30283] dummy0: left allmulticast mode [ 540.064333][T30320] loop5: detected capacity change from 0 to 164 [ 540.071837][T30320] Unable to read rock-ridge attributes [ 540.082104][T30320] Unable to read rock-ridge attributes [ 540.109393][T30320] Unable to read rock-ridge attributes [ 540.121077][T30320] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 540.291245][T30339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9519'. [ 540.317828][T30337] wireguard0: entered promiscuous mode [ 540.323367][T30337] wireguard0: entered allmulticast mode [ 540.343631][T30341] FAULT_INJECTION: forcing a failure. [ 540.343631][T30341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.356792][T30341] CPU: 1 UID: 0 PID: 30341 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 540.356870][T30341] Tainted: [W]=WARN [ 540.356879][T30341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 540.356895][T30341] Call Trace: [ 540.356903][T30341] [ 540.356912][T30341] __dump_stack+0x1d/0x30 [ 540.356938][T30341] dump_stack_lvl+0xe8/0x140 [ 540.356980][T30341] dump_stack+0x15/0x1b [ 540.357002][T30341] should_fail_ex+0x265/0x280 [ 540.357032][T30341] should_fail+0xb/0x20 [ 540.357051][T30341] should_fail_usercopy+0x1a/0x20 [ 540.357077][T30341] _copy_from_user+0x1c/0xb0 [ 540.357198][T30341] sock_do_ioctl+0xe6/0x220 [ 540.357243][T30341] sock_ioctl+0x41b/0x610 [ 540.357353][T30341] ? __pfx_sock_ioctl+0x10/0x10 [ 540.357394][T30341] __se_sys_ioctl+0xcb/0x140 [ 540.357419][T30341] __x64_sys_ioctl+0x43/0x50 [ 540.357443][T30341] x64_sys_call+0x1816/0x2ff0 [ 540.357471][T30341] do_syscall_64+0xd2/0x200 [ 540.357505][T30341] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 540.357557][T30341] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 540.357585][T30341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.357665][T30341] RIP: 0033:0x7fb3e95aebe9 [ 540.357685][T30341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.357708][T30341] RSP: 002b:00007fb3e800f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 540.357733][T30341] RAX: ffffffffffffffda RBX: 00007fb3e97e5fa0 RCX: 00007fb3e95aebe9 [ 540.357785][T30341] RDX: 00002000000000c0 RSI: 0000000000008914 RDI: 0000000000000004 [ 540.357798][T30341] RBP: 00007fb3e800f090 R08: 0000000000000000 R09: 0000000000000000 [ 540.357814][T30341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.357830][T30341] R13: 00007fb3e97e6038 R14: 00007fb3e97e5fa0 R15: 00007ffdc23ec4a8 [ 540.357854][T30341] [ 540.576111][T30336] syzkaller0: entered promiscuous mode [ 540.581717][T30336] syzkaller0: entered allmulticast mode [ 540.851110][T30359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9528'. [ 540.860148][T30359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9528'. [ 540.889163][T30359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30359 comm=syz.4.9528 [ 540.905798][T30359] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 540.934788][T30359] hub 9-0:1.0: USB hub found [ 540.943248][T30359] hub 9-0:1.0: 8 ports detected [ 541.049517][T30379] ================================================================== [ 541.057655][T30379] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 541.064392][T30379] [ 541.066721][T30379] write to 0xffff888126215a08 of 8 bytes by task 30378 on cpu 1: [ 541.074442][T30379] call_rcu+0x51/0x3f0 [ 541.078532][T30379] mas_wmb_replace+0xc6a/0x14a0 [ 541.083482][T30379] mas_wr_store_entry+0x1773/0x2b50 [ 541.088700][T30379] mas_store_prealloc+0x74d/0x9e0 [ 541.093748][T30379] vma_iter_store_new+0x1c5/0x200 [ 541.098871][T30379] vma_complete+0x125/0x580 [ 541.103473][T30379] __split_vma+0x5d9/0x650 [ 541.107907][T30379] vma_modify+0x3f2/0xc80 [ 541.112259][T30379] vma_modify_flags+0x101/0x130 [ 541.117133][T30379] mprotect_fixup+0x2cc/0x570 [ 541.121916][T30379] do_mprotect_pkey+0x6d6/0x980 [ 541.126785][T30379] __x64_sys_mprotect+0x48/0x60 [ 541.131653][T30379] x64_sys_call+0x274e/0x2ff0 [ 541.136341][T30379] do_syscall_64+0xd2/0x200 [ 541.140864][T30379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.146766][T30379] [ 541.149100][T30379] read to 0xffff888126215a08 of 8 bytes by task 30379 on cpu 0: [ 541.156735][T30379] mas_state_walk+0x3e9/0x650 [ 541.161430][T30379] mas_walk+0x60/0x150 [ 541.165513][T30379] lock_vma_under_rcu+0x8d/0x160 [ 541.170471][T30379] do_user_addr_fault+0x233/0x1090 [ 541.175608][T30379] exc_page_fault+0x62/0xa0 [ 541.180171][T30379] asm_exc_page_fault+0x26/0x30 [ 541.185214][T30379] [ 541.187540][T30379] Reported by Kernel Concurrency Sanitizer on: [ 541.193715][T30379] CPU: 0 UID: 0 PID: 30379 Comm: syz.2.9535 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 541.205102][T30379] Tainted: [W]=WARN [ 541.208911][T30379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 541.218972][T30379] ================================================================== [ 541.244346][T30380] wireguard0: entered promiscuous mode [ 541.249913][T30380] wireguard0: entered allmulticast mode