last executing test programs: 7m29.252398691s ago: executing program 32 (id=3344): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f0000000300)='./file0/../file0\x00', 0x9) 6m26.029449714s ago: executing program 33 (id=4384): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448d4, &(0x7f0000000000)={0x1, 0x2, '\x00', 0x0, 0xfd}) 6m18.674723065s ago: executing program 34 (id=4481): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x1}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x18) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) io_setup(0x239f, 0x0) eventfd2(0x5, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x121201, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000600)=0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000001600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00', r6}, 0x18) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000080)=0x14) close(r5) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x9, 0x1, 0x0, 0x6}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x21, 0x0, 0x0) 4m54.010418984s ago: executing program 35 (id=6044): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r1, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4c21, @private=0xa01fdff}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000ac0)}], 0x1}}], 0x2, 0x0) 4m9.160384692s ago: executing program 36 (id=6787): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000700), 0x7fff, 0x2000) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6a, 0x3, 0x20000001, 0x4) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_netdev_private(r2, 0x89f6, &(0x7f0000000500)="df1fc81bbdf1d383bf3560a293908bcd3d0a27da32e34eadf8943f6b8106897678f6d9aa93a412fd3814036e22d3a27107601258baf017f255ae4633265f28785ad79b") bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$TCGETS2(r3, 0x802c542a, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x11e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000001180)='kfree\x00', r4, 0x0, 0x4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000000801010000000000000000f2000008060002408917000005000300060000000900010073d76d07797a30000000002400068008000140000000060800024000000cf108000240000000000800024000"], 0x54}, 0x1, 0x0, 0x0, 0x4040011}, 0x8000) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4094}, 0x24000004) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x61, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c6173740000000004000280140001800c000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 3m21.907752693s ago: executing program 9 (id=7555): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES16=0x0], 0xfe, 0xa15, &(0x7f00000002c0)="$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") perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xfffd, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x800020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x810028, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000340)="a80136bbf96f59c854f5dac4990dd9747a96bcbb2197ab003210ca05d9daf86ae1870a61c8ae2fc3519ad035b9e444cfbcc574fc0f9ed2964e7aece51ef9f1c31d066d293d62ab10d974d877e092b45b5d91aa4b766593ba0ddfe74cc5618547c476bb5a5fefc4057664dc", 0x6b}, {&(0x7f0000000580)="d13759e3a3caecd56194b676399a0aece385daaca5b22e2bee44dc0a3dc474bbbb5b5378718fc79ab7b2c57766d9e5d180e547bf302185a179dc5f89cca79817d61f6b3ba9d95c305a65d17024d89db1d8189c03663147a48359e96c9b9a1d173085a6fba07a080d6cba2b97d42ad275a44b45e946c26ab2411cd6666740209fb31fc04e89aa0bb888fb6622a9a789dcc4a1c63ec105becacff5714297317bfde1125094802ebeddd548fcf24d1949d7043acfad8e59f9c48267830622f734aa15de0da688f3d86cd813424362a36fff5f54cfa69b201a0c7515eab51d6f6504b5e73606438ba939768103b7c9455306e9aa08fe39e42593b4d0467be94d", 0xfe}, {&(0x7f00000003c0)="78e52f79a36d959d949ff30097a0acd21dfc0a191af4520b4f54385653cf49c9c33b9875cfc9a4052a7216ca363f60fe8269fd8a76a0d18cb5fdbacf83e5af111c76a98452400e37e57e86fcd9a70514b1b654b87f2b2e677b7799e2ab58d36d03ae614d39d6e4d9f2e621072baa3bf66b55cc73c562", 0x76}], 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000100), 0x100000000000001a) umount2(&(0x7f0000000bc0)='./file0\x00', 0xb) 3m21.612861879s ago: executing program 9 (id=7559): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffc}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x98}}, 0x0) 3m21.544044245s ago: executing program 9 (id=7561): fdatasync(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = syz_io_uring_setup(0x14dd, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r0, 0x59f1, 0x2, 0x8, 0x0, 0xb2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, 0x0, 0x48090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmsg$unix(r3, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x80000000002, 0x1) 3m20.654609274s ago: executing program 9 (id=7573): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001800)=ANY=[@ANYBLOB="020200030f0000002cbd7040fedbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e20ac1414bb00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x8000) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x440000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x15, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000006000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000008520000001000000049b01800104000005630200f0ffffff18430000faffffff0000000000000000bf91000000000000b7020000020000008500000000000000b7030000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x5c, &(0x7f0000000580)=""/92, 0x21600, 0x43, '\x00', 0x0, 0x19, r4, 0x8, &(0x7f0000000600)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0xc, 0x6, 0x6}, 0x10, 0xe852, 0xffffffffffffffff, 0x1, &(0x7f00000007c0)=[r0, r0, r0], &(0x7f0000000800)=[{0x3, 0x3, 0x6, 0xb}], 0x10, 0x7fffffff}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@noload}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x480, &(0x7f0000000bc0)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1/../file0\x00', 0x220040, 0x2b) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xb, 0x7, 0x10001, 0x8, 0x12000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x84000, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:ppp_device_t:s0\x00', 0x22, 0x3) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000700), 0x0) 3m20.403963396s ago: executing program 9 (id=7575): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYRES8], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYRES8=0xffffffffffffffff], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESHEX, @ANYRESOCT=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) unshare(0x2040600) socket$kcm(0x2, 0x3, 0x2) (async) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141410ac1414aa00000000100000000000000000000000070000003bf9"], 0x30}, 0x0) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r5, 0x0, 0x401}, 0x11) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000001c80)={[{@barrier_val}, {@resuid}, {@grpquota}, {@usrjquota}]}, 0x1, 0x7b8, &(0x7f0000000980)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1dc) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000000480)={0x8, 0xf5, 0x5, 0x2}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x2ad9b3d5ab3ebe99, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value=r6}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x97}, 0x18) r9 = add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff) r10 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r11 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6075ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r11, r10, r10, 0x0) keyctl$KEYCTL_MOVE(0x4, r9, r9, 0x0, 0x0) (async) keyctl$KEYCTL_MOVE(0x4, r9, r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYRES8=r4], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r12}, 0x18) fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) (async) r13 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0xe9da) (async) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0xe9da) fsconfig$FSCONFIG_SET_STRING(r13, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r13, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) close(r13) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000001200)=ANY=[@ANYRES8=r11, @ANYRES8=r7, @ANYBLOB="1b44ab7635c3258b95fda26636eb71dd6aab9dffc2f6608ad77034b259038fd5ac409658cd810b10c755aa2aa8a7d683ae9ccf59e3b994e7869c79", @ANYBLOB="9ff6fadbfe39aa3a211cf9a88579c19f90972ff314bb49e73a0e22c845fb2d6d8e476ec296744c35e738544115cea458438db327d6ae624e58a097ee7ae01e05a26413260aaf0ae88f58a3926a92a18e8ed2463debbc2cc425fedbdaac4a52b2446ca307fe84a0b855566ec58eba94db8e572eda4ef9b41ec9e7ead06f9f39dc9f5312ed700955114ced6ef158192d923c24351f5672e54b636ac5dacc9c4c244e1367cf94", @ANYBLOB="5ab20a63e0ef1eee8e9ae9d82300f5f76a4be4218541f82f7c053e3c1a9f9cc934abd57960f14dc35b32ff9438c8a46d580ce9c82c8c8ab25420fce4077bd00e0e7a9361c075c20596ffa672fb6087befbd22081ca1720426afbf51c08bbc6270c7bf70f415df70bea4cc1d0bb47f58c111cbd59d0302f349a2a4cc3fc35449a2a667299f1ebe208a14b9a23233e8c322f447677a9e19b6cdd91f2a0e0489faa24415c8a350c1b1759b474e1c4c40d0fa38a7cf1c1573f52f85c2c02", @ANYRESDEC=r8, @ANYRESDEC=r4], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000001200)=ANY=[@ANYRES8=r11, @ANYRES8=r7, @ANYBLOB="1b44ab7635c3258b95fda26636eb71dd6aab9dffc2f6608ad77034b259038fd5ac409658cd810b10c755aa2aa8a7d683ae9ccf59e3b994e7869c79", @ANYBLOB="9ff6fadbfe39aa3a211cf9a88579c19f90972ff314bb49e73a0e22c845fb2d6d8e476ec296744c35e738544115cea458438db327d6ae624e58a097ee7ae01e05a26413260aaf0ae88f58a3926a92a18e8ed2463debbc2cc425fedbdaac4a52b2446ca307fe84a0b855566ec58eba94db8e572eda4ef9b41ec9e7ead06f9f39dc9f5312ed700955114ced6ef158192d923c24351f5672e54b636ac5dacc9c4c244e1367cf94", @ANYBLOB="5ab20a63e0ef1eee8e9ae9d82300f5f76a4be4218541f82f7c053e3c1a9f9cc934abd57960f14dc35b32ff9438c8a46d580ce9c82c8c8ab25420fce4077bd00e0e7a9361c075c20596ffa672fb6087befbd22081ca1720426afbf51c08bbc6270c7bf70f415df70bea4cc1d0bb47f58c111cbd59d0302f349a2a4cc3fc35449a2a667299f1ebe208a14b9a23233e8c322f447677a9e19b6cdd91f2a0e0489faa24415c8a350c1b1759b474e1c4c40d0fa38a7cf1c1573f52f85c2c02", @ANYRESDEC=r8, @ANYRESDEC=r4], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r14}, 0x10) 3m20.274521058s ago: executing program 9 (id=7578): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = getpid() prlimit64(r0, 0xb, 0x0, &(0x7f00000001c0)) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x5) fcntl$setstatus(r1, 0x4, 0x40800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc0a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) fsmount(r3, 0x1, 0xf5) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, r4}}, 0x18) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, 0x0, &(0x7f0000000180)) 3m20.274055997s ago: executing program 37 (id=7578): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = getpid() prlimit64(r0, 0xb, 0x0, &(0x7f00000001c0)) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x5) fcntl$setstatus(r1, 0x4, 0x40800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc0a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) fsmount(r3, 0x1, 0xf5) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, r4}}, 0x18) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, 0x0, &(0x7f0000000180)) 2m51.354488797s ago: executing program 6 (id=7976): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x3a) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) close(r0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000014c0)={0x0, @isdn={0x22, 0x7, 0x8, 0x31, 0x2d}, @l2tp={0x2, 0x0, @empty, 0x1}, @nl=@unspec, 0xd, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x2, 0x5, 0xcb}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYRES8=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x18, &(0x7f0000001680)={[{@delalloc}, {@lazytime}], [{@subj_role={'subj_role', 0x3d, 'kfree\x00'}}, {@euid_gt={'euid>', r3}}, {@smackfsroot={'smackfsroot', 0x3d, 'ext3\x00'}}, {@obj_type={'obj_type', 0x3d, '%\\[N%-'}}, {@permit_directio}]}, 0x1, 0x489, &(0x7f0000000a00)="$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") r5 = socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, &(0x7f0000001540)={0x80}) getdents64(r7, &(0x7f0000000400)=""/195, 0xc3) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x4, 0x0, 0xfffffff8, 0x8ce, r9}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001600)=[@in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e20, 0x4, @loopback, 0xb}], 0x5c) r10 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r10, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) 2m51.194225151s ago: executing program 6 (id=7980): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x0, 0x0}) set_robust_list(0x0, 0x0) 2m51.124474397s ago: executing program 6 (id=7981): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x18580, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r6, r5, 0x0, 0x80000000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050001000100000008000200", @ANYBLOB='\b'], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a005}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0xfe, {0x3, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x54}, 0x1, 0xba01}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'rose0\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x60}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40000011) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'rose0\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x60}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40000011) 2m50.902442387s ago: executing program 6 (id=7985): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x6, 0x1000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4f6, &(0x7f0000000cc0)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x4f0082, 0x132) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$phonet_pipe(0x23, 0x5, 0x2) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbf6f4aaaaaaaaaa0800452400eaed6800007f0190780a010102ffffffea0f0090781e160006"], 0x0) 2m50.517873971s ago: executing program 6 (id=7996): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000680)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOUCQqgSokeQtiHxRlHsOIqd0oQ9pGeuSFTiBEf+AG5IPSFx5ILgxqUckPgRgRokDoNmPMk6WbuJNokdxZ+PNJr35s36+32bnffWL4lfACPrdkTsR8RERLwbEbP59UJ+xFudI73vk4NHK4cHj1YKkSTv/LOQtafXouvPpG7lr1mOiO9/O+JHhSfjtnb3Npbr9dp2Xp9vN7bmW7t799Yby2u1tdpmtbq0uLTwxv3Xq5fW15caE3npix//Yf9rP0nTmsmvdPfjMnW6XjqOkxqPiO9eRbAhGMv7MzHsRHgqxYh4PiJezp7/2RjLvpoAwE2WJLORzHbXAYCbrpitgRWKlXwtYCaKxUqls4b3QkwX681W++7D5s7mametbC5KxYfr9dpCvlY4F6VCWl/Myo/r1VP1+xHxXET8bHIqq1dWmvXVYf7HBwBG2K1T8/9/JjvzPwBww5WHnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9q2GkAAAPk/T8AjB7zPwCMlO+9/XZ6JIf551+vvre7s9F8795qrbVRaeysVFaa21uVtWZzLfvMnsZZr1dvNrcWX4ud9+e+vtVqz7d29x40mjub7QfZ53o/qJWyu/YH0DMAoJ/nXvroz4V0Rn5zKjuiay+H0lAzA65acdgJAEMzNuwEgKGx2xeMrgu8x7c8ADdEjy16j/3+W0lS7vULQkmSJFebFnCF7nzO+j+Mqq71fz8FDCPG+j+MLuv/MLqSpHDePf/jvDcCANebNX6gz/f/n8/Pv86/OfDD1dN3fHiVWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD1drT/byXfC3wmisVKJeKZiJiLUuHher22EBHPRsSfJkuTaX1xyDkDABdV/Fsh3//rzuyrMyeaXrx1XJyIiB//4p2fv7/cbm//MWKi8K/Jo+vtD/Pr1cFnDwCc7Wiezs5db+Q/OXi0cnQMMp+/fzMiyp34hwcTcXgcfzzGs3M5ShEx/e9CXu8odK1dXMT+BxHx2V79L8RMtgbS2fn0dPw09jMDjV88Eb+YtXXO6d/FZy4hFxg1H6Xjz1u9nr9i3M7OvZ//cjZCXVw+/qUvtXKYjYGP4x+Nf2N9xr/b543x2u++0ylNPdn2QcTnxyOOYh92jT9H8Qt94r96+sX6DIh/+cKLL/fLLfllxJ3oHb871ny7sTXf2t27t95YXqut1Tar1aXFpYU37r9enc/WqOf7zwb/ePPus/3a0v5P94lfPqP/X+4b8aRf/e/dH3zpU+J/9ZVe8YvxwqfET+fEr5wz/vL0b8r92tL4q336f9bX/+4543/8170ntg0HAIantbu3sVyv17b7Fn47ffY9CgoDKaT/ZK9BGj0L3xhUrIno3fTTVzrP9KmmJHmqWCfHicfvHC9j1Q24Do4f+oj477CTAQAAAAAAAAAAAAAAehrEbywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//9140jY=") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) 2m50.093621608s ago: executing program 6 (id=8007): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='kfree\x00', r0, 0x0, 0x80000000}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 2m49.865028619s ago: executing program 38 (id=8007): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='kfree\x00', r0, 0x0, 0x80000000}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 2m38.759603131s ago: executing program 7 (id=8131): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=@delchain={0x4c, 0x64, 0xf31, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xda}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x10001}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m38.65280315s ago: executing program 7 (id=8134): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) 2m36.817386513s ago: executing program 7 (id=8137): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000040)={0x1, 0x0, [0x0]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000007946b089ff18020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8000, 0x20, 0x4, 0x7f97, {{0xa, 0x4, 0x2, 0x2e, 0x28, 0x64, 0x0, 0x20, 0x2f, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@end, @end, @lsrr={0x83, 0x7, 0x34, [@broadcast]}, @lsrr={0x83, 0xb, 0xca, [@multicast1, @remote]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r4, 0x25, 0x8, @void}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003800)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 2m36.739480599s ago: executing program 7 (id=8139): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x6, 0x1000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4f6, &(0x7f0000000cc0)="$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") openat(0xffffffffffffff9c, 0x0, 0x4f0082, 0x132) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$phonet_pipe(0x23, 0x5, 0x2) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbf6f4aaaaaaaaaa0800452400eaed6800007f0190780a010102ffffffea0f0090781e160006"], 0x0) 2m36.426578667s ago: executing program 7 (id=8147): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20550, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r0}, &(0x7f0000000ac0), &(0x7f0000000b00)=r2}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x190da) 2m35.810418932s ago: executing program 7 (id=8159): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) lseek(0xffffffffffffffff, 0x5, 0x4) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000006c0)={@none, 0x6, 0x7, 0x5, 0x5, 0xfb3f, "fb7af2913c0d1bc02bdcb15006b17074968984432c99171587e5da422a90618e6acd4260dd1e4e8092b9af24c27f406a85efc35e47e9165c99a7d8b03cc0bd28e7291a3fd5a40963a205ae1f9cbb57f2e1a2ef1ef79b39e376a9befc30c763caee6df4a82ac56fb8d6fc81e09689dd96f51eef5348cd6e794697189b518f4a83"}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x1cc0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x518, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xed}, 0x4c58, 0xd, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x11, r3, 0xc266c000) write$selinux_validatetrans(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="3d1baa4bf84d35b7b32539bf4d74ab3078a401db937625ee323643a8719505c25622626aae", @ANYRESOCT=r0, @ANYRESDEC=r0], 0x68) 2m35.770276595s ago: executing program 39 (id=8159): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) lseek(0xffffffffffffffff, 0x5, 0x4) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000006c0)={@none, 0x6, 0x7, 0x5, 0x5, 0xfb3f, "fb7af2913c0d1bc02bdcb15006b17074968984432c99171587e5da422a90618e6acd4260dd1e4e8092b9af24c27f406a85efc35e47e9165c99a7d8b03cc0bd28e7291a3fd5a40963a205ae1f9cbb57f2e1a2ef1ef79b39e376a9befc30c763caee6df4a82ac56fb8d6fc81e09689dd96f51eef5348cd6e794697189b518f4a83"}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x1cc0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x518, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xed}, 0x4c58, 0xd, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x11, r3, 0xc266c000) write$selinux_validatetrans(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="3d1baa4bf84d35b7b32539bf4d74ab3078a401db937625ee323643a8719505c25622626aae", @ANYRESOCT=r0, @ANYRESDEC=r0], 0x68) 2m20.722130277s ago: executing program 4 (id=8370): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x200400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf25"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="190000001000000000000000", @ANYBLOB="3fa346a5980ee8b3f8dd3801b6023ffcce096de3687e6e1a1df3348a008274685e71ab6c88b21902dbcbe2d1660d2bcea443d9398b045258fd1394f1b3d87a79ad18450465a9ccb4f4b2bb811742140f59814c4e12f8fb36fcc26ef545af18452ce575033f8813b1a40aa0b818d3df9298eb7d7e7dea4f6c61248b2d258f4382571f4412adf0aad397a946a914549fe4ada5db7dcd5cc8ee1a1d9d8eb97674bc540a910b4f428829ea02616ba66b58d5f529d7", @ANYRES64=r7], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a40)=ANY=[@ANYRES32=r5, @ANYBLOB="310000001400", @ANYRES32=r2, @ANYBLOB="e1138733281ae6af7246c023d0b72501724243d2222afd3d9185f19bc1867576b3eba9e94e8bd56cc4dc8f2295ba7c65d6f3658ecebfb81116199e40d97c34507d4753933d01c4ae4467783bc9d9ef87842c18566e5b6ebbfbb54371532f91f30c53036b588e2bc240f6", @ANYRES64=r7], 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001cc0)=@newqdisc={0x434, 0x24, 0x4ee4e6a52ff56541, 0x30bd27, 0x4000005, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x6, 0x6b16, 0x7, 0xfffffffd, 0x8, 0x8, 0x3, 0x7, 0x7, 0x25, 0x0, 0x80, 0x9, 0x30, 0x8, 0x81, 0x9, 0x2, 0x8, 0x40, 0x8, 0x80000001, 0x608cccb7, 0x10000400, 0x7a2, 0x5, 0x400, 0x3, 0xffffeffa, 0x6, 0x6, 0xaf8, 0x4, 0x3, 0x3ff, 0x9, 0x2, 0x3, 0x10001, 0x1, 0x5, 0x10001, 0x3, 0x59, 0x3, 0xd54e, 0x40, 0x6, 0xd, 0x0, 0x28, 0x9, 0xa4800000, 0x1, 0xa0, 0x1, 0x7, 0x4, 0x1, 0x7, 0x4, 0xff, 0x5, 0x7, 0x3ff, 0x3, 0xf6a5, 0x7fffffff, 0x8, 0x2, 0xcff, 0xfffffacf, 0x0, 0x4, 0x10001, 0xc, 0x1, 0x2, 0x8002, 0x5, 0x5, 0x5, 0xfffffffb, 0x5, 0x0, 0x4, 0x4edcaeea, 0x2, 0xe, 0xe, 0xfff, 0x4, 0x496c01fc, 0x4, 0x7fffffff, 0x9, 0x8, 0x12, 0x9, 0x80000001, 0x325b, 0x7, 0x0, 0x80000006, 0x2, 0x3, 0x5, 0x1, 0x18001, 0x6a9, 0x94, 0x2, 0x9, 0x7, 0x3, 0x5, 0x80, 0x1, 0xffffffff, 0x4, 0x0, 0x4, 0x3, 0x4, 0x5, 0xa993, 0x202, 0x6847adf1, 0x6, 0x9, 0x81, 0x7, 0x5, 0x5, 0x7fffffff, 0x8, 0xc, 0xd, 0x2, 0x1, 0x7fffffff, 0x8, 0x1, 0x8, 0x8, 0x91e, 0x4, 0xe, 0x8001, 0x20008, 0x40000, 0x0, 0x9, 0xd, 0x5, 0x8, 0x100, 0x9a0, 0x0, 0xb, 0x2, 0x9, 0x6, 0x3ff, 0x6, 0x1, 0xf682, 0x40, 0x637, 0x8, 0x3, 0x1fffe, 0xfffdfffe, 0x5, 0x1, 0xfffffff8, 0xa608, 0x23972b48, 0x7, 0x2, 0x0, 0x0, 0x4, 0xa, 0x5, 0x6, 0x10, 0x5, 0x5, 0x10, 0x41, 0x2, 0x76, 0x3, 0xfffffffa, 0x7, 0x2, 0x20004, 0x40, 0x9, 0x6, 0x2ef, 0xfffffffb, 0xcf30, 0x8, 0x4, 0xffffff8a, 0x0, 0x4, 0x80000000, 0x4, 0x2, 0x0, 0x2, 0x6, 0xfff, 0x4, 0x1, 0x40, 0x5, 0x9, 0x5, 0x8, 0x80000000, 0x0, 0x3, 0xeff, 0x6, 0x8001, 0x8, 0xc, 0x3, 0x1, 0x0, 0x5, 0x8, 0x6c67, 0x800, 0xffffff59, 0x9, 0x0, 0x303, 0x7, 0x1, 0x6, 0x6, 0x6, 0x7, 0x4, 0xc, 0x42, 0x3, 0x5f, 0x5fa, 0x10001]}]}}]}, 0x434}}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000bc0)={'ip6_vti0\x00', &(0x7f0000000b40)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x6, 0x1, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x1, 0x1, 0x1000, 0x3}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c00)={0x138, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004}, 0x80) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000001812", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x7}, 0x18) r10 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$selinux_validatetrans(r10, 0x0, 0x6d) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000"], 0x48) r11 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22b81) ioctl$SCSI_IOCTL_SEND_COMMAND(r11, 0x1, &(0x7f0000000040)=ANY=[]) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff12000300686173683a6e65742c706f7274000040"], 0x60}}, 0x0) r13 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r13, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x8b}], 0x2, 0x0, 0x0) 2m20.637237934s ago: executing program 4 (id=8376): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_unlink(&(0x7f0000000580)='\x00') 2m20.56269365s ago: executing program 4 (id=8377): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000040)={0x2, 0x0, [0x0, 0x0]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000007946b089ff18020000", @ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8000, 0x20, 0x4, 0x7f97, {{0xa, 0x4, 0x2, 0x2e, 0x28, 0x64, 0x0, 0x20, 0x2f, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@end, @end, @lsrr={0x83, 0x7, 0x34, [@broadcast]}, @lsrr={0x83, 0xb, 0xca, [@multicast1, @remote]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r4, 0x25, 0x8, @void}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003800)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 2m20.555670901s ago: executing program 4 (id=8379): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") creat(0x0, 0x40) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, 0x171d, 0x0, 0x6, 0x0, 0x8, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c4149aac63a4b78c660dd77df701908b9aaa3f6a0040000000200", "036c47c67808e90c12a3b66fe1fdc4335263bdbcef549b8197fce47ddfdd753abd9501dc721b6ae9b4e0ff0000000000008f8e00", "b7326736181c208220000000b9000010000000000000f0ffefffff5aff000001"}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) shutdown(0xffffffffffffffff, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000380007012cbd7000fedbdf25037c00000c00018008000100", @ANYRES32=r3, @ANYBLOB="e32e8341b1fe53e6502f6169d2dfaf907e07cd2069698ecfcc2047385f1039a51da4226affcb04ebbbfdbddfc3c9307dea858286914a8eb708f76fc87b651a54bbd67ebc35516a5b2aa2ae54bdb65c7b6865603e8ab5d3d4f9907dca2a6f3f51ba9e635f157c226a65fcf2a0349f1db383458cbc5f92f5c26103ba5361451b08fd0cdde96491b0b5f5b6f70a73a47f663400"/159], 0x20}, 0x1, 0x0, 0x0, 0x4008011}, 0x8010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getgid() write$binfmt_format(r4, &(0x7f0000000800)='-1\x00', 0x3) 2m20.436080782s ago: executing program 4 (id=8381): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000858}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x3}, {0x9, 0x5}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0xe0) (fail_nth: 4) 2m19.994667801s ago: executing program 4 (id=8388): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) (fail_nth: 6) 2m19.984712882s ago: executing program 40 (id=8388): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) (fail_nth: 6) 1m4.127988062s ago: executing program 3 (id=9703): unshare(0x2c020400) unshare(0x4000000) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000003, 0x8031, 0xffffffffffffffff, 0xc5488000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = msgget$private(0x0, 0x790) msgsnd(r1, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) msgsnd(r1, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x401, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, 0xee01, 0x52, 0x7}, 0x0, 0x0, 0xc7af, 0x4, 0x7fff, 0x7fffffff, 0x5, 0x180, 0x8, 0x401}) r2 = socket$unix(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) set_mempolicy(0x4005, 0x0, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r5}, 0x18) r6 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x550, 0xfffffffffffffc75}, 0x0, 0x0, 0x8000003, 0x4, 0x0, 0x40d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, 0x0}, 0x108) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000180)='cpu<=0||!') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r9], 0x4c}}, 0x0) msgrcv(r1, &(0x7f0000000000)={0x0, ""/5}, 0xd, 0x0, 0x2800) 1m4.005583903s ago: executing program 3 (id=9707): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000002039000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='timer_start\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 1m3.994444264s ago: executing program 3 (id=9709): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYBLOB="0000000000000000b70300000000000085"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x5c, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "f102dcf29effae15cd"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x6d, &(0x7f0000000000)=""/109, 0x40f00}, 0x94) r3 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0xf, 0x9, 0x6, 0x1, @local, @private2, 0x1, 0x20, 0x9, 0x7}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300"], &(0x7f0000000040)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000500)='rxrpc_notify_socket\x00', r6, 0x0, 0x1}, 0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r5, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r5, 0x1) 1m3.904098592s ago: executing program 3 (id=9712): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4006) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd"], 0x50) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40095505, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000080000000010100"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb2eea0c34ea77d9a, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000020000000000", @ANYRES32=r1, @ANYRESDEC=r0], &(0x7f0000000780)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="8100"}) mmap(&(0x7f0000188000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0xd6dac000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00010000000000000000008bdab6e5bb0a1228954ef4900000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) open(0x0, 0x24040, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1c84740, &(0x7f0000000080), 0x2, 0x4c2, &(0x7f0000000ac0)="$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") r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x16e) 1m2.974911514s ago: executing program 3 (id=9728): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x2) r1 = syz_io_uring_setup(0xbdc, &(0x7f00000002c0)={0x0, 0xa496, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0) (fail_nth: 7) 1m2.741886145s ago: executing program 3 (id=9733): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00bd334d18bcc95509002d009b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) signalfd4(r2, &(0x7f0000000240), 0x8, 0x80000) listen(r4, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x17, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0xfda0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000002c0)='kfree\x00', r6, 0x0, 0x40}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendto$unix(r3, &(0x7f0000000540)="95", 0x1, 0x4005, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000010000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e2400000009000000000000000000000000000000000600000000000000020013"], 0x98}, 0x1, 0x7}, 0x8890) 1m2.675235021s ago: executing program 41 (id=9733): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00bd334d18bcc95509002d009b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) signalfd4(r2, &(0x7f0000000240), 0x8, 0x80000) listen(r4, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x17, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0xfda0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000002c0)='kfree\x00', r6, 0x0, 0x40}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendto$unix(r3, &(0x7f0000000540)="95", 0x1, 0x4005, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000010000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e2400000009000000000000000000000000000000000600000000000000020013"], 0x98}, 0x1, 0x7}, 0x8890) 5.885159499s ago: executing program 5 (id=10757): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000000010002000c000280050001000000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0) syz_clone3(&(0x7f0000000880)={0x40000100, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680), {0x26}, &(0x7f00000006c0)=""/229, 0xe5, &(0x7f00000007c0)=""/99, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) chdir(&(0x7f00000001c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x17) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) 5.685847026s ago: executing program 5 (id=10765): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgrp(0xffffffffffffffff) sendmmsg$unix(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0, 0xa4, &(0x7f0000000dc0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x40}}], 0x1, 0x20000000) 5.366584454s ago: executing program 5 (id=10771): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="00fb000000010000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000001c80)={0x16, 0x98, 0xfa00, {&(0x7f0000001bc0), 0x2, 0xffffffffffffffff, 0x20, 0x1, @ib={0x1b, 0x72, 0x2, {"38ce7a492d80482313680595eaca3bea"}, 0x89, 0x40, 0x1}}}, 0xa0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000400)={0x0, 0x75}, 0x8) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000180)=@xdp, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000040)=""/25, 0x19}, {&(0x7f0000000200)=""/8, 0x8}, {&(0x7f0000000700)=""/74, 0x4a}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000880)=""/199, 0xc7}, {&(0x7f0000000980)=""/193, 0xc1}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x7, &(0x7f0000001b00)=""/120, 0x78}, 0x0) recvmsg$can_raw(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/28, 0x1c}, {&(0x7f00000014c0)=""/149, 0x95}], 0x2}, 0x40000101) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) fadvise64(0xffffffffffffffff, 0x1, 0x6, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001d40)=ANY=[@ANYBLOB="18e6ff00000000fff7000000000000001811000039adda5b57e94078de5967b6184380c9d74a37703dc7e90fdedf2da674e710b7306795ea0c25ebbde4c8", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="0000000000000000000064ca20ddee7a78d40000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) statfs(&(0x7f0000001b80)='./file1\x00', &(0x7f0000001c00)=""/125) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) copy_file_range(r5, 0x0, r5, &(0x7f00000000c0)=0xc, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1800018, &(0x7f00000000c0)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000ec0)="$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") 4.663145407s ago: executing program 5 (id=10785): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x30, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000240)='./file0/file0\x00', 0x72) flock(r1, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) 3.710307821s ago: executing program 5 (id=10808): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000a88b360800000800450000ef0700000000000078ac1414bbac14140c"], 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r7}, 0x18) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r10 = getpid() getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000240)=0x4) sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) 3.427393276s ago: executing program 5 (id=10818): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r0, r0, 0x0, 0xaca) 3.394005769s ago: executing program 42 (id=10818): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r0, r0, 0x0, 0xaca) 1.156961358s ago: executing program 1 (id=10870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 1.073550345s ago: executing program 1 (id=10875): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000300)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x1, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0xa041, 0xd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000400000000000000008500000023000000", @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x2000000, 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) write$cgroup_int(r0, &(0x7f0000000040)=0xfe8e, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r3 = openat(0xffffffffffffffff, 0x0, 0x42040, 0x0) fcntl$setlease(r3, 0x400, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) 622.277705ms ago: executing program 2 (id=10880): mkdir(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, 0x0, 0x8094) socket(0xa, 0x3, 0x3a) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) close(0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='net_dev_xmit\x00', r3, 0x0, 0x4}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) 587.444119ms ago: executing program 2 (id=10882): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 545.555052ms ago: executing program 2 (id=10885): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="00fb000000010000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000001c80)={0x16, 0x98, 0xfa00, {&(0x7f0000001bc0), 0x2, 0xffffffffffffffff, 0x20, 0x1, @ib={0x1b, 0x72, 0x2, {"38ce7a492d80482313680595eaca3bea"}, 0x89, 0x40, 0x1}}}, 0xa0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000180)=@xdp, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000040)=""/25, 0x19}, {&(0x7f0000000200)=""/8, 0x8}, {&(0x7f0000000700)=""/74, 0x4a}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000880)=""/199, 0xc7}, {&(0x7f0000000980)=""/193, 0xc1}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x7, &(0x7f0000001b00)=""/120, 0x78}, 0x0) recvmsg$can_raw(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/28, 0x1c}, {&(0x7f00000014c0)=""/149, 0x95}], 0x2}, 0x40000101) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) fadvise64(0xffffffffffffffff, 0x1, 0x6, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001d40)=ANY=[@ANYBLOB="18e6ff00000000fff7000000000000001811000039adda5b57e94078de5967b6184380c9d74a37703dc7e90fdedf2da674e710b7306795ea0c25ebbde4c8", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="0000000000000000000064ca20ddee7a78d40000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) statfs(&(0x7f0000001b80)='./file1\x00', &(0x7f0000001c00)=""/125) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) copy_file_range(r5, 0x0, r5, &(0x7f00000000c0)=0xc, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1800018, &(0x7f00000000c0)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000ec0)="$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") 480.194098ms ago: executing program 8 (id=10888): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001d00010027bd7000fddbdf2502000000", @ANYRES32=0x0, @ANYBLOB="00003280652d13e0b6efbcbf0b5a18610e2e39000a0001d8d361e600ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) setresgid(0xee00, 0xee01, 0x0) setregid(0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0xee, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000f40), 0xc000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xca, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xe4, 0x0, &(0x7f00000000c0)="4d350a56a7bc74f8e9be2c1fc6b8590afd6f1dd0cf4762f72aae129a3603c71d9b813433f9f431b688bee7c2873eb6cfec9997ad55119427828d6e744a09d409d9cf8c47c68fa0a7cba7f23a392b73633d62a606b49ecf4884ef4edcda5a7ad6b0d27e0a8504ebfabc73b3fea0c0354869f46f7ca04f882d2d4d9fb6e27d22ac390383cb8cd746864f83e39380357181fa2857a7cef1b7b95c6407af9566802212f6bd9b8c22ce36ccaf140b4d4eef21095c89726a089f8b7af623d08adfa444056fa899dfed6d990cf9318c1fd5b2ec22835c5e8325a415627a0d61727e644f3a6b68a2", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x55}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f0000000000), 0x0}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003b40)=@ipv4_getnexthop={0x18, 0x6a, 0xf5c1404b35d587dd, 0x0, 0x0, {0x2, 0x2}}, 0x18}}, 0x0) 356.490409ms ago: executing program 8 (id=10890): r0 = socket(0xa, 0x5, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x38, 0x4855}, 0x24000052) 355.642019ms ago: executing program 1 (id=10891): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x8, 0x3, 0x0, 0x4000000000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x4}, 0xae14943eec8d2525, 0x7ff, 0x6, 0x3, 0x80000b, 0x2, 0x3fb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x968}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x160, 0x1, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa0}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASK={0x68, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x22}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_MASK={0xc0, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 355.310469ms ago: executing program 8 (id=10892): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000002540)=""/4096, 0x1000) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) uname(&(0x7f0000000080)=""/161) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x5}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf25020000000800080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40480c0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000000600)={@multicast2, @empty}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000859400000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00'}, 0x18) sendfile(r7, r7, 0x0, 0xaca) 309.382573ms ago: executing program 0 (id=10894): write$selinux_load(0xffffffffffffffff, 0x0, 0x0) socket(0x1, 0x803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}, 0x9439, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 284.473025ms ago: executing program 1 (id=10895): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a0}}, 0x0) 283.914285ms ago: executing program 8 (id=10896): unshare(0x22020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) fsmount(0xffffffffffffffff, 0x0, 0x0) 281.758505ms ago: executing program 0 (id=10897): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000008000000001000000ffff000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r1, 0x0, &(0x7f0000000140)=""/241}, 0x20) 225.6319ms ago: executing program 0 (id=10898): openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80, 0x18) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:ppp_device_t:s0\x00', 0x22, 0x3) 225.13893ms ago: executing program 0 (id=10899): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000240)) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x24, 0x5f, 0xf31, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0x5, 0xffe0}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x40) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000000)=[{0x0}], 0x1) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b46f3685e2a41fe335a30000626100000061105c000000000005000000000000b954668242ae6f8a623f3dfe2582c2fee6fd16e9b9a480c5d52c43704619210923cff7a8ca80d38c9cff37e83424b05216955fd67aee835cc7028f47db235a7fa7bd27e75ee974bb546777b7ec6fe34e3453f5c14f62764a2cde8e7400c88af0d7338c1eea"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x40000000}, 0x10}, 0x94) 212.012491ms ago: executing program 1 (id=10900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7111}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x7, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x6, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x70}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000000) 157.753606ms ago: executing program 8 (id=10901): socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x60, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 157.585136ms ago: executing program 0 (id=10902): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) socket(0x200000000000011, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0010ebffffffffffffff00000000"], 0x48) socket(0x11, 0x800000003, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = io_uring_setup(0xa9e, &(0x7f0000000880)={0x0, 0xa793, 0x1, 0x5, 0x2a}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000001f0000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 156.593937ms ago: executing program 2 (id=10903): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) 102.823061ms ago: executing program 8 (id=10904): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000680)={'#! ', '.'}, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x6000)=nil, 0x6000, 0x4, 0x88012, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180002000000000400d09543cc4d7d83705c7a72f61d0ccb9926d93a17051857080000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11c}, 0x94) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000380)="f89dbb51cb20728a35f6cde79fd4dcf5e9c0e5566df91f5e00da17488a6dff12caa84a9f2e9b6dd27c45a6ebfb149bf97f3671a4127cbfd2812330ee9f22024122826683a146f12e80dee0800f98a89150fbae390deaff4bd4d564b6a30e8f18cf94fca0e301a018388c", 0x6a}, {&(0x7f0000000540)="9bf8ea8328c229d6e579f6e2e84be3efb8b4ee4fb6dac20cbcd093b1b4485e29efb93125b8357ff25821b95d89148b29447888f88040e7ebf9e177c4914a40881dcbed9f164165eff3f2302ea53389e1d475bace4d2a5ee2c1518991d697d904d66ef7182141f47780e15a99dad48077ada6718bdbc1baba", 0x78}, {&(0x7f0000000400)="bc2c0d6513f71925d034fbd8f3fa9faa9b12bf9028974d27106cb4d38b9d436df4a5d1889e1206e489931cd8d839b5b77f530266c8", 0x35}, {&(0x7f00000005c0)="154c58e2fb31957a34d1a3f8b8d3ccda73f8eea3641a485a338fc1a297fc3b9a5337278b6eb1ad435cd0efb4b34181fb10821c0faa8dc56fff261524511adee1e369c586834a2428016e87bd5bba77f3413167a85ef81ce0324e1bf07d5e7875e048de88c92efda192b2378e6e68a7fee7f9e12a6b4bf1173c8b3b03c221fe8a8206663eb9e5e099a7fa00515d42ea082661eb19299aeb57157a676d34", 0x9d}], 0x4, &(0x7f0000001300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x60748000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @remote}}}], 0x38}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000200)={[{@abort}, {@errors_remount}, {@nomblk_io_submit}, {@bsdgroups}, {@norecovery}, {@minixdf}, {@nobh}]}, 0xfe, 0x7b7, &(0x7f0000000780)="$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") pivot_root(&(0x7f0000000000)='.\x00', &(0x7f00000004c0)='./file1\x00') perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d6174636800"], 0xf0}}, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x3, 0x79b}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r9, 0x0, 0x39000, 0x0) splice(r8, 0x0, r7, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) perf_event_open(&(0x7f0000000a40)={0x5, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x484, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x100008000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) 101.863301ms ago: executing program 2 (id=10905): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@errors_remount}, {@oldalloc}, {@usrquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x5a4, &(0x7f0000002000)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) unlinkat(0xffffffffffffffff, 0x0, 0x0) r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000240)={0x1, 0x1, 0x5b, 0x7}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) mq_timedsend(r4, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r4, &(0x7f0000000980)=""/202, 0xca, 0xe, 0x0) 42.639887ms ago: executing program 2 (id=10906): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000002540)=""/4096, 0x1000) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) uname(&(0x7f0000000080)=""/161) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x5}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf25020000000800080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40480c0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000000600)={@multicast2, @empty}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000859400000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r7, r7, 0x0, 0xaca) 32.177708ms ago: executing program 0 (id=10907): r0 = syz_open_dev$vcsa(&(0x7f0000000240), 0xfffb, 0x141c42) writev(r0, &(0x7f0000000c40)=[{0x0, 0x19}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x1, 0x3ee2, 0x8, 0x0, 0x71f5, 0x8000000000000000], 0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRESHEX=r1], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) getdents(0xffffffffffffffff, &(0x7f00000000c0)=""/35, 0x23) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 0s ago: executing program 1 (id=10908): r0 = syz_open_dev$vcsa(&(0x7f0000000240), 0xfffb, 0x141c42) writev(r0, &(0x7f0000000c40)=[{0x0, 0x19}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x1, 0x3ee2, 0x8, 0x0, 0x71f5, 0x8000000000000000], 0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRESHEX=r1], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) getdents(0xffffffffffffffff, &(0x7f00000000c0)=""/35, 0x23) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) kernel console output (not intermixed with test programs): 30.444746][ T3174] dump_stack_lvl+0x95/0xd0 [ 630.444852][ T3174] dump_stack+0x15/0x1b [ 630.444879][ T3174] should_fail_ex+0x265/0x280 [ 630.444907][ T3174] should_failslab+0x8c/0xb0 [ 630.444935][ T3174] __kmalloc_noprof+0xb9/0x5a0 [ 630.444959][ T3174] ? apply_wqattrs_prepare+0x6e/0x670 [ 630.445013][ T3174] ? pcpu_memcg_post_alloc_hook+0xf3/0x170 [ 630.445051][ T3174] apply_wqattrs_prepare+0x6e/0x670 [ 630.445143][ T3174] alloc_workqueue_noprof+0xd63/0x1320 [ 630.445170][ T3174] ? dev_set_name+0x83/0xb0 [ 630.445286][ T3174] hci_register_dev+0x167/0x570 [ 630.445315][ T3174] hci_uart_tty_ioctl+0x520/0x5c0 [ 630.445351][ T3174] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 630.445389][ T3174] tty_ioctl+0x83f/0xb80 [ 630.445467][ T3174] ? __pfx_tty_ioctl+0x10/0x10 [ 630.445486][ T3174] __se_sys_ioctl+0xce/0x140 [ 630.445521][ T3174] __x64_sys_ioctl+0x43/0x50 [ 630.445557][ T3174] x64_sys_call+0x14b0/0x3000 [ 630.445626][ T3174] do_syscall_64+0xca/0x2b0 [ 630.445718][ T3174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.445778][ T3174] RIP: 0033:0x7f994591f749 [ 630.445798][ T3174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.445820][ T3174] RSP: 002b:00007f9944387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 630.445923][ T3174] RAX: ffffffffffffffda RBX: 00007f9945b75fa0 RCX: 00007f994591f749 [ 630.445936][ T3174] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000005 [ 630.445950][ T3174] RBP: 00007f9944387090 R08: 0000000000000000 R09: 0000000000000000 [ 630.445967][ T3174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.445983][ T3174] R13: 00007f9945b76038 R14: 00007f9945b75fa0 R15: 00007fff61f99aa8 [ 630.446005][ T3174] [ 630.485829][ T3174] Bluetooth: Can't register HCI device [ 630.645924][ T3186] net_ratelimit: 4 callbacks suppressed [ 630.645938][ T3186] openvswitch: netlink: Flow actions attr not present in new flow. [ 630.814814][ T3194] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 631.126008][ T3204] netlink: 7 bytes leftover after parsing attributes in process `syz.2.10107'. [ 631.135747][ T3204] netlink: 7 bytes leftover after parsing attributes in process `syz.2.10107'. [ 631.180631][ T3206] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.10106'. [ 631.181166][ T3210] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.10106'. [ 631.237682][ T3206] netlink: zone id is out of range [ 631.243071][ T3206] netlink: zone id is out of range [ 631.249359][ T3206] netlink: zone id is out of range [ 631.254848][ T3206] netlink: zone id is out of range [ 631.287569][ T3210] netlink: zone id is out of range [ 631.292830][ T3210] netlink: zone id is out of range [ 631.310842][ T3206] netlink: zone id is out of range [ 631.323780][ T3210] netlink: zone id is out of range [ 631.329000][ T3210] netlink: zone id is out of range [ 631.456881][ T3222] loop5: detected capacity change from 0 to 512 [ 631.479789][ T3222] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 631.517665][ T3222] EXT4-fs (loop5): 1 orphan inode deleted [ 631.523502][ T3222] EXT4-fs (loop5): 1 truncate cleaned up [ 631.529630][ T3222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 631.579156][ T3226] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10114'. [ 631.588343][ T3226] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10114'. [ 631.602232][ T1669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.616945][ T3235] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 631.677413][ T3242] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10119'. [ 631.715961][ T3242] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10119'. [ 631.969898][ T3268] loop5: detected capacity change from 0 to 512 [ 631.992456][ T3282] 0ªX¹¦À: renamed from caif0 [ 631.997371][ T3268] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 632.007630][ T3282] 0ªX¹¦À: entered allmulticast mode [ 632.014402][ T3268] EXT4-fs (loop5): orphan cleanup on readonly fs [ 632.023040][ T3283] 1ªX¹¦À: renamed from 60ªX¹¦À [ 632.033746][ T3268] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.10125: corrupted inode contents [ 632.046565][ T3268] EXT4-fs (loop5): Remounting filesystem read-only [ 632.053491][ T3268] EXT4-fs (loop5): 1 truncate cleaned up [ 632.059558][ T1125] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 632.070152][ T1125] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 632.081248][ T1125] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 632.092651][ T3268] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 632.127391][ T1669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.153086][ T3285] dummy0: entered allmulticast mode [ 632.158679][ T3285] dummy0: left allmulticast mode [ 632.340167][ T29] kauditd_printk_skb: 1800 callbacks suppressed [ 632.340186][ T29] audit: type=1400 audit(1152.456:109038): avc: denied { setcurrent } for pid=3297 comm="syz.5.10140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 632.365887][ T29] audit: type=1401 audit(1152.456:109039): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 632.391057][ T3301] FAULT_INJECTION: forcing a failure. [ 632.391057][ T3301] name failslab, interval 1, probability 0, space 0, times 0 [ 632.403877][ T3301] CPU: 0 UID: 0 PID: 3301 Comm: syz.1.10139 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 632.403979][ T3301] Tainted: [W]=WARN [ 632.403988][ T3301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 632.404004][ T3301] Call Trace: [ 632.404009][ T3301] [ 632.404016][ T3301] __dump_stack+0x1d/0x30 [ 632.404041][ T3301] dump_stack_lvl+0x95/0xd0 [ 632.404092][ T3301] dump_stack+0x15/0x1b [ 632.404117][ T3301] should_fail_ex+0x265/0x280 [ 632.404211][ T3301] should_failslab+0x8c/0xb0 [ 632.404232][ T3301] kmem_cache_alloc_noprof+0x69/0x4b0 [ 632.404393][ T3301] ? skb_clone+0x151/0x1f0 [ 632.404433][ T3301] skb_clone+0x151/0x1f0 [ 632.404468][ T3301] __netlink_deliver_tap+0x2c9/0x500 [ 632.404505][ T3301] netlink_unicast+0x66b/0x690 [ 632.404595][ T3301] netlink_sendmsg+0x58b/0x6b0 [ 632.404714][ T3301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.404744][ T3301] __sock_sendmsg+0x145/0x180 [ 632.404764][ T3301] ____sys_sendmsg+0x31e/0x4a0 [ 632.404798][ T3301] ___sys_sendmsg+0x17b/0x1d0 [ 632.404924][ T3301] __x64_sys_sendmsg+0xd4/0x160 [ 632.404965][ T3301] x64_sys_call+0x17ba/0x3000 [ 632.405008][ T3301] do_syscall_64+0xca/0x2b0 [ 632.405066][ T3301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.405092][ T3301] RIP: 0033:0x7f971c8df749 [ 632.405106][ T3301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.405136][ T3301] RSP: 002b:00007f971b326038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.405188][ T3301] RAX: ffffffffffffffda RBX: 00007f971cb36090 RCX: 00007f971c8df749 [ 632.405264][ T3301] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000a [ 632.405278][ T3301] RBP: 00007f971b326090 R08: 0000000000000000 R09: 0000000000000000 [ 632.405290][ T3301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.405302][ T3301] R13: 00007f971cb36128 R14: 00007f971cb36090 R15: 00007ffdaa906ea8 [ 632.405321][ T3301] [ 632.634472][ T29] audit: type=1400 audit(1152.756:109040): avc: denied { allowed } for pid=3299 comm="syz.5.10141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 632.658134][ T29] audit: type=1400 audit(1152.756:109041): avc: denied { sqpoll } for pid=3299 comm="syz.5.10141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 632.677366][ T29] audit: type=1400 audit(1152.756:109042): avc: denied { create } for pid=3299 comm="syz.5.10141" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 632.698374][ T29] audit: type=1400 audit(1152.766:109043): avc: denied { create } for pid=3299 comm="syz.5.10141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 632.717685][ T29] audit: type=1400 audit(1152.766:109044): avc: denied { write } for pid=3299 comm="syz.5.10141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 632.786640][ T3300] loop5: detected capacity change from 0 to 512 [ 632.986549][ T29] audit: type=1400 audit(1152.926:109045): avc: denied { read } for pid=3317 comm="syz.1.10144" dev="nsfs" ino=4026532516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 633.007529][ T29] audit: type=1400 audit(1152.926:109046): avc: denied { open } for pid=3317 comm="syz.1.10144" path="net:[4026532516]" dev="nsfs" ino=4026532516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 633.030668][ T29] audit: type=1400 audit(1152.926:109047): avc: denied { create } for pid=3317 comm="syz.1.10144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 633.052510][ T3328] bond0: Caught tx_queue_len zero misconfig [ 633.169444][ T3345] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.216133][ T3347] loop8: detected capacity change from 0 to 512 [ 633.225889][ T3348] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 633.235850][ T3345] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.245989][ T3348] SELinux: failed to load policy [ 633.252709][ T3347] EXT4-fs: dax option not supported [ 633.281661][ T3345] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.341171][ T3345] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.406249][T21735] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.418456][T21735] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.431082][T21735] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.443680][T21735] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.029495][ T3365] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3365 comm=syz.0.10160 [ 634.060838][ T3370] loop5: detected capacity change from 0 to 1764 [ 634.210595][ T3386] FAULT_INJECTION: forcing a failure. [ 634.210595][ T3386] name failslab, interval 1, probability 0, space 0, times 0 [ 634.223580][ T3386] CPU: 1 UID: 0 PID: 3386 Comm: syz.5.10165 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 634.223623][ T3386] Tainted: [W]=WARN [ 634.223632][ T3386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 634.223664][ T3386] Call Trace: [ 634.223670][ T3386] [ 634.223677][ T3386] __dump_stack+0x1d/0x30 [ 634.223703][ T3386] dump_stack_lvl+0x95/0xd0 [ 634.223726][ T3386] dump_stack+0x15/0x1b [ 634.223746][ T3386] should_fail_ex+0x265/0x280 [ 634.223768][ T3386] should_failslab+0x8c/0xb0 [ 634.223860][ T3386] __kmalloc_cache_noprof+0x65/0x4c0 [ 634.223931][ T3386] ? __request_region+0x55/0x420 [ 634.223965][ T3386] __request_region+0x55/0x420 [ 634.224008][ T3386] ? free_resource+0xe6/0x1a0 [ 634.224034][ T3386] ? serial_do_unlink+0x1a4/0x1c0 [ 634.224078][ T3386] ? free_resource+0xe6/0x1a0 [ 634.224109][ T3386] serial8250_request_std_resource+0x11d/0x260 [ 634.224223][ T3386] serial8250_config_port+0x38/0x2b70 [ 634.224252][ T3386] ? free_resource+0xe6/0x1a0 [ 634.224276][ T3386] ? __release_region+0x1e1/0x240 [ 634.224354][ T3386] univ8250_config_port+0x299/0x370 [ 634.224465][ T3386] uart_ioctl+0xb4b/0xea0 [ 634.224493][ T3386] ? ioctl_has_perm+0x255/0x2a0 [ 634.224607][ T3386] ? do_vfs_ioctl+0x866/0xe10 [ 634.224649][ T3386] ? tty_jobctrl_ioctl+0x29e/0x810 [ 634.224702][ T3386] tty_ioctl+0x7d8/0xb80 [ 634.224721][ T3386] ? __pfx_tty_ioctl+0x10/0x10 [ 634.224781][ T3386] __se_sys_ioctl+0xce/0x140 [ 634.224865][ T3386] __x64_sys_ioctl+0x43/0x50 [ 634.224900][ T3386] x64_sys_call+0x14b0/0x3000 [ 634.224994][ T3386] do_syscall_64+0xca/0x2b0 [ 634.225038][ T3386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.225066][ T3386] RIP: 0033:0x7f994591f749 [ 634.225086][ T3386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.225186][ T3386] RSP: 002b:00007f9944387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.225211][ T3386] RAX: ffffffffffffffda RBX: 00007f9945b75fa0 RCX: 00007f994591f749 [ 634.225228][ T3386] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000003 [ 634.225244][ T3386] RBP: 00007f9944387090 R08: 0000000000000000 R09: 0000000000000000 [ 634.225305][ T3386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.225321][ T3386] R13: 00007f9945b76038 R14: 00007f9945b75fa0 R15: 00007fff61f99aa8 [ 634.225347][ T3386] [ 634.487362][ T3390] lo speed is unknown, defaulting to 1000 [ 634.668716][ T3415] loop8: detected capacity change from 0 to 512 [ 634.680895][ T3415] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 634.690318][ T3415] EXT4-fs (loop8): orphan cleanup on readonly fs [ 634.740603][ T3426] netlink: 'syz.1.10180': attribute type 1 has an invalid length. [ 634.748565][ T3426] netlink: 'syz.1.10180': attribute type 2 has an invalid length. [ 634.758622][ T3426] __nla_validate_parse: 9 callbacks suppressed [ 634.758636][ T3426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10180'. [ 634.781865][ T3415] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.10177: corrupted inode contents [ 634.794645][ T3415] EXT4-fs (loop8): Remounting filesystem read-only [ 634.801692][ T3415] EXT4-fs (loop8): 1 truncate cleaned up [ 634.807796][ T1125] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 634.818386][ T1125] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 634.834491][ T3426] lo speed is unknown, defaulting to 1000 [ 634.854908][ T1125] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 634.910146][ T3415] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 635.010511][ T2089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.150292][ T3446] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10184'. [ 635.207353][ T3450] netlink: 83992 bytes leftover after parsing attributes in process `syz.8.10187'. [ 635.343960][ T3452] loop8: detected capacity change from 0 to 1024 [ 635.382670][ T3452] EXT4-fs: inline encryption not supported [ 635.388673][ T3452] EXT4-fs: Ignoring removed orlov option [ 635.405351][ T3452] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 635.451027][ T3452] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.561151][ T2089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.930700][ T3474] loop5: detected capacity change from 0 to 512 [ 635.966044][ T3474] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 635.989263][ T3494] netlink: 'syz.2.10200': attribute type 13 has an invalid length. [ 636.011348][ T3474] EXT4-fs (loop5): orphan cleanup on readonly fs [ 636.031190][ T3500] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 636.045206][ T3474] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.10195: corrupted inode contents [ 636.068624][ T3474] EXT4-fs (loop5): Remounting filesystem read-only [ 636.090223][ T3506] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 636.100195][ T3474] EXT4-fs (loop5): 1 truncate cleaned up [ 636.106178][T21710] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 636.116861][T21710] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 636.127563][T21710] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 636.138642][ T3474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 636.186615][ T1669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.273091][ T3520] loop8: detected capacity change from 0 to 1764 [ 636.280656][ T3524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10215'. [ 636.281554][ T3494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10200'. [ 636.298809][ T3494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10200'. [ 636.307869][ T3494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10200'. [ 636.336856][ T3494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10200'. [ 636.346021][ T3494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10200'. [ 636.355173][ T3494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10200'. [ 636.597066][ T3546] 1ªX¹¦À: renamed from 60ªX¹¦À [ 636.603925][ T3546] net_ratelimit: 721 callbacks suppressed [ 636.603940][ T3546] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 636.657087][ T3549] loop5: detected capacity change from 0 to 512 [ 636.684867][ T3549] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 636.693138][ T3549] EXT4-fs (loop5): orphan cleanup on readonly fs [ 636.711427][ T3549] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.10221: corrupted inode contents [ 636.737033][ T3555] netlink: 'syz.0.10226': attribute type 1 has an invalid length. [ 636.744991][ T3555] netlink: 'syz.0.10226': attribute type 2 has an invalid length. [ 636.753151][ T3549] EXT4-fs (loop5): Remounting filesystem read-only [ 636.759842][ T3549] EXT4-fs (loop5): 1 truncate cleaned up [ 636.765621][T21718] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 636.776281][T21718] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 636.800047][ T3555] lo speed is unknown, defaulting to 1000 [ 636.829402][T21718] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 636.851534][ T3549] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 636.914855][ T1669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.100132][ T3565] loop5: detected capacity change from 0 to 1024 [ 637.118739][ T3565] EXT4-fs: inline encryption not supported [ 637.124623][ T3565] EXT4-fs: Ignoring removed orlov option [ 637.152345][ T3565] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 637.191478][ T3565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.266891][ T1669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.373665][ T29] kauditd_printk_skb: 2668 callbacks suppressed [ 637.373684][ T29] audit: type=1400 audit(1157.498:111698): avc: denied { read write } for pid=3579 comm="syz.8.10236" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 637.403316][ T29] audit: type=1400 audit(1157.498:111699): avc: denied { open } for pid=3579 comm="syz.8.10236" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 637.409481][ T3587] netlink: 'syz.2.10238': attribute type 1 has an invalid length. [ 637.434408][ T3587] netlink: 'syz.2.10238': attribute type 2 has an invalid length. [ 637.496350][ T3587] lo speed is unknown, defaulting to 1000 [ 637.502223][ T29] audit: type=1326 audit(1157.568:111700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3584 comm="syz.1.10237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 637.525619][ T29] audit: type=1326 audit(1157.568:111701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3584 comm="syz.1.10237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 637.548841][ T29] audit: type=1326 audit(1157.568:111702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3584 comm="syz.1.10237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 637.572121][ T29] audit: type=1326 audit(1157.568:111703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3584 comm="syz.1.10237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 637.595482][ T29] audit: type=1326 audit(1157.568:111704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3584 comm="syz.1.10237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 637.618788][ T29] audit: type=1326 audit(1157.568:111705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3584 comm="syz.1.10237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 637.642187][ T29] audit: type=1326 audit(1157.568:111706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3584 comm="syz.1.10237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 637.665357][ T29] audit: type=1326 audit(1157.568:111707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3584 comm="syz.1.10237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 637.848357][ T3608] netlink: 'syz.5.10243': attribute type 30 has an invalid length. [ 637.975352][ T3610] Falling back ldisc for ptm0. [ 637.991325][ T3623] netlink: 'syz.8.10247': attribute type 10 has an invalid length. [ 638.005273][ T3623] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 638.014298][ T3623] team0: Failed to send options change via netlink (err -105) [ 638.022034][ T3623] team0: Port device dummy0 added [ 638.060657][ T3630] netlink: 'syz.8.10247': attribute type 10 has an invalid length. [ 638.069558][ T3630] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 638.079598][ T3630] team0: Failed to send options change via netlink (err -105) [ 638.087656][ T3630] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 638.096910][ T3630] team0: Port device dummy0 removed [ 638.104400][ T3630] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 638.264804][ T3637] lo speed is unknown, defaulting to 1000 [ 638.697540][ T3668] lo speed is unknown, defaulting to 1000 [ 639.134652][ T3698] bond0: Caught tx_queue_len zero misconfig [ 639.886559][ T3687] loop8: detected capacity change from 0 to 512 [ 639.916390][ T3702] __nla_validate_parse: 24 callbacks suppressed [ 639.916407][ T3702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10282'. [ 639.931770][ T3702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10282'. [ 639.940919][ T3702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10282'. [ 640.010934][ T3687] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 640.033807][ T3687] EXT4-fs (loop8): orphan cleanup on readonly fs [ 640.048712][ T3687] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.10272: corrupted inode contents [ 640.121757][ T3687] EXT4-fs (loop8): Remounting filesystem read-only [ 640.143864][ T3687] EXT4-fs (loop8): 1 truncate cleaned up [ 640.152759][ T3724] netlink: 7 bytes leftover after parsing attributes in process `syz.2.10287'. [ 640.186671][ T3724] netlink: 7 bytes leftover after parsing attributes in process `syz.2.10287'. [ 640.503356][ T3756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.522088][ T3756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.543323][T31756] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x4 [ 640.551149][T31756] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x2 [ 640.558861][T31756] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 640.607351][T31756] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 640.615176][T31756] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 640.623120][T31756] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 640.631002][T31756] hid-generic 0000:3000000:0000.0040: unknown main item tag 0x0 [ 640.680246][ T3756] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 640.687889][ T3756] vhci_hcd vhci_hcd.2: invalid port number 96 [ 640.694004][ T3756] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 640.712628][ T2572] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 640.723345][ T2572] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 640.736700][T31756] hid-generic 0000:3000000:0000.0040: hidraw0: HID v0.00 Device [sy] on syz0 [ 640.767589][ T2572] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 640.794646][ T3687] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 640.842835][ T2089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.885687][ T3765] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 641.132465][ T3771] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10308'. [ 641.162806][ T3771] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10308'. [ 641.198869][ T3771] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 641.214291][ T3771] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 641.262588][ T3775] netlink: 2 bytes leftover after parsing attributes in process `syz.2.10310'. [ 641.330037][ T3780] netlink: 7 bytes leftover after parsing attributes in process `syz.1.10312'. [ 641.355996][ T3780] netlink: 7 bytes leftover after parsing attributes in process `syz.1.10312'. [ 641.538221][ T3790] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 641.599722][ T3792] FAULT_INJECTION: forcing a failure. [ 641.599722][ T3792] name failslab, interval 1, probability 0, space 0, times 0 [ 641.612460][ T3792] CPU: 1 UID: 0 PID: 3792 Comm: syz.8.10315 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 641.612507][ T3792] Tainted: [W]=WARN [ 641.612517][ T3792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 641.612586][ T3792] Call Trace: [ 641.612620][ T3792] [ 641.612631][ T3792] __dump_stack+0x1d/0x30 [ 641.612658][ T3792] dump_stack_lvl+0x95/0xd0 [ 641.612686][ T3792] dump_stack+0x15/0x1b [ 641.612712][ T3792] should_fail_ex+0x265/0x280 [ 641.612736][ T3792] should_failslab+0x8c/0xb0 [ 641.612840][ T3792] __kmalloc_cache_noprof+0x65/0x4c0 [ 641.612872][ T3792] ? alloc_fdtable+0x8c/0x1d0 [ 641.612900][ T3792] alloc_fdtable+0x8c/0x1d0 [ 641.612993][ T3792] dup_fd+0x492/0x510 [ 641.613013][ T3792] ? _raw_spin_unlock+0x26/0x50 [ 641.613054][ T3792] ksys_unshare+0x346/0x6d0 [ 641.613124][ T3792] ? ksys_write+0x192/0x1a0 [ 641.613146][ T3792] __x64_sys_unshare+0x1f/0x30 [ 641.613168][ T3792] x64_sys_call+0x2ae6/0x3000 [ 641.613201][ T3792] do_syscall_64+0xca/0x2b0 [ 641.613260][ T3792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.613286][ T3792] RIP: 0033:0x7f8d788ef749 [ 641.613302][ T3792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.613322][ T3792] RSP: 002b:00007f8d7730d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 641.613347][ T3792] RAX: ffffffffffffffda RBX: 00007f8d78b46180 RCX: 00007f8d788ef749 [ 641.613365][ T3792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 641.613454][ T3792] RBP: 00007f8d7730d090 R08: 0000000000000000 R09: 0000000000000000 [ 641.613466][ T3792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.613479][ T3792] R13: 00007f8d78b46218 R14: 00007f8d78b46180 R15: 00007ffe4d8b67c8 [ 641.613587][ T3792] [ 642.540685][ T3810] lo speed is unknown, defaulting to 1000 [ 642.690301][ T29] kauditd_printk_skb: 421 callbacks suppressed [ 642.690317][ T29] audit: type=1400 audit(1162.811:112123): avc: denied { mount } for pid=3819 comm="syz.5.10329" name="/" dev="configfs" ino=1156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 642.736056][ T29] audit: type=1400 audit(1162.811:112124): avc: denied { search } for pid=3819 comm="syz.5.10329" name="/" dev="configfs" ino=1156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 642.758193][ T29] audit: type=1400 audit(1162.811:112125): avc: denied { read open } for pid=3819 comm="syz.5.10329" path="/" dev="configfs" ino=1156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 642.784798][ T3823] FAULT_INJECTION: forcing a failure. [ 642.784798][ T3823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.798355][ T3823] CPU: 0 UID: 0 PID: 3823 Comm: syz.8.10330 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 642.798403][ T3823] Tainted: [W]=WARN [ 642.798413][ T3823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 642.798430][ T3823] Call Trace: [ 642.798438][ T3823] [ 642.798448][ T3823] __dump_stack+0x1d/0x30 [ 642.798501][ T3823] dump_stack_lvl+0x95/0xd0 [ 642.798527][ T3823] dump_stack+0x15/0x1b [ 642.798553][ T3823] should_fail_ex+0x265/0x280 [ 642.798605][ T3823] should_fail+0xb/0x20 [ 642.798630][ T3823] should_fail_usercopy+0x1a/0x20 [ 642.798662][ T3823] _copy_from_user+0x1c/0xb0 [ 642.798779][ T3823] perf_copy_attr+0x145/0x610 [ 642.798816][ T3823] ? get_pid_task+0x96/0xd0 [ 642.798857][ T3823] __se_sys_perf_event_open+0x67/0x1210 [ 642.798914][ T3823] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 642.798992][ T3823] ? vfs_write+0x7e8/0x960 [ 642.799017][ T3823] ? __rcu_read_unlock+0x4f/0x70 [ 642.799053][ T3823] __x64_sys_perf_event_open+0x67/0x80 [ 642.799167][ T3823] x64_sys_call+0x78c/0x3000 [ 642.799223][ T3823] do_syscall_64+0xca/0x2b0 [ 642.799268][ T3823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.799296][ T3823] RIP: 0033:0x7f8d788ef749 [ 642.799319][ T3823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.799343][ T3823] RSP: 002b:00007f8d7734f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 642.799434][ T3823] RAX: ffffffffffffffda RBX: 00007f8d78b45fa0 RCX: 00007f8d788ef749 [ 642.799451][ T3823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 642.799467][ T3823] RBP: 00007f8d7734f090 R08: 0000000000000000 R09: 0000000000000000 [ 642.799483][ T3823] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 642.799500][ T3823] R13: 00007f8d78b46038 R14: 00007f8d78b45fa0 R15: 00007ffe4d8b67c8 [ 642.799603][ T3823] [ 642.800078][ T29] audit: type=1400 audit(1162.931:112126): avc: denied { lock } for pid=3824 comm="syz.0.10331" path="socket:[124783]" dev="sockfs" ino=124783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 643.111384][ T29] audit: type=1400 audit(1163.231:112127): avc: denied { read write } for pid=3829 comm="syz.1.10332" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 643.129957][ T3830] validate_nla: 4 callbacks suppressed [ 643.130006][ T3830] netlink: 'syz.1.10332': attribute type 10 has an invalid length. [ 643.144567][ T29] audit: type=1400 audit(1163.231:112128): avc: denied { open } for pid=3829 comm="syz.1.10332" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 643.171698][ T3830] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.178969][ T3830] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.188994][ T3830] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.196146][ T3830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.203501][ T3830] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.210654][ T3830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.219719][ T3830] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 643.319893][ T3838] 1ªX¹¦À: renamed from 60ªX¹¦À [ 643.327588][ T29] audit: type=1326 audit(1163.451:112129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.8.10337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8d788ef749 code=0x7ffc0000 [ 643.351065][ T3838] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 643.352294][ T29] audit: type=1326 audit(1163.451:112130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.8.10337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8d788ef749 code=0x7ffc0000 [ 643.390062][ T29] audit: type=1326 audit(1163.451:112131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.8.10337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8d788ef749 code=0x7ffc0000 [ 643.413377][ T29] audit: type=1326 audit(1163.451:112132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.8.10337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8d788ef749 code=0x7ffc0000 [ 643.446499][ T3848] FAULT_INJECTION: forcing a failure. [ 643.446499][ T3848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.459689][ T3848] CPU: 1 UID: 0 PID: 3848 Comm: syz.8.10338 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 643.459749][ T3848] Tainted: [W]=WARN [ 643.459755][ T3848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 643.459787][ T3848] Call Trace: [ 643.459794][ T3848] [ 643.459802][ T3848] __dump_stack+0x1d/0x30 [ 643.459867][ T3848] dump_stack_lvl+0x95/0xd0 [ 643.459886][ T3848] dump_stack+0x15/0x1b [ 643.459903][ T3848] should_fail_ex+0x265/0x280 [ 643.459989][ T3848] should_fail+0xb/0x20 [ 643.460005][ T3848] should_fail_usercopy+0x1a/0x20 [ 643.460065][ T3848] strncpy_from_user+0x27/0x260 [ 643.460099][ T3848] getname_flags+0x230/0x3b0 [ 643.460121][ T3848] path_setxattrat+0x223/0x310 [ 643.460261][ T3848] __x64_sys_lsetxattr+0x71/0x90 [ 643.460283][ T3848] x64_sys_call+0x2ef0/0x3000 [ 643.460306][ T3848] do_syscall_64+0xca/0x2b0 [ 643.460373][ T3848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.460392][ T3848] RIP: 0033:0x7f8d788ef749 [ 643.460406][ T3848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.460423][ T3848] RSP: 002b:00007f8d7734f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 643.460504][ T3848] RAX: ffffffffffffffda RBX: 00007f8d78b45fa0 RCX: 00007f8d788ef749 [ 643.460547][ T3848] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000200000002b00 [ 643.460558][ T3848] RBP: 00007f8d7734f090 R08: 0000000000000002 R09: 0000000000000000 [ 643.460568][ T3848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.460632][ T3848] R13: 00007f8d78b46038 R14: 00007f8d78b45fa0 R15: 00007ffe4d8b67c8 [ 643.460651][ T3848] [ 643.682284][ T3857] lo speed is unknown, defaulting to 1000 [ 643.778078][ T3869] FAULT_INJECTION: forcing a failure. [ 643.778078][ T3869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.791269][ T3869] CPU: 1 UID: 0 PID: 3869 Comm: syz.1.10347 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 643.791307][ T3869] Tainted: [W]=WARN [ 643.791317][ T3869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 643.791367][ T3869] Call Trace: [ 643.791375][ T3869] [ 643.791384][ T3869] __dump_stack+0x1d/0x30 [ 643.791414][ T3869] dump_stack_lvl+0x95/0xd0 [ 643.791441][ T3869] dump_stack+0x15/0x1b [ 643.791461][ T3869] should_fail_ex+0x265/0x280 [ 643.791539][ T3869] should_fail+0xb/0x20 [ 643.791564][ T3869] should_fail_usercopy+0x1a/0x20 [ 643.791594][ T3869] _copy_from_user+0x1c/0xb0 [ 643.791673][ T3869] copy_from_sockptr_offset+0x66/0xa0 [ 643.791743][ T3869] do_ip6t_set_ctl+0x5d1/0x840 [ 643.791766][ T3869] ? kstrtoull+0x111/0x140 [ 643.791785][ T3869] ? __rcu_read_unlock+0x4f/0x70 [ 643.791853][ T3869] nf_setsockopt+0x199/0x1b0 [ 643.791879][ T3869] ipv6_setsockopt+0x11a/0x130 [ 643.792030][ T3869] tcp_setsockopt+0x98/0xb0 [ 643.792083][ T3869] sock_common_setsockopt+0x69/0x80 [ 643.792174][ T3869] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 643.792196][ T3869] __sys_setsockopt+0x184/0x200 [ 643.792246][ T3869] __x64_sys_setsockopt+0x64/0x80 [ 643.792279][ T3869] x64_sys_call+0x21d5/0x3000 [ 643.792392][ T3869] do_syscall_64+0xca/0x2b0 [ 643.792510][ T3869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.792533][ T3869] RIP: 0033:0x7f971c8df749 [ 643.792549][ T3869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.792567][ T3869] RSP: 002b:00007f971b347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 643.792647][ T3869] RAX: ffffffffffffffda RBX: 00007f971cb35fa0 RCX: 00007f971c8df749 [ 643.792659][ T3869] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000009 [ 643.792672][ T3869] RBP: 00007f971b347090 R08: 0000000000000528 R09: 0000000000000000 [ 643.792684][ T3869] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 643.792696][ T3869] R13: 00007f971cb36038 R14: 00007f971cb35fa0 R15: 00007ffdaa906ea8 [ 643.792721][ T3869] [ 643.793470][ T3869] bpf: Bad value for 'uid' [ 644.136766][ T3885] 9p: Bad value for 'wfdno' [ 644.141948][ T3885] wg1 speed is unknown, defaulting to 1000 [ 644.148003][ T3885] wg1 speed is unknown, defaulting to 1000 [ 644.154466][ T3885] wg1 speed is unknown, defaulting to 1000 [ 644.163049][ T3885] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 644.177608][ T3885] wg1 speed is unknown, defaulting to 1000 [ 644.183908][ T3885] wg1 speed is unknown, defaulting to 1000 [ 644.210832][ T3885] wg1 speed is unknown, defaulting to 1000 [ 644.247732][ T3896] loop5: detected capacity change from 0 to 1024 [ 644.254816][ T3885] wg1 speed is unknown, defaulting to 1000 [ 644.261381][ T3896] EXT4-fs: Ignoring removed bh option [ 644.267348][ T3896] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 644.283010][ T3885] wg1 speed is unknown, defaulting to 1000 [ 644.308458][ T3896] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 644.332541][ T3910] netlink: zone id is out of range [ 644.337851][ T3910] netlink: zone id is out of range [ 644.343100][ T3910] netlink: zone id is out of range [ 644.348391][ T3910] netlink: zone id is out of range [ 644.353610][ T3910] netlink: zone id is out of range [ 644.358940][ T3910] netlink: zone id is out of range [ 644.364209][ T3910] netlink: zone id is out of range [ 644.364492][ T3912] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 644.370450][ T3910] netlink: zone id is out of range [ 644.382008][ T3910] netlink: zone id is out of range [ 644.383998][ T3912] vhci_hcd vhci_hcd.2: invalid port number 96 [ 644.393503][ T3912] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 644.521109][ T3925] loop8: detected capacity change from 0 to 512 [ 644.537687][ T3925] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 644.546327][ T3927] bpf: Bad value for 'uid' [ 644.554378][ T3925] EXT4-fs (loop8): mount failed [ 644.961416][ T3947] __nla_validate_parse: 7 callbacks suppressed [ 644.961571][ T3947] netlink: 7 bytes leftover after parsing attributes in process `syz.0.10374'. [ 645.025892][ T3947] netlink: 7 bytes leftover after parsing attributes in process `syz.0.10374'. [ 645.069679][ T3949] FAULT_INJECTION: forcing a failure. [ 645.069679][ T3949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.082843][ T3949] CPU: 1 UID: 0 PID: 3949 Comm: syz.8.10376 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 645.082886][ T3949] Tainted: [W]=WARN [ 645.082895][ T3949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 645.082964][ T3949] Call Trace: [ 645.082973][ T3949] [ 645.082984][ T3949] __dump_stack+0x1d/0x30 [ 645.083090][ T3949] dump_stack_lvl+0x95/0xd0 [ 645.083155][ T3949] dump_stack+0x15/0x1b [ 645.083181][ T3949] should_fail_ex+0x265/0x280 [ 645.083209][ T3949] should_fail+0xb/0x20 [ 645.083305][ T3949] should_fail_usercopy+0x1a/0x20 [ 645.083336][ T3949] strncpy_from_user+0x27/0x260 [ 645.083372][ T3949] path_setxattrat+0xeb/0x310 [ 645.083444][ T3949] __x64_sys_lsetxattr+0x71/0x90 [ 645.083526][ T3949] x64_sys_call+0x2ef0/0x3000 [ 645.083559][ T3949] do_syscall_64+0xca/0x2b0 [ 645.083604][ T3949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.083679][ T3949] RIP: 0033:0x7f8d788ef749 [ 645.083700][ T3949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.083800][ T3949] RSP: 002b:00007f8d7734f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 645.083828][ T3949] RAX: ffffffffffffffda RBX: 00007f8d78b45fa0 RCX: 00007f8d788ef749 [ 645.083846][ T3949] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000200000000080 [ 645.083863][ T3949] RBP: 00007f8d7734f090 R08: 0000000000000000 R09: 0000000000000000 [ 645.083876][ T3949] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 645.083888][ T3949] R13: 00007f8d78b46038 R14: 00007f8d78b45fa0 R15: 00007ffe4d8b67c8 [ 645.083909][ T3949] [ 645.259953][ T1669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.387123][ T3961] netlink: 'syz.2.10381': attribute type 13 has an invalid length. [ 645.454280][ T3965] FAULT_INJECTION: forcing a failure. [ 645.454280][ T3965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.467459][ T3965] CPU: 0 UID: 0 PID: 3965 Comm: syz.8.10383 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 645.467492][ T3965] Tainted: [W]=WARN [ 645.467499][ T3965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 645.467591][ T3965] Call Trace: [ 645.467600][ T3965] [ 645.467611][ T3965] __dump_stack+0x1d/0x30 [ 645.467705][ T3965] dump_stack_lvl+0x95/0xd0 [ 645.467734][ T3965] dump_stack+0x15/0x1b [ 645.467758][ T3965] should_fail_ex+0x265/0x280 [ 645.467824][ T3965] should_fail+0xb/0x20 [ 645.467846][ T3965] should_fail_usercopy+0x1a/0x20 [ 645.467944][ T3965] _copy_from_user+0x1c/0xb0 [ 645.467981][ T3965] snd_seq_write+0x1d3/0x530 [ 645.468016][ T3965] ? __pfx_snd_seq_write+0x10/0x10 [ 645.468046][ T3965] vfs_write+0x269/0x960 [ 645.468124][ T3965] ? __rcu_read_unlock+0x4f/0x70 [ 645.468151][ T3965] ? __fget_files+0x184/0x1c0 [ 645.468193][ T3965] ksys_write+0xda/0x1a0 [ 645.468220][ T3965] __x64_sys_write+0x40/0x50 [ 645.468255][ T3965] x64_sys_call+0x2847/0x3000 [ 645.468288][ T3965] do_syscall_64+0xca/0x2b0 [ 645.468357][ T3965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.468426][ T3965] RIP: 0033:0x7f8d788ef749 [ 645.468446][ T3965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.468484][ T3965] RSP: 002b:00007f8d7734f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 645.468510][ T3965] RAX: ffffffffffffffda RBX: 00007f8d78b45fa0 RCX: 00007f8d788ef749 [ 645.468526][ T3965] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000003 [ 645.468538][ T3965] RBP: 00007f8d7734f090 R08: 0000000000000000 R09: 0000000000000000 [ 645.468694][ T3965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.468711][ T3965] R13: 00007f8d78b46038 R14: 00007f8d78b45fa0 R15: 00007ffe4d8b67c8 [ 645.468735][ T3965] [ 645.742479][ T3961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10381'. [ 645.751632][ T3961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10381'. [ 645.760815][ T3961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10381'. [ 645.772709][ T3975] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 645.783503][ T3975] vhci_hcd vhci_hcd.2: invalid port number 96 [ 645.789690][ T3975] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 645.816820][ T3961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10381'. [ 645.826095][ T3961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10381'. [ 645.835592][ T3961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10381'. [ 645.867155][ T3961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10381'. [ 645.876334][ T3961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10381'. [ 645.959874][ T3990] lo speed is unknown, defaulting to 1000 [ 646.040117][ T3990] wg1 speed is unknown, defaulting to 1000 [ 646.166317][ T4003] netlink: 'syz.0.10394': attribute type 1 has an invalid length. [ 646.174439][ T4003] netlink: 'syz.0.10394': attribute type 2 has an invalid length. [ 646.192679][ T3991] loop8: detected capacity change from 0 to 512 [ 646.231620][ T4003] lo speed is unknown, defaulting to 1000 [ 646.247927][ T3991] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 646.256279][ T3991] EXT4-fs (loop8): orphan cleanup on readonly fs [ 646.294470][ T4013] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 646.301850][ T4013] vhci_hcd vhci_hcd.2: invalid port number 96 [ 646.308092][ T4013] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 646.320796][ T3991] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.10388: corrupted inode contents [ 646.340555][ T4003] wg1 speed is unknown, defaulting to 1000 [ 646.354092][ T3991] EXT4-fs (loop8): Remounting filesystem read-only [ 646.362183][ T3991] EXT4-fs (loop8): 1 truncate cleaned up [ 646.369105][ T1098] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 646.379776][ T1098] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 646.391342][ T4017] netlink: 'syz.1.10400': attribute type 13 has an invalid length. [ 646.425681][ T4019] netlink: 'syz.5.10401': attribute type 10 has an invalid length. [ 646.434204][ T1098] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 646.460851][ T3991] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 646.497432][ T4026] nfs4: Bad value for 'source' [ 646.501921][ T4027] netlink: 'syz.5.10401': attribute type 10 has an invalid length. [ 646.516938][ T4019] team0: Port device dummy0 added [ 646.542164][ T4027] team0: Port device dummy0 removed [ 646.557895][ T4027] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 646.596378][ T2089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.678134][ T4033] loop8: detected capacity change from 0 to 1024 [ 646.702808][ T4033] EXT4-fs: inline encryption not supported [ 646.708803][ T4033] EXT4-fs: Ignoring removed orlov option [ 646.722165][ T4033] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 646.742689][ T4033] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.863604][ T2089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.924191][ T4050] loop8: detected capacity change from 0 to 512 [ 646.954610][ T4050] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.119687][ T2089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.175587][ T4063] netlink: 'syz.1.10416': attribute type 10 has an invalid length. [ 647.183909][ T4063] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.191151][ T4063] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.709739][ T4089] lo speed is unknown, defaulting to 1000 [ 647.749948][ T29] kauditd_printk_skb: 569 callbacks suppressed [ 647.749966][ T29] audit: type=1326 audit(1167.873:112695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.1.10428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 647.783048][ T29] audit: type=1326 audit(1167.873:112696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.1.10428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 647.789979][ T4089] wg1 speed is unknown, defaulting to 1000 [ 647.806568][ T29] audit: type=1326 audit(1167.873:112697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.1.10428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 647.835243][ T29] audit: type=1326 audit(1167.883:112698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.1.10428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f971c8df783 code=0x7ffc0000 [ 647.858295][ T29] audit: type=1326 audit(1167.883:112699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.1.10428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f971c8df783 code=0x7ffc0000 [ 647.881450][ T29] audit: type=1326 audit(1167.883:112700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.1.10428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 647.904684][ T29] audit: type=1326 audit(1167.883:112701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.1.10428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 647.927889][ T29] audit: type=1326 audit(1167.883:112702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.1.10428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 647.951118][ T29] audit: type=1326 audit(1167.883:112703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.1.10428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 647.984039][ T29] audit: type=1326 audit(1167.993:112704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4092 comm="syz.1.10428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 647.984623][ T3428] IPVS: starting estimator thread 0... [ 648.059890][ T4101] FAULT_INJECTION: forcing a failure. [ 648.059890][ T4101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.073208][ T4101] CPU: 0 UID: 0 PID: 4101 Comm: syz.1.10432 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 648.073249][ T4101] Tainted: [W]=WARN [ 648.073259][ T4101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 648.073320][ T4101] Call Trace: [ 648.073328][ T4101] [ 648.073339][ T4101] __dump_stack+0x1d/0x30 [ 648.073371][ T4101] dump_stack_lvl+0x95/0xd0 [ 648.073400][ T4101] dump_stack+0x15/0x1b [ 648.073443][ T4101] should_fail_ex+0x265/0x280 [ 648.073466][ T4101] should_fail+0xb/0x20 [ 648.073497][ T4101] should_fail_usercopy+0x1a/0x20 [ 648.073539][ T4101] strncpy_from_user+0x27/0x260 [ 648.073577][ T4101] getname_flags+0xae/0x3b0 [ 648.073601][ T4101] __x64_sys_unlink+0x21/0x40 [ 648.073622][ T4101] x64_sys_call+0x2f48/0x3000 [ 648.073729][ T4101] do_syscall_64+0xca/0x2b0 [ 648.073766][ T4101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.073795][ T4101] RIP: 0033:0x7f971c8df749 [ 648.073815][ T4101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.073839][ T4101] RSP: 002b:00007f971b347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 648.073922][ T4101] RAX: ffffffffffffffda RBX: 00007f971cb35fa0 RCX: 00007f971c8df749 [ 648.073938][ T4101] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 648.073954][ T4101] RBP: 00007f971b347090 R08: 0000000000000000 R09: 0000000000000000 [ 648.074002][ T4101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.074017][ T4101] R13: 00007f971cb36038 R14: 00007f971cb35fa0 R15: 00007ffdaa906ea8 [ 648.074044][ T4101] [ 648.102476][ T4097] IPVS: using max 1872 ests per chain, 93600 per kthread [ 648.132518][ T4102] loop5: detected capacity change from 0 to 512 [ 648.282780][ T4102] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 648.314683][ T4102] EXT4-fs (loop5): 1 truncate cleaned up [ 648.330405][ T4102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.376163][ T4110] net_ratelimit: 29 callbacks suppressed [ 648.376184][ T4110] netlink: set zone limit has 8 unknown bytes [ 648.432505][ T4119] tap0: tun_chr_ioctl cmd 1074025675 [ 648.437919][ T4119] tap0: persist disabled [ 648.488843][ T1669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.507874][ T4105] lo speed is unknown, defaulting to 1000 [ 648.529305][ T4126] lo speed is unknown, defaulting to 1000 [ 648.553361][ T4128] loop5: detected capacity change from 0 to 512 [ 648.568380][ T4105] wg1 speed is unknown, defaulting to 1000 [ 648.582803][ T4128] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.610311][ T4128] netlink: 'syz.5.10438': attribute type 10 has an invalid length. [ 648.629192][ T4126] wg1 speed is unknown, defaulting to 1000 [ 648.635378][ T4128] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.642662][ T4128] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.652848][ T4128] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.659953][ T4128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.667521][ T4128] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.674678][ T4128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.684061][ T4128] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 648.793582][ T4105] chnl_net:caif_netlink_parms(): no params data found [ 648.815963][ T887] bridge_slave_1: left allmulticast mode [ 648.821842][ T887] bridge_slave_1: left promiscuous mode [ 648.827626][ T887] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.841439][ T4154] netlink: zone id is out of range [ 648.846646][ T4154] netlink: zone id is out of range [ 648.852594][ T887] bridge_slave_0: left allmulticast mode [ 648.858351][ T887] bridge_slave_0: left promiscuous mode [ 648.864163][ T887] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.882160][ T4154] netlink: zone id is out of range [ 648.887541][ T4154] netlink: zone id is out of range [ 648.898146][ T4154] netlink: zone id is out of range [ 648.903436][ T4154] netlink: zone id is out of range [ 648.909117][ T4154] netlink: zone id is out of range [ 648.917367][ T4154] netlink: zone id is out of range [ 648.941562][ T4154] netlink: zone id is out of range [ 649.094052][ T887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.103564][ T887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.112916][ T887] bond0 (unregistering): Released all slaves [ 649.198180][ T4105] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.205562][ T4105] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.233495][ T4105] bridge_slave_0: entered allmulticast mode [ 649.248937][ T4105] bridge_slave_0: entered promiscuous mode [ 649.297473][ T1669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.475075][ T4105] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.482227][ T4105] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.489587][ T4105] bridge_slave_1: entered allmulticast mode [ 649.504199][ T4105] bridge_slave_1: entered promiscuous mode [ 649.518424][ T4182] bond0: Caught tx_queue_len zero misconfig [ 649.578673][ T887] hsr_slave_0: left promiscuous mode [ 649.588085][ T887] hsr_slave_1: left promiscuous mode [ 649.602262][ T887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.736909][ T887] team0 (unregistering): Port device team_slave_1 removed [ 649.750709][ T887] team0 (unregistering): Port device team_slave_0 removed [ 649.830756][ T3414] lo speed is unknown, defaulting to 1000 [ 649.836621][ T3414] infiniband syz2: ib_query_port failed (-19) [ 649.882414][ T4105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.911900][ T4105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.960255][ T4105] team0: Port device team_slave_0 added [ 649.975636][ T4105] team0: Port device team_slave_1 added [ 650.021290][ T4105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.028369][ T4105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.054334][ T4105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.114013][ T4105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.121093][ T4105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.147227][ T4105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.454314][ T887] IPVS: stop unused estimator thread 0... [ 650.534979][ T4105] hsr_slave_0: entered promiscuous mode [ 650.547139][ T4105] hsr_slave_1: entered promiscuous mode [ 650.560463][ T4105] debugfs: 'hsr0' already exists in 'hsr' [ 650.566296][ T4105] Cannot create hsr debugfs directory [ 651.002329][ T4237] __nla_validate_parse: 25 callbacks suppressed [ 651.002351][ T4237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10476'. [ 651.035318][ T4239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10477'. [ 651.050644][ T4239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10477'. [ 651.117169][ T4105] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 651.145639][ T4105] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 651.166571][ T4105] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 651.185048][ T4105] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 651.392155][ T4105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.406364][ T4105] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.891548][ T1789] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.898761][ T1789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.921450][ T4105] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 651.932018][ T4105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 651.997916][ T1789] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.005115][ T1789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.048578][ T4272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10488'. [ 652.120979][ T4278] SELinux: Context Ü is not valid (left unmapped). [ 652.169181][ T4275] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 652.240723][ T4105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.287101][ T4275] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10489'. [ 653.379984][ T4105] veth0_vlan: entered promiscuous mode [ 653.392510][ T4105] veth1_vlan: entered promiscuous mode [ 653.412297][ T4105] veth0_macvtap: entered promiscuous mode [ 653.419692][ T4105] veth1_macvtap: entered promiscuous mode [ 653.764961][ T4303] rdma_op ffff888129fc6180 conn xmit_rdma 0000000000000000 [ 653.779933][ T4105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.799899][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 653.799918][ T29] audit: type=1400 audit(1173.936:112947): avc: denied { ioctl } for pid=4301 comm="syz.2.10496" path="socket:[126813]" dev="sockfs" ino=126813 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 653.835869][ T4105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.881825][ T29] audit: type=1400 audit(1174.016:112948): avc: denied { mounton } for pid=4105 comm="syz-executor" path="/root/syzkaller.ozsrgm/syz-tmp" dev="sda1" ino=2091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 653.906017][ T29] audit: type=1400 audit(1174.016:112949): avc: denied { mount } for pid=4105 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 653.965692][ T4310] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10496'. [ 654.098373][ T29] audit: type=1400 audit(1174.066:112950): avc: denied { mount } for pid=4105 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 654.120186][ T29] audit: type=1400 audit(1174.066:112951): avc: denied { mounton } for pid=4105 comm="syz-executor" path="/root/syzkaller.ozsrgm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 654.146722][ T29] audit: type=1400 audit(1174.066:112952): avc: denied { mounton } for pid=4105 comm="syz-executor" path="/root/syzkaller.ozsrgm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=126851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 654.174107][ T29] audit: type=1400 audit(1174.076:112953): avc: denied { mounton } for pid=4105 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 654.196729][ T29] audit: type=1400 audit(1174.076:112954): avc: denied { mount } for pid=4105 comm="syz-executor" name="/" dev="gadgetfs" ino=4670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 654.218859][ T29] audit: type=1400 audit(1174.136:112955): avc: denied { write } for pid=4312 comm="syz.1.10500" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 654.241524][ T29] audit: type=1400 audit(1174.156:112956): avc: denied { create } for pid=4315 comm="syz.5.10501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 654.273200][ T4326] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 654.282980][ T4324] IPVS: stopping master sync thread 4326 ... [ 654.304235][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.323514][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.395698][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.439901][ T4330] net_ratelimit: 2 callbacks suppressed [ 654.439917][ T4330] IPv6: addrconf: prefix option has invalid lifetime [ 654.455491][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.928295][ T4371] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10522'. [ 654.946703][ T4375] netlink: 'syz.1.10524': attribute type 1 has an invalid length. [ 654.954879][ T4375] netlink: 'syz.1.10524': attribute type 2 has an invalid length. [ 654.955493][ T4371] 0ªX¹¦À: renamed from caif0 [ 654.971858][ T4371] 0ªX¹¦À: entered allmulticast mode [ 654.977167][ T4371] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 654.981196][ T4375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10524'. [ 655.010485][ T4370] netlink: 83992 bytes leftover after parsing attributes in process `syz.8.10523'. [ 655.027634][ T4370] netlink: zone id is out of range [ 655.032908][ T4370] netlink: zone id is out of range [ 655.038381][ T4370] netlink: zone id is out of range [ 655.043671][ T4370] netlink: zone id is out of range [ 655.049168][ T4370] netlink: zone id is out of range [ 655.054397][ T4370] netlink: zone id is out of range [ 655.059574][ T4370] netlink: zone id is out of range [ 655.090128][ T4370] netlink: zone id is out of range [ 655.256905][ T4397] FAULT_INJECTION: forcing a failure. [ 655.256905][ T4397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.270133][ T4397] CPU: 0 UID: 0 PID: 4397 Comm: syz.8.10532 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 655.270218][ T4397] Tainted: [W]=WARN [ 655.270226][ T4397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 655.270239][ T4397] Call Trace: [ 655.270246][ T4397] [ 655.270257][ T4397] __dump_stack+0x1d/0x30 [ 655.270304][ T4397] dump_stack_lvl+0x95/0xd0 [ 655.270332][ T4397] dump_stack+0x15/0x1b [ 655.270370][ T4397] should_fail_ex+0x265/0x280 [ 655.270453][ T4397] should_fail+0xb/0x20 [ 655.270473][ T4397] should_fail_usercopy+0x1a/0x20 [ 655.270504][ T4397] _copy_from_user+0x1c/0xb0 [ 655.270541][ T4397] set_selection_user+0x4a/0xe0 [ 655.270637][ T4397] tioclinux+0x347/0x460 [ 655.270656][ T4397] vt_ioctl+0x75f/0x18a0 [ 655.270768][ T4397] ? tty_jobctrl_ioctl+0x29e/0x810 [ 655.270809][ T4397] tty_ioctl+0x7d8/0xb80 [ 655.270834][ T4397] ? __pfx_tty_ioctl+0x10/0x10 [ 655.270923][ T4397] __se_sys_ioctl+0xce/0x140 [ 655.271017][ T4397] __x64_sys_ioctl+0x43/0x50 [ 655.271048][ T4397] x64_sys_call+0x14b0/0x3000 [ 655.271233][ T4397] do_syscall_64+0xca/0x2b0 [ 655.271276][ T4397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.271304][ T4397] RIP: 0033:0x7f8d788ef749 [ 655.271320][ T4397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.271350][ T4397] RSP: 002b:00007f8d7734f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 655.271371][ T4397] RAX: ffffffffffffffda RBX: 00007f8d78b45fa0 RCX: 00007f8d788ef749 [ 655.271383][ T4397] RDX: 0000200000000100 RSI: 000000000000541c RDI: 0000000000000004 [ 655.271397][ T4397] RBP: 00007f8d7734f090 R08: 0000000000000000 R09: 0000000000000000 [ 655.271456][ T4397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.271472][ T4397] R13: 00007f8d78b46038 R14: 00007f8d78b45fa0 R15: 00007ffe4d8b67c8 [ 655.271493][ T4397] [ 655.667942][ T4410] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10537'. [ 655.883265][ T4423] FAULT_INJECTION: forcing a failure. [ 655.883265][ T4423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.896464][ T4423] CPU: 0 UID: 0 PID: 4423 Comm: syz.1.10543 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 655.896500][ T4423] Tainted: [W]=WARN [ 655.896509][ T4423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 655.896523][ T4423] Call Trace: [ 655.896529][ T4423] [ 655.896537][ T4423] __dump_stack+0x1d/0x30 [ 655.896605][ T4423] dump_stack_lvl+0x95/0xd0 [ 655.896628][ T4423] dump_stack+0x15/0x1b [ 655.896712][ T4423] should_fail_ex+0x265/0x280 [ 655.896735][ T4423] should_fail+0xb/0x20 [ 655.896754][ T4423] should_fail_usercopy+0x1a/0x20 [ 655.896834][ T4423] _copy_to_user+0x20/0xa0 [ 655.896865][ T4423] ucma_query+0xb51/0xd60 [ 655.896903][ T4423] ? path_openat+0x1e82/0x23b0 [ 655.896978][ T4423] ? _parse_integer+0x27/0x40 [ 655.896998][ T4423] ? kstrtoull+0x111/0x140 [ 655.897018][ T4423] ? kstrtouint+0x76/0xc0 [ 655.897043][ T4423] ? kstrtouint_from_user+0x9f/0xf0 [ 655.897077][ T4423] ? should_fail_ex+0xdb/0x280 [ 655.897109][ T4423] ucma_write+0x1b3/0x250 [ 655.897139][ T4423] ? __pfx_ucma_write+0x10/0x10 [ 655.897199][ T4423] vfs_write+0x269/0x960 [ 655.897222][ T4423] ? __rcu_read_unlock+0x4f/0x70 [ 655.897250][ T4423] ? __fget_files+0x184/0x1c0 [ 655.897348][ T4423] ksys_write+0xda/0x1a0 [ 655.897446][ T4423] __x64_sys_write+0x40/0x50 [ 655.897465][ T4423] x64_sys_call+0x2847/0x3000 [ 655.897498][ T4423] do_syscall_64+0xca/0x2b0 [ 655.897566][ T4423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.897594][ T4423] RIP: 0033:0x7f971c8df749 [ 655.897611][ T4423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.897629][ T4423] RSP: 002b:00007f971b347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 655.897655][ T4423] RAX: ffffffffffffffda RBX: 00007f971cb35fa0 RCX: 00007f971c8df749 [ 655.897672][ T4423] RDX: 0000000000000018 RSI: 0000200000000000 RDI: 0000000000000006 [ 655.897689][ T4423] RBP: 00007f971b347090 R08: 0000000000000000 R09: 0000000000000000 [ 655.897713][ T4423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.897725][ T4423] R13: 00007f971cb36038 R14: 00007f971cb35fa0 R15: 00007ffdaa906ea8 [ 655.897746][ T4423] [ 656.175815][ T4430] netlink: 'syz.5.10547': attribute type 1 has an invalid length. [ 656.183805][ T4430] netlink: 'syz.5.10547': attribute type 2 has an invalid length. [ 656.192653][ T4430] __nla_validate_parse: 1 callbacks suppressed [ 656.192671][ T4430] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10547'. [ 656.383236][ T4443] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10551'. [ 656.573561][ T4455] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.10552'. [ 656.815690][ T4474] FAULT_INJECTION: forcing a failure. [ 656.815690][ T4474] name failslab, interval 1, probability 0, space 0, times 0 [ 656.828475][ T4474] CPU: 0 UID: 0 PID: 4474 Comm: syz.5.10562 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 656.828515][ T4474] Tainted: [W]=WARN [ 656.828524][ T4474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 656.828542][ T4474] Call Trace: [ 656.828618][ T4474] [ 656.828627][ T4474] __dump_stack+0x1d/0x30 [ 656.828651][ T4474] dump_stack_lvl+0x95/0xd0 [ 656.828678][ T4474] dump_stack+0x15/0x1b [ 656.828700][ T4474] should_fail_ex+0x265/0x280 [ 656.828728][ T4474] should_failslab+0x8c/0xb0 [ 656.828900][ T4474] __kmalloc_cache_noprof+0x65/0x4c0 [ 656.828925][ T4474] ? hash_ipmac_create+0x21b/0x740 [ 656.828958][ T4474] hash_ipmac_create+0x21b/0x740 [ 656.828997][ T4474] ? __nla_parse+0x40/0x60 [ 656.829071][ T4474] ? __pfx_hash_ipmac_create+0x10/0x10 [ 656.829187][ T4474] ip_set_create+0x3cc/0x970 [ 656.829238][ T4474] ? __nla_parse+0x40/0x60 [ 656.829270][ T4474] nfnetlink_rcv_msg+0x4c6/0x590 [ 656.829387][ T4474] netlink_rcv_skb+0x123/0x220 [ 656.829423][ T4474] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 656.829493][ T4474] nfnetlink_rcv+0x167/0x16c0 [ 656.829521][ T4474] ? kmem_cache_free+0xe3/0x3a0 [ 656.829550][ T4474] ? __kfree_skb+0x109/0x150 [ 656.829572][ T4474] ? nlmon_xmit+0x4f/0x60 [ 656.829641][ T4474] ? consume_skb+0x49/0x150 [ 656.829666][ T4474] ? nlmon_xmit+0x4f/0x60 [ 656.829734][ T4474] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 656.829773][ T4474] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 656.829814][ T4474] ? __dev_queue_xmit+0x148/0x1ee0 [ 656.829850][ T4474] ? ref_tracker_free+0x37d/0x3e0 [ 656.829960][ T4474] ? __netlink_deliver_tap+0x4dc/0x500 [ 656.829997][ T4474] netlink_unicast+0x5c0/0x690 [ 656.830077][ T4474] netlink_sendmsg+0x58b/0x6b0 [ 656.830120][ T4474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.830151][ T4474] __sock_sendmsg+0x145/0x180 [ 656.830170][ T4474] ____sys_sendmsg+0x31e/0x4a0 [ 656.830280][ T4474] ___sys_sendmsg+0x17b/0x1d0 [ 656.830322][ T4474] __x64_sys_sendmsg+0xd4/0x160 [ 656.830352][ T4474] x64_sys_call+0x17ba/0x3000 [ 656.830440][ T4474] do_syscall_64+0xca/0x2b0 [ 656.830553][ T4474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.830579][ T4474] RIP: 0033:0x7f994591f749 [ 656.830594][ T4474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.830613][ T4474] RSP: 002b:00007f9944387038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.830637][ T4474] RAX: ffffffffffffffda RBX: 00007f9945b75fa0 RCX: 00007f994591f749 [ 656.830721][ T4474] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 656.830737][ T4474] RBP: 00007f9944387090 R08: 0000000000000000 R09: 0000000000000000 [ 656.830753][ T4474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.830820][ T4474] R13: 00007f9945b76038 R14: 00007f9945b75fa0 R15: 00007fff61f99aa8 [ 656.830845][ T4474] [ 656.836870][ T4471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10561'. [ 657.174345][ T4476] netlink: 131740 bytes leftover after parsing attributes in process `syz.5.10563'. [ 657.194982][ T4471] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10561'. [ 657.548356][ T4505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10574'. [ 657.852226][ T4533] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.10584'. [ 657.968616][ T4541] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10589'. [ 657.988164][ T4541] 0ªX¹¦À: renamed from 61ªX¹¦À [ 657.997495][ T4543] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10588'. [ 658.220707][ T4568] loop5: detected capacity change from 0 to 512 [ 658.227929][ T4568] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 658.240351][ T4568] EXT4-fs (loop5): 1 truncate cleaned up [ 658.246502][ T4568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.266050][ T4570] netlink: 'syz.1.10594': attribute type 6 has an invalid length. [ 658.278146][ T4560] FAULT_INJECTION: forcing a failure. [ 658.278146][ T4560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.291558][ T4560] CPU: 0 UID: 0 PID: 4560 Comm: syz.5.10596 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 658.291592][ T4560] Tainted: [W]=WARN [ 658.291601][ T4560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 658.291618][ T4560] Call Trace: [ 658.291626][ T4560] [ 658.291635][ T4560] __dump_stack+0x1d/0x30 [ 658.291736][ T4560] dump_stack_lvl+0x95/0xd0 [ 658.291797][ T4560] dump_stack+0x15/0x1b [ 658.291873][ T4560] should_fail_ex+0x265/0x280 [ 658.291903][ T4560] should_fail+0xb/0x20 [ 658.291928][ T4560] should_fail_usercopy+0x1a/0x20 [ 658.292039][ T4560] _copy_to_user+0x20/0xa0 [ 658.292138][ T4560] copy_siginfo_to_user+0x22/0xb0 [ 658.292180][ T4560] x64_setup_rt_frame+0x2b5/0x580 [ 658.292259][ T4560] arch_do_signal_or_restart+0x24c/0x450 [ 658.292340][ T4560] exit_to_user_mode_loop+0x6a/0x740 [ 658.292373][ T4560] do_syscall_64+0x1dd/0x2b0 [ 658.292423][ T4560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.292500][ T4560] RIP: 0033:0x7f994591f747 [ 658.292519][ T4560] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 658.292572][ T4560] RSP: 002b:00007f9944387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 658.292597][ T4560] RAX: 0000000000000013 RBX: 00007f9945b75fa0 RCX: 00007f994591f749 [ 658.292614][ T4560] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 658.292630][ T4560] RBP: 00007f9944387090 R08: 0000000000000000 R09: 0000000000000000 [ 658.292644][ T4560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 658.292655][ T4560] R13: 00007f9945b76038 R14: 00007f9945b75fa0 R15: 00007fff61f99aa8 [ 658.292675][ T4560] [ 658.479591][ T1669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.612315][ T4580] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 658.673124][ T4590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.681793][ T4590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.696257][ T4590] netlink: 'syz.8.10609': attribute type 13 has an invalid length. [ 658.736710][ T4590] 9p: Bad value for 'rfdno' [ 658.878439][ T29] kauditd_printk_skb: 1214 callbacks suppressed [ 658.878458][ T29] audit: type=1326 audit(1179.018:114171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.2.10614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9cd2f749 code=0x7ffc0000 [ 658.948989][ T29] audit: type=1326 audit(1179.018:114172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.2.10614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9cd2f749 code=0x7ffc0000 [ 658.972345][ T29] audit: type=1326 audit(1179.018:114173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.2.10614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9cd2f749 code=0x7ffc0000 [ 658.995713][ T29] audit: type=1326 audit(1179.048:114174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.2.10614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f4d9cd2f749 code=0x7ffc0000 [ 659.019054][ T29] audit: type=1326 audit(1179.048:114175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.2.10614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9cd2f749 code=0x7ffc0000 [ 659.042620][ T29] audit: type=1326 audit(1179.048:114176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.2.10614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9cd2f749 code=0x7ffc0000 [ 659.065962][ T29] audit: type=1326 audit(1179.048:114177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.2.10614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9cd2f749 code=0x7ffc0000 [ 659.089310][ T29] audit: type=1326 audit(1179.048:114178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.2.10614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d9cd2f749 code=0x7ffc0000 [ 659.112648][ T29] audit: type=1326 audit(1179.048:114179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.2.10614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9cd2f749 code=0x7ffc0000 [ 659.135886][ T29] audit: type=1326 audit(1179.048:114180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.2.10614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9cd2f749 code=0x7ffc0000 [ 659.444892][ T4641] loop8: detected capacity change from 0 to 1764 [ 659.738869][ T4672] loop5: detected capacity change from 0 to 2048 [ 659.779412][ T4672] Alternate GPT is invalid, using primary GPT. [ 659.785962][ T4672] loop5: p2 p3 p7 [ 659.832179][ T4686] loop5: detected capacity change from 0 to 1764 [ 659.854390][ T4693] FAULT_INJECTION: forcing a failure. [ 659.854390][ T4693] name failslab, interval 1, probability 0, space 0, times 0 [ 659.867193][ T4693] CPU: 0 UID: 0 PID: 4693 Comm: syz.0.10646 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 659.867285][ T4693] Tainted: [W]=WARN [ 659.867295][ T4693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 659.867311][ T4693] Call Trace: [ 659.867378][ T4693] [ 659.867387][ T4693] __dump_stack+0x1d/0x30 [ 659.867418][ T4693] dump_stack_lvl+0x95/0xd0 [ 659.867446][ T4693] dump_stack+0x15/0x1b [ 659.867495][ T4693] should_fail_ex+0x265/0x280 [ 659.867590][ T4693] should_failslab+0x8c/0xb0 [ 659.867618][ T4693] __kmalloc_cache_noprof+0x65/0x4c0 [ 659.867648][ T4693] ? alloc_pipe_info+0xae/0x340 [ 659.867683][ T4693] alloc_pipe_info+0xae/0x340 [ 659.867708][ T4693] splice_direct_to_actor+0x592/0x680 [ 659.867795][ T4693] ? kstrtouint_from_user+0x9f/0xf0 [ 659.867930][ T4693] ? __pfx_direct_splice_actor+0x10/0x10 [ 659.868023][ T4693] ? __rcu_read_unlock+0x4f/0x70 [ 659.868048][ T4693] ? get_pid_task+0x96/0xd0 [ 659.868103][ T4693] ? avc_policy_seqno+0x15/0x30 [ 659.868125][ T4693] ? selinux_file_permission+0x1e2/0x320 [ 659.868219][ T4693] do_splice_direct+0xda/0x150 [ 659.868244][ T4693] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 659.868337][ T4693] do_sendfile+0x380/0x650 [ 659.868367][ T4693] __x64_sys_sendfile64+0x105/0x150 [ 659.868462][ T4693] x64_sys_call+0x2db1/0x3000 [ 659.868518][ T4693] do_syscall_64+0xca/0x2b0 [ 659.868629][ T4693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.868657][ T4693] RIP: 0033:0x7f730493f749 [ 659.868677][ T4693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 659.868701][ T4693] RSP: 002b:00007f73033a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 659.868726][ T4693] RAX: ffffffffffffffda RBX: 00007f7304b95fa0 RCX: 00007f730493f749 [ 659.868742][ T4693] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 659.868806][ T4693] RBP: 00007f73033a7090 R08: 0000000000000000 R09: 0000000000000000 [ 659.868822][ T4693] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 659.868838][ T4693] R13: 00007f7304b96038 R14: 00007f7304b95fa0 R15: 00007ffcaa6f9d68 [ 659.868864][ T4693] [ 660.210822][ T4716] FAULT_INJECTION: forcing a failure. [ 660.210822][ T4716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.224068][ T4716] CPU: 0 UID: 0 PID: 4716 Comm: syz.1.10655 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 660.224103][ T4716] Tainted: [W]=WARN [ 660.224112][ T4716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 660.224128][ T4716] Call Trace: [ 660.224136][ T4716] [ 660.224144][ T4716] __dump_stack+0x1d/0x30 [ 660.224201][ T4716] dump_stack_lvl+0x95/0xd0 [ 660.224224][ T4716] dump_stack+0x15/0x1b [ 660.224305][ T4716] should_fail_ex+0x265/0x280 [ 660.224336][ T4716] should_fail+0xb/0x20 [ 660.224359][ T4716] should_fail_usercopy+0x1a/0x20 [ 660.224431][ T4716] _copy_to_user+0x20/0xa0 [ 660.224466][ T4716] simple_read_from_buffer+0xb5/0x130 [ 660.224563][ T4716] proc_fail_nth_read+0x10e/0x150 [ 660.224642][ T4716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 660.224677][ T4716] vfs_read+0x1a8/0x770 [ 660.224707][ T4716] ? __rcu_read_unlock+0x4f/0x70 [ 660.224797][ T4716] ? __fget_files+0x184/0x1c0 [ 660.224826][ T4716] ? mutex_lock+0x58/0x90 [ 660.224860][ T4716] ksys_read+0xda/0x1a0 [ 660.224885][ T4716] __x64_sys_read+0x40/0x50 [ 660.224908][ T4716] x64_sys_call+0x2889/0x3000 [ 660.224976][ T4716] do_syscall_64+0xca/0x2b0 [ 660.225017][ T4716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.225043][ T4716] RIP: 0033:0x7f971c8de15c [ 660.225105][ T4716] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 660.225128][ T4716] RSP: 002b:00007f971b347030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 660.225152][ T4716] RAX: ffffffffffffffda RBX: 00007f971cb35fa0 RCX: 00007f971c8de15c [ 660.225168][ T4716] RDX: 000000000000000f RSI: 00007f971b3470a0 RDI: 0000000000000009 [ 660.225184][ T4716] RBP: 00007f971b347090 R08: 0000000000000000 R09: 0000000000000000 [ 660.225199][ T4716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.225214][ T4716] R13: 00007f971cb36038 R14: 00007f971cb35fa0 R15: 00007ffdaa906ea8 [ 660.225238][ T4716] [ 660.448578][ T4724] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4724 comm=syz.5.10656 [ 660.547377][ T4728] loop8: detected capacity change from 0 to 1024 [ 660.554672][ T4728] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 660.565602][ T4728] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 660.576240][ T4728] JBD2: no valid journal superblock found [ 660.582042][ T4728] EXT4-fs (loop8): Could not load journal inode [ 660.654033][ T4731] FAULT_INJECTION: forcing a failure. [ 660.654033][ T4731] name failslab, interval 1, probability 0, space 0, times 0 [ 660.666734][ T4731] CPU: 0 UID: 0 PID: 4731 Comm: syz.0.10659 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 660.666857][ T4731] Tainted: [W]=WARN [ 660.666865][ T4731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 660.666879][ T4731] Call Trace: [ 660.666919][ T4731] [ 660.666927][ T4731] __dump_stack+0x1d/0x30 [ 660.666952][ T4731] dump_stack_lvl+0x95/0xd0 [ 660.666974][ T4731] dump_stack+0x15/0x1b [ 660.666994][ T4731] should_fail_ex+0x265/0x280 [ 660.667053][ T4731] should_failslab+0x8c/0xb0 [ 660.667083][ T4731] kmem_cache_alloc_noprof+0x69/0x4b0 [ 660.667112][ T4731] ? security_file_alloc+0x32/0x100 [ 660.667146][ T4731] security_file_alloc+0x32/0x100 [ 660.667234][ T4731] init_file+0x5c/0x1c0 [ 660.667265][ T4731] alloc_empty_file+0x8b/0x200 [ 660.667291][ T4731] path_openat+0x63/0x23b0 [ 660.667424][ T4731] ? _parse_integer_limit+0x170/0x190 [ 660.667453][ T4731] ? _parse_integer+0x27/0x40 [ 660.667478][ T4731] ? kstrtoull+0x111/0x140 [ 660.667503][ T4731] ? kstrtouint+0x76/0xc0 [ 660.667609][ T4731] do_filp_open+0x109/0x230 [ 660.667654][ T4731] do_sys_openat2+0xa6/0x150 [ 660.667761][ T4731] __x64_sys_openat+0xf2/0x120 [ 660.667796][ T4731] x64_sys_call+0x2b07/0x3000 [ 660.667831][ T4731] do_syscall_64+0xca/0x2b0 [ 660.667957][ T4731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.668040][ T4731] RIP: 0033:0x7f730493df90 [ 660.668056][ T4731] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 660.668081][ T4731] RSP: 002b:00007f73033a6f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 660.668166][ T4731] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f730493df90 [ 660.668183][ T4731] RDX: 0000000000000002 RSI: 00007f73033a6fa0 RDI: 00000000ffffff9c [ 660.668211][ T4731] RBP: 00007f73033a6fa0 R08: 0000000000000000 R09: 00007f73033a6cd6 [ 660.668228][ T4731] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 660.668245][ T4731] R13: 00007f7304b96038 R14: 00007f7304b95fa0 R15: 00007ffcaa6f9d68 [ 660.668271][ T4731] [ 660.837784][ T4721] 9p: Bad value for 'rfdno' [ 661.366250][ T4740] __nla_validate_parse: 7 callbacks suppressed [ 661.366331][ T4740] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10661'. [ 661.531778][ T4734] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 661.541251][ T4734] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 661.608645][ T4740] 0ªX¹¦À: renamed from 61ªX¹¦À [ 661.636996][ T4740] net_ratelimit: 67 callbacks suppressed [ 661.637010][ T4740] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 661.743289][ T4770] netlink: 'syz.8.10670': attribute type 1 has an invalid length. [ 661.751399][ T4770] netlink: 'syz.8.10670': attribute type 2 has an invalid length. [ 661.765641][ T4770] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10670'. [ 661.775879][ T4766] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 661.865247][ T4779] netlink: 'syz.2.10672': attribute type 1 has an invalid length. [ 661.873242][ T4779] netlink: 'syz.2.10672': attribute type 2 has an invalid length. [ 661.884415][ T4745] netlink: 328 bytes leftover after parsing attributes in process `syz.0.10662'. [ 661.900318][ T4779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10672'. [ 661.947009][ T4781] netlink: 'syz.8.10673': attribute type 1 has an invalid length. [ 661.954897][ T4781] netlink: 'syz.8.10673': attribute type 2 has an invalid length. [ 661.962942][ T4781] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10673'. [ 662.125897][ T4789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10674'. [ 662.142470][ T4789] team0 (unregistering): Port device team_slave_0 removed [ 662.152402][ T4789] team0 (unregistering): Port device team_slave_1 removed [ 662.253649][ T4795] netlink: 3 bytes leftover after parsing attributes in process `syz.8.10677'. [ 662.262852][ T4795] 0ªX¹¦À: renamed from caif0 [ 662.269884][ T4795] 0ªX¹¦À: entered allmulticast mode [ 662.275313][ T4795] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 662.392925][ T4801] netlink: 'syz.1.10680': attribute type 21 has an invalid length. [ 662.401052][ T4801] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10680'. [ 662.494678][ T4810] 9p: Bad value for 'wfdno' [ 662.692525][ T4835] FAULT_INJECTION: forcing a failure. [ 662.692525][ T4835] name failslab, interval 1, probability 0, space 0, times 0 [ 662.705300][ T4835] CPU: 1 UID: 0 PID: 4835 Comm: syz.8.10694 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 662.705342][ T4835] Tainted: [W]=WARN [ 662.705351][ T4835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 662.705368][ T4835] Call Trace: [ 662.705377][ T4835] [ 662.705386][ T4835] __dump_stack+0x1d/0x30 [ 662.705487][ T4835] dump_stack_lvl+0x95/0xd0 [ 662.705515][ T4835] dump_stack+0x15/0x1b [ 662.705541][ T4835] should_fail_ex+0x265/0x280 [ 662.705565][ T4835] should_failslab+0x8c/0xb0 [ 662.705608][ T4835] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 662.705631][ T4835] ? __alloc_skb+0x2ff/0x4b0 [ 662.705660][ T4835] __alloc_skb+0x2ff/0x4b0 [ 662.705689][ T4835] ? __alloc_skb+0x228/0x4b0 [ 662.705735][ T4835] audit_log_start+0x3a0/0x720 [ 662.705758][ T4835] ? kstrtouint+0x76/0xc0 [ 662.705865][ T4835] audit_seccomp+0x48/0x100 [ 662.705905][ T4835] ? __seccomp_filter+0x832/0x1260 [ 662.705956][ T4835] __seccomp_filter+0x843/0x1260 [ 662.706176][ T4835] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 662.706270][ T4835] ? vfs_write+0x7e8/0x960 [ 662.706291][ T4835] ? __rcu_read_unlock+0x4f/0x70 [ 662.706317][ T4835] ? __fget_files+0x184/0x1c0 [ 662.706353][ T4835] __secure_computing+0x82/0x150 [ 662.706387][ T4835] syscall_trace_enter+0xcf/0x1e0 [ 662.706421][ T4835] do_syscall_64+0xa4/0x2b0 [ 662.706524][ T4835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.706546][ T4835] RIP: 0033:0x7f8d788ef749 [ 662.706562][ T4835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.706580][ T4835] RSP: 002b:00007f8d7734f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 662.706685][ T4835] RAX: ffffffffffffffda RBX: 00007f8d78b45fa0 RCX: 00007f8d788ef749 [ 662.706701][ T4835] RDX: 00002000000003c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 662.706718][ T4835] RBP: 00007f8d7734f090 R08: 0000000000000000 R09: 0000000000000000 [ 662.706812][ T4835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.706829][ T4835] R13: 00007f8d78b46038 R14: 00007f8d78b45fa0 R15: 00007ffe4d8b67c8 [ 662.706856][ T4835] [ 663.197392][ T4847] loop8: detected capacity change from 0 to 128 [ 663.284257][ T4847] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 663.536004][ T2089] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 663.912457][ T29] kauditd_printk_skb: 465 callbacks suppressed [ 663.912475][ T29] audit: type=1326 audit(1184.041:114644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.1.10707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 663.960622][ T29] audit: type=1326 audit(1184.041:114645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.1.10707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 663.984353][ T29] audit: type=1326 audit(1184.071:114646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.1.10707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 664.007797][ T29] audit: type=1326 audit(1184.071:114647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.1.10707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 664.031036][ T29] audit: type=1326 audit(1184.071:114648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.1.10707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 664.054294][ T29] audit: type=1326 audit(1184.071:114649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.1.10707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 664.077473][ T29] audit: type=1326 audit(1184.071:114650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.1.10707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 664.100762][ T29] audit: type=1326 audit(1184.071:114651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.1.10707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 664.123948][ T29] audit: type=1326 audit(1184.071:114652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.1.10707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 664.147370][ T29] audit: type=1326 audit(1184.071:114653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.1.10707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 664.171049][T31756] IPVS: starting estimator thread 0... [ 664.187277][ T4879] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10709'. [ 664.198617][ T4879] 1ªX¹¦À: renamed from 60ªX¹¦À [ 664.211473][ T4879] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 664.274970][ T4877] IPVS: using max 1920 ests per chain, 96000 per kthread [ 664.696330][ T4917] netlink: 'syz.1.10723': attribute type 1 has an invalid length. [ 664.704219][ T4917] netlink: 'syz.1.10723': attribute type 2 has an invalid length. [ 664.705571][ T4909] loop8: detected capacity change from 0 to 512 [ 664.720981][ T4917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10723'. [ 664.730612][ T4901] loop5: detected capacity change from 0 to 512 [ 664.749176][ T4909] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 664.757487][ T4901] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 664.774571][ T4909] EXT4-fs (loop8): orphan cleanup on readonly fs [ 664.781131][ T4901] EXT4-fs (loop5): orphan cleanup on readonly fs [ 664.791573][ T4909] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.10718: corrupted inode contents [ 664.830862][ T4901] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.10714: corrupted inode contents [ 664.882913][ T4909] EXT4-fs (loop8): Remounting filesystem read-only [ 664.889596][ T4901] EXT4-fs (loop5): Remounting filesystem read-only [ 664.896360][ T4909] EXT4-fs (loop8): 1 truncate cleaned up [ 664.902133][ T1687] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 664.902148][ T4901] EXT4-fs (loop5): 1 truncate cleaned up [ 664.918524][ T1687] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 664.934961][ T1687] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 664.946863][ T1687] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 664.957579][ T1687] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 664.968312][ T1687] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 664.982502][ T4901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 665.011224][ T4909] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 665.064016][ T2089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.114968][ T1669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.236681][ T4949] netlink: 'syz.5.10735': attribute type 1 has an invalid length. [ 665.298815][ T4951] loop8: detected capacity change from 0 to 512 [ 665.924334][ T4988] ref_ctr_offset mismatch. inode: 0x98a offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 666.135689][ T4989] loop8: detected capacity change from 0 to 512 [ 666.165498][ T4989] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 666.174030][ T4989] EXT4-fs (loop8): orphan cleanup on readonly fs [ 666.181817][ T4989] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.10750: corrupted inode contents [ 666.194216][ T4989] EXT4-fs (loop8): Remounting filesystem read-only [ 666.201228][ T4989] EXT4-fs (loop8): 1 truncate cleaned up [ 666.207112][ T1687] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 666.217780][ T1687] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 666.228401][ T1687] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 666.239341][ T4989] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 666.285820][ T2089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.330855][ T5008] loop8: detected capacity change from 0 to 1764 [ 666.476875][ T5030] __nla_validate_parse: 3 callbacks suppressed [ 666.476892][ T5030] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10764'. [ 666.478372][ T5027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10763'. [ 666.539339][ T5034] FAULT_INJECTION: forcing a failure. [ 666.539339][ T5034] name failslab, interval 1, probability 0, space 0, times 0 [ 666.552158][ T5034] CPU: 1 UID: 0 PID: 5034 Comm: syz.0.10766 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 666.552260][ T5034] Tainted: [W]=WARN [ 666.552270][ T5034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 666.552286][ T5034] Call Trace: [ 666.552295][ T5034] [ 666.552306][ T5034] __dump_stack+0x1d/0x30 [ 666.552405][ T5034] dump_stack_lvl+0x95/0xd0 [ 666.552434][ T5034] dump_stack+0x15/0x1b [ 666.552460][ T5034] should_fail_ex+0x265/0x280 [ 666.552568][ T5034] should_failslab+0x8c/0xb0 [ 666.552650][ T5034] kmem_cache_alloc_noprof+0x69/0x4b0 [ 666.552676][ T5034] ? locks_get_lock_context+0x89/0x210 [ 666.552713][ T5034] locks_get_lock_context+0x89/0x210 [ 666.552743][ T5034] posix_lock_inode+0x67/0x2380 [ 666.552834][ T5034] ? file_has_perm+0x359/0x3a0 [ 666.552873][ T5034] fcntl_setlk+0x61f/0x950 [ 666.552960][ T5034] do_fcntl+0x6a1/0xf60 [ 666.552999][ T5034] __se_sys_fcntl+0xb1/0x120 [ 666.553029][ T5034] __x64_sys_fcntl+0x43/0x50 [ 666.553128][ T5034] x64_sys_call+0x2d6f/0x3000 [ 666.553159][ T5034] do_syscall_64+0xca/0x2b0 [ 666.553203][ T5034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.553261][ T5034] RIP: 0033:0x7f730493f749 [ 666.553282][ T5034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.553305][ T5034] RSP: 002b:00007f73033a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 666.553358][ T5034] RAX: ffffffffffffffda RBX: 00007f7304b95fa0 RCX: 00007f730493f749 [ 666.553373][ T5034] RDX: 0000200000000000 RSI: 0000000000000025 RDI: 0000000000000003 [ 666.553387][ T5034] RBP: 00007f73033a7090 R08: 0000000000000000 R09: 0000000000000000 [ 666.553399][ T5034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.553412][ T5034] R13: 00007f7304b96038 R14: 00007f7304b95fa0 R15: 00007ffcaa6f9d68 [ 666.553476][ T5034] [ 666.810928][ T5040] loop8: detected capacity change from 0 to 1764 [ 666.816011][ T5039] netlink: 444 bytes leftover after parsing attributes in process `syz.2.10768'. [ 666.829549][ T5039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10768'. [ 666.934229][ T3428] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 666.941697][ T3428] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 666.949309][ T3428] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 666.956782][ T3428] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 666.964314][ T3428] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 666.971764][ T3428] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 666.979335][ T3428] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 666.986799][ T3428] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 666.994240][ T3428] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 667.001846][ T3428] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 667.010179][ T3428] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [sy] on syz0 [ 667.055372][ T5052] validate_nla: 3 callbacks suppressed [ 667.055393][ T5052] netlink: 'syz.2.10775': attribute type 1 has an invalid length. [ 667.069015][ T5052] netlink: 'syz.2.10775': attribute type 2 has an invalid length. [ 667.087261][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10775'. [ 667.159460][ T5062] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 667.174019][ T5042] loop5: detected capacity change from 0 to 512 [ 667.191453][ T5062] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10778'. [ 667.208858][ T5042] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 667.227219][ T5042] EXT4-fs (loop5): orphan cleanup on readonly fs [ 667.353622][ T5076] loop8: detected capacity change from 0 to 512 [ 667.371287][ T5042] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.10771: corrupted inode contents [ 667.389093][ T5076] EXT4-fs warning (device loop8): ext4_multi_mount_protect:314: fsck is running on the filesystem [ 667.399894][ T5076] EXT4-fs warning (device loop8): ext4_multi_mount_protect:314: MMP failure info: last update time: 1756377954, last update node: nogikhp920.muc.corp.google.com, last update device: loop12 [ 667.434601][ T5042] EXT4-fs (loop5): Remounting filesystem read-only [ 667.441445][ T5042] EXT4-fs (loop5): 1 truncate cleaned up [ 667.447497][T21735] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 667.458106][T21735] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 667.485428][T21735] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 667.522277][ T5042] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 667.543176][ T5089] pimreg: entered allmulticast mode [ 667.551416][ T1669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.561803][ T5089] pimreg: left allmulticast mode [ 667.568121][ T5092] netlink: 'syz.1.10786': attribute type 1 has an invalid length. [ 667.576034][ T5092] netlink: 'syz.1.10786': attribute type 2 has an invalid length. [ 667.584051][ T5092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10786'. [ 668.550823][ T5151] loop8: detected capacity change from 0 to 2048 [ 668.601286][ T5151] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.627428][ T5151] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.10809: bg 0: block 345: padding at end of block bitmap is not set [ 668.655174][ T5161] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10812'. [ 668.664628][ T5161] 1ªX¹¦À: renamed from 60ªX¹¦À [ 668.669573][ T5151] EXT4-fs (loop8): Remounting filesystem read-only [ 668.678880][ T5161] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 668.720777][ T5151] tipc: Started in network mode [ 668.725750][ T5151] tipc: Node identity 8e63eeff4c2, cluster identity 4711 [ 668.733019][ T5151] tipc: Enabled bearer , priority 0 [ 668.761488][ T5151] syzkaller0: entered promiscuous mode [ 668.767160][ T5151] syzkaller0: entered allmulticast mode [ 668.773272][ T5151] tipc: Resetting bearer [ 668.787964][ T5150] tipc: Resetting bearer [ 668.836216][ T5150] tipc: Disabling bearer [ 668.854784][T21727] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.901620][ T2089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.913525][ T29] kauditd_printk_skb: 1534 callbacks suppressed [ 668.913557][ T29] audit: type=1326 audit(1189.053:116164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.1.10819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f971c8d65e7 code=0x7ffc0000 [ 668.946656][T21727] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.958944][ T29] audit: type=1326 audit(1189.083:116165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.1.10819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f971c87b829 code=0x7ffc0000 [ 668.982105][ T29] audit: type=1326 audit(1189.083:116166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.1.10819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 669.005447][ T29] audit: type=1326 audit(1189.083:116167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.1.10819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 669.028635][ T29] audit: type=1326 audit(1189.083:116168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.1.10819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f971c8d65e7 code=0x7ffc0000 [ 669.051762][ T29] audit: type=1326 audit(1189.083:116169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.1.10819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f971c87b829 code=0x7ffc0000 [ 669.074886][ T29] audit: type=1326 audit(1189.083:116170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.1.10819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 669.098492][ T29] audit: type=1326 audit(1189.083:116171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.1.10819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 669.121934][ T29] audit: type=1326 audit(1189.083:116172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.1.10819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971c8df749 code=0x7ffc0000 [ 669.145277][ T29] audit: type=1326 audit(1189.083:116173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5173 comm="syz.1.10819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f971c912005 code=0x7ffc0000 [ 669.184667][T21727] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.234905][T21727] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.281988][ T5208] dummy0: Caught tx_queue_len zero misconfig [ 669.405730][T21727] bridge_slave_1: left allmulticast mode [ 669.411456][T21727] bridge_slave_1: left promiscuous mode [ 669.417322][T21727] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.426280][T21727] bridge_slave_0: left allmulticast mode [ 669.431977][T21727] bridge_slave_0: left promiscuous mode [ 669.437871][T21727] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.542787][T21727] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 669.585374][ T5242] netlink: 7 bytes leftover after parsing attributes in process `syz.2.10846'. [ 669.624982][T21727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.639097][T21727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.654041][T21727] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 669.663798][T21727] bond0 (unregistering): Released all slaves [ 669.677146][ T5239] FAULT_INJECTION: forcing a failure. [ 669.677146][ T5239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.690425][ T5239] CPU: 0 UID: 0 PID: 5239 Comm: syz.0.10845 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 669.690465][ T5239] Tainted: [W]=WARN [ 669.690472][ T5239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 669.690537][ T5239] Call Trace: [ 669.690556][ T5239] [ 669.690567][ T5239] __dump_stack+0x1d/0x30 [ 669.690599][ T5239] dump_stack_lvl+0x95/0xd0 [ 669.690622][ T5239] dump_stack+0x15/0x1b [ 669.690715][ T5239] should_fail_ex+0x265/0x280 [ 669.690750][ T5239] should_fail+0xb/0x20 [ 669.690770][ T5239] should_fail_usercopy+0x1a/0x20 [ 669.690794][ T5239] _copy_to_user+0x20/0xa0 [ 669.690831][ T5239] simple_read_from_buffer+0xb5/0x130 [ 669.690863][ T5239] proc_fail_nth_read+0x10e/0x150 [ 669.690966][ T5239] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 669.691001][ T5239] vfs_read+0x1a8/0x770 [ 669.691150][ T5239] ? __rcu_read_unlock+0x4f/0x70 [ 669.691174][ T5239] ? __fget_files+0x184/0x1c0 [ 669.691203][ T5239] ? mutex_lock+0x58/0x90 [ 669.691237][ T5239] ksys_read+0xda/0x1a0 [ 669.691262][ T5239] __x64_sys_read+0x40/0x50 [ 669.691311][ T5239] x64_sys_call+0x2889/0x3000 [ 669.691343][ T5239] do_syscall_64+0xca/0x2b0 [ 669.691377][ T5239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.691459][ T5239] RIP: 0033:0x7f730493e15c [ 669.691477][ T5239] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 669.691495][ T5239] RSP: 002b:00007f73033a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 669.691518][ T5239] RAX: ffffffffffffffda RBX: 00007f7304b95fa0 RCX: 00007f730493e15c [ 669.691535][ T5239] RDX: 000000000000000f RSI: 00007f73033a70a0 RDI: 0000000000000007 [ 669.691567][ T5239] RBP: 00007f73033a7090 R08: 0000000000000000 R09: 0000000000000000 [ 669.691579][ T5239] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 669.691591][ T5239] R13: 00007f7304b96038 R14: 00007f7304b95fa0 R15: 00007ffcaa6f9d68 [ 669.691612][ T5239] [ 669.925356][ T5252] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.10849'. [ 669.947327][ T5252] netlink: zone id is out of range [ 669.952671][ T5252] netlink: zone id is out of range [ 669.972846][ T5179] chnl_net:caif_netlink_parms(): no params data found [ 669.998449][ T5252] netlink: zone id is out of range [ 670.023815][ T5252] netlink: zone id is out of range [ 670.040353][T21727] hsr_slave_0: left promiscuous mode [ 670.047697][ T5252] netlink: zone id is out of range [ 670.052964][ T5252] netlink: zone id is out of range [ 670.058162][ T5252] netlink: zone id is out of range [ 670.073667][T21727] hsr_slave_1: left promiscuous mode [ 670.085767][T21727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.093378][T21727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.102878][ T5252] netlink: zone id is out of range [ 670.108139][ T5252] netlink: zone id is out of range [ 670.115479][T21727] veth1_vlan: left promiscuous mode [ 670.123079][T21727] veth0_vlan: left promiscuous mode [ 670.224956][T21727] team0 (unregistering): Port device team_slave_1 removed [ 670.244215][T21727] team0 (unregistering): Port device team_slave_0 removed [ 670.252422][T21717] smc: removing ib device !yz! [ 670.287025][ T5270] FAULT_INJECTION: forcing a failure. [ 670.287025][ T5270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.300169][ T5270] CPU: 1 UID: 0 PID: 5270 Comm: syz.1.10856 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 670.300256][ T5270] Tainted: [W]=WARN [ 670.300265][ T5270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 670.300281][ T5270] Call Trace: [ 670.300289][ T5270] [ 670.300299][ T5270] __dump_stack+0x1d/0x30 [ 670.300329][ T5270] dump_stack_lvl+0x95/0xd0 [ 670.300354][ T5270] dump_stack+0x15/0x1b [ 670.300397][ T5270] should_fail_ex+0x265/0x280 [ 670.300427][ T5270] should_fail+0xb/0x20 [ 670.300451][ T5270] should_fail_usercopy+0x1a/0x20 [ 670.300481][ T5270] _copy_from_user+0x1c/0xb0 [ 670.300520][ T5270] restore_altstack+0x4b/0x2d0 [ 670.300552][ T5270] ? __set_task_blocked+0x23a/0x2a0 [ 670.300595][ T5270] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 670.300629][ T5270] ? __schedule+0x85f/0xcd0 [ 670.300676][ T5270] ? schedule+0x5f/0xd0 [ 670.300700][ T5270] ? exit_to_user_mode_loop+0xf1/0x740 [ 670.300721][ T5270] ? __ia32_sys_getpid+0x9/0x30 [ 670.300777][ T5270] ? __rcu_read_unlock+0x4f/0x70 [ 670.300800][ T5270] ? fpregs_restore_userregs+0xad/0x1d0 [ 670.300830][ T5270] x64_sys_call+0x274a/0x3000 [ 670.300862][ T5270] do_syscall_64+0xca/0x2b0 [ 670.300927][ T5270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.300955][ T5270] RIP: 0033:0x7f971c87b829 [ 670.300973][ T5270] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 670.300996][ T5270] RSP: 002b:00007f971b346a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 670.301082][ T5270] RAX: ffffffffffffffda RBX: 00007f971cb35fa0 RCX: 00007f971c87b829 [ 670.301099][ T5270] RDX: 00007f971b346a80 RSI: 00007f971b346bb0 RDI: 0000000000000021 [ 670.301137][ T5270] RBP: 00007f971b347090 R08: 0000000000000000 R09: 0000000000000000 [ 670.301163][ T5270] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 670.301195][ T5270] R13: 00007f971cb36038 R14: 00007f971cb35fa0 R15: 00007ffdaa906ea8 [ 670.301221][ T5270] [ 670.521940][ T5270] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 670.636356][ T5179] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.643501][ T5179] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.671596][ T5179] bridge_slave_0: entered allmulticast mode [ 670.678233][ T5179] bridge_slave_0: entered promiscuous mode [ 670.705624][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.712799][ T5179] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.731616][ T5179] bridge_slave_1: entered allmulticast mode [ 670.743882][ T5179] bridge_slave_1: entered promiscuous mode [ 670.778198][ T5280] loop8: detected capacity change from 0 to 512 [ 670.809210][ T5179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.868431][ T5179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.907653][ T5280] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 670.932433][ T5179] team0: Port device team_slave_0 added [ 670.939793][ T5179] team0: Port device team_slave_1 added [ 670.951470][ T5280] EXT4-fs (loop8): mount failed [ 670.964270][ T5179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.971301][ T5179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.997562][ T5179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.072049][ T5179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.079111][ T5179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.105238][ T5179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.163425][ T5179] hsr_slave_0: entered promiscuous mode [ 671.171674][ T5179] hsr_slave_1: entered promiscuous mode [ 671.177876][ T5179] debugfs: 'hsr0' already exists in 'hsr' [ 671.183714][ T5179] Cannot create hsr debugfs directory [ 671.233249][ T5318] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 671.277928][ T5330] FAULT_INJECTION: forcing a failure. [ 671.277928][ T5330] name failslab, interval 1, probability 0, space 0, times 0 [ 671.290706][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.10878 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 671.290824][ T5330] Tainted: [W]=WARN [ 671.290895][ T5330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 671.290909][ T5330] Call Trace: [ 671.290917][ T5330] [ 671.290926][ T5330] __dump_stack+0x1d/0x30 [ 671.290957][ T5330] dump_stack_lvl+0x95/0xd0 [ 671.290983][ T5330] dump_stack+0x15/0x1b [ 671.291081][ T5330] should_fail_ex+0x265/0x280 [ 671.291110][ T5330] should_failslab+0x8c/0xb0 [ 671.291132][ T5330] __kmalloc_cache_noprof+0x65/0x4c0 [ 671.291167][ T5330] ? ip6_mc_add_src+0x332/0x5d0 [ 671.291197][ T5330] ? should_fail_ex+0xdb/0x280 [ 671.291225][ T5330] ip6_mc_add_src+0x332/0x5d0 [ 671.291260][ T5330] ip6_mc_source+0x93f/0xc00 [ 671.291293][ T5330] do_ipv6_mcast_group_source+0x2d4/0x310 [ 671.291361][ T5330] ? lockref_put_return+0xf7/0x130 [ 671.291465][ T5330] ? __rcu_read_unlock+0x4f/0x70 [ 671.291487][ T5330] ? _raw_spin_lock_bh+0x56/0xb0 [ 671.291514][ T5330] ? _raw_spin_unlock_bh+0x36/0x40 [ 671.291554][ T5330] ? lock_sock_nested+0x112/0x140 [ 671.291573][ T5330] ? path_openat+0x1e82/0x23b0 [ 671.291605][ T5330] ? should_fail_ex+0xdb/0x280 [ 671.291717][ T5330] do_ipv6_setsockopt+0x12fe/0x2160 [ 671.291751][ T5330] ? kstrtoull+0x111/0x140 [ 671.291840][ T5330] ? avc_has_perm_noaudit+0xab/0x130 [ 671.291919][ T5330] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 671.291962][ T5330] ipv6_setsockopt+0x59/0x130 [ 671.292002][ T5330] udpv6_setsockopt+0x99/0xb0 [ 671.292044][ T5330] sock_common_setsockopt+0x69/0x80 [ 671.292071][ T5330] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 671.292099][ T5330] __sys_setsockopt+0x184/0x200 [ 671.292136][ T5330] __x64_sys_setsockopt+0x64/0x80 [ 671.292186][ T5330] x64_sys_call+0x21d5/0x3000 [ 671.292215][ T5330] do_syscall_64+0xca/0x2b0 [ 671.292258][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.292291][ T5330] RIP: 0033:0x7f730493f749 [ 671.292308][ T5330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.292332][ T5330] RSP: 002b:00007f73033a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 671.292357][ T5330] RAX: ffffffffffffffda RBX: 00007f7304b95fa0 RCX: 00007f730493f749 [ 671.292374][ T5330] RDX: 000000000000002b RSI: 0000000000000029 RDI: 0000000000000004 [ 671.292397][ T5330] RBP: 00007f73033a7090 R08: 0000000000000108 R09: 0000000000000000 [ 671.292414][ T5330] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 671.292430][ T5330] R13: 00007f7304b96038 R14: 00007f7304b95fa0 R15: 00007ffcaa6f9d68 [ 671.292489][ T5330] [ 671.814404][ T5179] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 671.829605][ T5179] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 671.843483][ T5179] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 671.872276][ T5179] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 671.943357][ T5374] __nla_validate_parse: 2 callbacks suppressed [ 671.943376][ T5374] netlink: 176 bytes leftover after parsing attributes in process `syz.1.10895'. [ 672.002124][ T5179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.021364][ T5179] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.040317][T21728] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.047470][T21728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.071913][T21728] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.079114][T21728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.127260][ T5179] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 672.132401][ T5391] loop8: detected capacity change from 0 to 2048 [ 672.137761][ T5179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 672.181517][ T5391] EXT4-fs: Ignoring removed nomblk_io_submit option [ 672.188398][ T5391] EXT4-fs: Ignoring removed nobh option [ 672.198486][ T5397] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10907'. [ 672.214330][ T5391] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.225054][ T5397] 1ªX¹¦À: renamed from 60ªX¹¦À [ 672.240103][ T5391] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.10904: corrupted in-inode xattr: invalid ea_ino [ 672.254164][ T5391] EXT4-fs (loop8): Remounting filesystem read-only [ 672.261304][ T5391] netlink: 44 bytes leftover after parsing attributes in process `syz.8.10904'. [ 672.270448][ T5391] ================================================================== [ 672.278564][ T5391] BUG: KCSAN: data-race in console_flush_all / console_flush_all [ 672.282514][ T5405] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10908'. [ 672.286315][ T5391] [ 672.286325][ T5391] write to 0xffffffff86a25dd8 of 8 bytes by task 5397 on cpu 1: [ 672.305243][ T5391] console_flush_all+0x38a/0x6c0 [ 672.310223][ T5391] console_unlock+0x97/0x270 [ 672.314862][ T5391] vprintk_emit+0x39f/0x5c0 [ 672.319414][ T5391] vprintk_default+0x26/0x30 [ 672.324055][ T5391] vprintk+0x1d/0x30 [ 672.327987][ T5391] _printk+0x79/0xa0 [ 672.331912][ T5391] chnl_net_open+0x28d/0x530 [ 672.336552][ T5391] __dev_open+0x317/0x560 [ 672.338394][ T5408] netlink: 176 bytes leftover after parsing attributes in process `syz.2.10909'. [ 672.340902][ T5391] __dev_change_flags+0x147/0x3c0 [ 672.340933][ T5391] netif_change_flags+0x5a/0xd0 [ 672.340961][ T5391] do_setlink+0x8db/0x2780 [ 672.364487][ T5391] rtnl_setlink+0x341/0x490 [ 672.369035][ T5391] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 672.374013][ T5391] netlink_rcv_skb+0x123/0x220 [ 672.378828][ T5391] rtnetlink_rcv+0x1c/0x30 [ 672.383309][ T5391] netlink_unicast+0x5c0/0x690 [ 672.388137][ T5391] netlink_sendmsg+0x58b/0x6b0 [ 672.392946][ T5391] __sock_sendmsg+0x145/0x180 [ 672.397661][ T5391] sock_write_iter+0x1a7/0x1f0 [ 672.402480][ T5391] do_iter_readv_writev+0x4a1/0x540 [ 672.407723][ T5391] vfs_writev+0x2df/0x8b0 [ 672.412061][ T5391] do_writev+0xe7/0x210 [ 672.416227][ T5391] __x64_sys_writev+0x45/0x50 [ 672.420937][ T5391] x64_sys_call+0x1ba5/0x3000 [ 672.425623][ T5391] do_syscall_64+0xca/0x2b0 [ 672.430141][ T5391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.436128][ T5391] [ 672.438454][ T5391] read to 0xffffffff86a25dd8 of 8 bytes by task 5391 on cpu 0: [ 672.445998][ T5391] console_flush_all+0x549/0x6c0 [ 672.450941][ T5391] console_unlock+0x97/0x270 [ 672.455551][ T5391] vprintk_emit+0x39f/0x5c0 [ 672.460103][ T5391] vprintk_default+0x26/0x30 [ 672.464742][ T5391] vprintk+0x1d/0x30 [ 672.468657][ T5391] _printk+0x79/0xa0 [ 672.472561][ T5391] __nla_validate_parse+0x1738/0x1d00 [ 672.477951][ T5391] __nla_validate_parse+0x6a4/0x1d00 [ 672.483261][ T5391] __nla_parse+0x40/0x60 [ 672.487532][ T5391] nfnetlink_rcv+0xb84/0x16c0 [ 672.492231][ T5391] netlink_unicast+0x5c0/0x690 [ 672.497004][ T5391] netlink_sendmsg+0x58b/0x6b0 [ 672.501961][ T5391] __sock_sendmsg+0x145/0x180 [ 672.506642][ T5391] ____sys_sendmsg+0x31e/0x4a0 [ 672.511426][ T5391] ___sys_sendmsg+0x17b/0x1d0 [ 672.516135][ T5391] __x64_sys_sendmsg+0xd4/0x160 [ 672.521004][ T5391] x64_sys_call+0x17ba/0x3000 [ 672.525686][ T5391] do_syscall_64+0xca/0x2b0 [ 672.530199][ T5391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.536106][ T5391] [ 672.538436][ T5391] value changed: 0x00000000000046a5 -> 0x00000000000046a6 [ 672.545538][ T5391] [ 672.547861][ T5391] Reported by Kernel Concurrency Sanitizer on: [ 672.554057][ T5391] CPU: 0 UID: 0 PID: 5391 Comm: syz.8.10904 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 672.565444][ T5391] Tainted: [W]=WARN [ 672.569248][ T5391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 672.579329][ T5391] ================================================================== [ 672.587658][ T5391] netlink: 21 bytes leftover after parsing attributes in process `syz.8.10904'. [ 672.597314][ T5405] 0ªX¹¦À: renamed from 61ªX¹¦À [ 672.621319][ T5179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.746115][ T5179] veth0_vlan: entered promiscuous mode [ 672.754442][ T5179] veth1_vlan: entered promiscuous mode [ 672.771770][ T5179] veth0_macvtap: entered promiscuous mode [ 672.779209][ T5179] veth1_macvtap: entered promiscuous mode [ 672.791476][ T5179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.803765][ T5179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.815192][T21727] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.829118][T21727] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.845342][T21727] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.859073][T21727] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.939073][ T2089] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.