last executing test programs: 5m46.947760479s ago: executing program 3 (id=1564): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x40000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchmod(r1, 0x148) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000004, &(0x7f0000000d80)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00', @ANYBLOB="1a961083c216e398b3852441fbacd14539194e81e2ec74ea00af4757fd632db5866c80f5b55492be6ad393d28d63023cd2e764a6bb41fa00d6c103356045fc3ade2c93339a56afb89b72a46f475c860a952e02dbf9c947a7cb75e89843f6d981fe7eed0ef37d5ab46550aa22", @ANYRES64], 0x6, 0x2bb, &(0x7f0000001240)="$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") r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fadvise64(r4, 0x9, 0x7ff, 0x4) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x3) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xa, 0xfe, 0x8801}]}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r5}, 0x10) socket$packet(0x11, 0x2, 0x300) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) recvmmsg(r6, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xff43}, 0x7}], 0x1, 0x40010043, 0x0) write$ppp(r3, &(0x7f0000000440)='\x00\x00', 0x2) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r7, 0xffffffffffffffff, 0x200000000000000) 5m46.657014094s ago: executing program 3 (id=1570): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7010fddbdf251a0000000c"], 0x30}, 0x1, 0x0, 0x0, 0x20000054}, 0x44) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x2, 0x70bd2a, 0x25dfdbfc, {{@in=@broadcast, @in=@loopback, 0x4e23, 0x3, 0x4e22, 0x0, 0xa, 0xa0, 0x80, 0x0, 0x0, r4}, {0x3, 0x2, 0x3, 0x2, 0x7fff, 0x9, 0x1, 0xf1}, {0x8, 0x1b69502f, 0x3, 0x7fff}, 0x3, 0x6e6bb8, 0x0, 0x0, 0x1, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x20000040}, 0x81) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB], 0x48) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x6, 0x3}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(0x0, r6) socket$netlink(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r9, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x6, 0x8}, 0x20) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000000140)=0x2000) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r7, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xbe, 0x4}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80840}, 0x40010) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r2, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7fffffff, 0x23}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r10 = inotify_init() inotify_add_watch(r10, &(0x7f0000000280)='./file0\x00', 0x80) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 5m46.559394135s ago: executing program 3 (id=1571): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x21, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) r7 = dup(r3) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x2, 0x6, 0x1fc}}) 5m46.507588385s ago: executing program 3 (id=1572): r0 = semget(0x1, 0x0, 0x640) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000004c0)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000005c0)={{0x1, 0xee00, r1, r2, r3, 0x22, 0x3}, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f2}) r4 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r8 = socket$inet_sctp(0x2, 0x5, 0x84) close(r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r10}}], 0x20, 0x2400e044}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000340)={0x0, 0x3, 0x0, 0xb, 0x6, 0xff, 0x3, 0x5, r10}, &(0x7f0000000380)=0x20) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r10, 0xb703}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) ptrace$pokeuser(0x6, r4, 0x358, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r11 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r11, 0x0, 0x0, 0x1001f0) fallocate(r11, 0x3, 0x9, 0x10000) 5m45.605118027s ago: executing program 3 (id=1599): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 5m45.305119692s ago: executing program 3 (id=1603): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_pts(r0, 0x800) r2 = dup(r1) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 5m45.304989552s ago: executing program 32 (id=1603): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_pts(r0, 0x800) r2 = dup(r1) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 5m21.586289376s ago: executing program 5 (id=2127): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0000000000000000b7080000010000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000db4dbabe3cd8d14ab34afaf13ac59f9b4cb45c6e76a86e00a017dba8b2f6372894a5747c88dd05b003366f51d27f40cde074278ed4e571bf779bf27caa81d71973a5964e29b5af15f3c3b52739ad22241569e4acb332aee441f3fe9a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {@norecovery}, {@mblk_io_submit}, {@noload}, {@resgid}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000e00)=ANY=[@ANYBLOB="7f454c46080505fe080000000000000002000600080000008f0000000000000040000000000000002b0300000000000004000000ff0f3800020007007f00fcff00000000000000000300000000000000ffffffffffffff7f0400000000000000ff010000000000000000000000000000ee0f00000000000051e57464060000001910000000000000000000007000000007000000000000000700000000000000b90600000000000002000000000000000e61000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/1670], 0x8b2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000017c0)='kfree\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000de"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) r4 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0, 0x20, 0x7800, 0x8, 0x2, {{0x22, 0x4, 0x0, 0x4, 0x88, 0x68, 0x0, 0x0, 0x4, 0x0, @private=0xa010101, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0xd0, 0x3, 0x0, [{@multicast2, 0xcd}, {@multicast1, 0x9}, {@rand_addr=0x64010102, 0xffffffff}, {@multicast2, 0x6}]}, @ssrr={0x89, 0x23, 0xdf, [@loopback, @loopback, @empty, @multicast1, @multicast1, @broadcast, @empty, @empty]}, @rr={0x7, 0xf, 0x41, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @lsrr={0x83, 0x1b, 0x84, [@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fdff00000000000000926403d89dd9f3000000180100002020702500000000002120207b1af8ff00000000bfa10000e600000007010000f8ffffffb70200000000b70300000000008385009d48159bd9726eb6b459626f6db4a29418fccea754009168d2f461dd8b996fc06f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', r0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"/370], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) socket$packet(0x11, 0xa, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) fsetxattr$security_selinux(r6, &(0x7f00000005c0), &(0x7f0000000540)='system_u:object_r:inetd_log_t:s0\x00', 0x21, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r9, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5m20.312755204s ago: executing program 5 (id=2145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x1000000ff000000) 5m20.297653195s ago: executing program 33 (id=2145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x1000000ff000000) 4m26.107005296s ago: executing program 4 (id=3681): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f00000006c0)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1407, 0x300, 0xffffffff, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20004800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x11, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @tail_call]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) pause() fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) r6 = dup2(r4, r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) fcntl$setown(r4, 0x8, r3) tkill(r3, 0x13) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x2}, {r1, 0x10}], 0x2, &(0x7f00000002c0), &(0x7f0000000300)={[0xfffffffffffffffd]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000000069102e00000000009500"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m23.051858718s ago: executing program 4 (id=3746): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000004400)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@dioread_lock}, {@debug}, {@inlinecrypt}]}, 0x8, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r2, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0}, 0xd58}], 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) 4m22.19084112s ago: executing program 4 (id=3757): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffe}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095", @ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r6, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r4, 0x0, 0x0, 0x0, 0x0, 0x3, r5}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r5}]) shutdown(r4, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffd49, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) mq_timedreceive(r7, 0x0, 0x0, 0xc587, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) prctl$PR_SET_NAME(0xf, &(0x7f0000000740)='\x00\a\a\x00\x00\x01\x00\x00\x00\x00\xcf\x80o\xdb\xc7q\x00\x00\x00!\x83\xf8\xad\x17\xcf\xa7\xd6R\x88\xf9\xed\xcdC\x8a\x8b\xf0\x7f\xf1<\x94\xdf\xe1\xaa\xb7j\\\xdf\x1eN\xab\xc9PA:\xdf\a\x0f\xf6\x13\xf2\x16\xf54U\x85C\xdb\x8bkQ\xfarw]\xbd\xf4\x10\x1aG\xc5\xbe\x17\xf0}gb\x8e\x02@a\xb8\xbc\xd4\xd2\xa2\xbc\xc9\x02\xb0\xf8\xc0\xcb\xe4\xfaE5!\xad\x90\xb2\xc7Dw\xf2X,j$6Aj1ho\x12\xc0v\xcd\x1e\x9f\xadA\x84\xc4\xf8\xb3%g\xac}\x86\x80\\/\xa1\xdf\xd4KM\t\xb0dK\x0e$\xf2\xad;E[\xf5\xc9 \xf9\t\x00\x00\x00\x00\x00\x00\x00\xbc\xa5I\xf6\xba7\xcb\xc7\x81\xc4Q\xcd\xa6&\xc5\xd8\x7fa4\x8b\xb9\x104\xfc+x\xaazY\xf0\xe2\xa8\x1b\x9b\xa2\xfdx\x00\xab&:\xa7\x17\x1d\x03.\xdb\xe5\xa9\xc6\x1ba\n\xe5Br\b\x8e:E\xb7\x18\xf2S\xc4\xc9\"T\x8c\f\xbf\xad\xe2\x89\xd1\xaf\xef\xd4\xac\xcf4\xab\xf3\xc5\xfb\xb2\xf1\x14`I\xb1\xd7\xd1\xb0B\x12') r8 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x0) setsockopt$bt_BT_VOICE(r8, 0x112, 0xb, &(0x7f0000000080)=0x60, 0x2) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0) 4m21.694726837s ago: executing program 4 (id=3764): openat$tun(0xffffffffffffff9c, 0x0, 0x202000, 0x0) r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = fspick(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) r4 = fsmount(r3, 0x1, 0x1) r5 = socket$kcm(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x0, 0x31e14ab1, @remote, 0x5}, 0x1c) io_setup(0x2007, &(0x7f0000000980)) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0xb, 0x0, 0x2}]) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffedb}, 0x80) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="bf", 0x1}], 0x1}, 0x20048010) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000400)={r5, r2}) sendmmsg$inet(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000000) ptrace$pokeuser(0x6, r0, 0x378, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r7 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYRESDEC=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @lirc_mode2=0x10, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) chown(&(0x7f0000001140)='./cgroup.cpu/cgroup.procs\x00', 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x58a, &(0x7f0000000b40)="$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") mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) msgget$private(0x0, 0x88) lstat(0x0, 0x0) 4m20.75777998s ago: executing program 4 (id=3778): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0xfffffffffffffd32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20120, &(0x7f0000000300)=@l2tp={0x2, 0x0, @multicast2, 0x1}, 0x80) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLEaGVEHsEqRsSN4pix1HsLJvQQ3rmikQlTvTIH8C5Jw7cuCC4cSkHJH5EoAaJg9GMJ6mb2o3VJHYUfz7SaObNm/r7fXH8Xuc59gtgZF2PiP2ImIiITyNiNjufy7b4qL0l1z05uLdyeHBvJRet1if/zKX1ybno+DeJa9ljFiPihw8jfpJ7Pm5jd29juVqtbGfl+WZta76xu3drvba8VlmrbJbLS4tLCx/cfr98bm19qzaRHX318R/2v/WzJK2Z7ExnO85Tu+mF4ziJ8Yj4/kUEG4KxrD0Tw06El5KPiNcj4u309T8bY+mzCQBcZa3WbLRmO8sAwFWXT+fAcvlSNhcwE/l8qdSew3sjpvPVeqN58259Z3O1PVc2F4X83fVqZSGbK5yLQi4pL6bHT8vlE+XbEfFaRPxiciotl1bq1dVh/scHAEbYtRPj/38m2+M/AHDFFYedAAAwcD3G//1B5wEADI77fwAYPcZ/ABg97fF/athpAAAD5P4fAEaP8R8ARsoPPv442VqH2fdfr362u7NR/+zWaqWxUartrJRW6ttbpbV6fS39zp7aaY9Xrde3Ft+Lnc/nvr3VaM43dvfu1Oo7m8076fd636kU0qt8sgAAhum1tx79OZeMyB9OpVt0rOVQGGpmwEXLDzsBYGjGhp0AMDRW+4LRdYZ7fNMDcEV0WaL3GcVuHxBqtVqti0sJuGA3vmT+H0ZVx/y/vwKGEWP+H0aX+X8YXa1Wrt81/6PfCwGAy80cP9Dj/f/Xs/1vsjcHfrx68ooHF5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG5H6/+WsrXAZyKfL5UiXomIuSjk7q5XKwsR8WpE/GmyMJmUF4ecMwBwVvm/5bL1v27MvjvzTNWb144PJyLip7/65JefLzeb23+MmMj9a/LofPNBdr48+OwBgNMdjdPpvuNG/snBvZWjbZD5/P27EVFsxz88mIjD4/jjMZ7ui1GIiOl/57JyW65j7uIs9u9HxBe7tT8XM+kcSHvl05Pxk9ivDDR+/pn4+bSuvU9+Fl84h1xg1DxK+p+Pur3+8nE93Xd//RfTHurssv4veaiVw7QPfBr/qP8b69H/Xe83xnu/+177aOr5uvsRXx6POIp92NH/HMXP9Yj/bp/x//KVN9/uVdf6dcSN6B6/M9Z8s7Y139jdu7VeW16rrFU2y+WlxaWFD26/X55P56jne48G//jw5qu96pL2T/eIXzyl/V/vs/0P//fpj772gvjffKdb/Hy88YL4yZj4jT7jL0//ttirLom/2qP9pz3/N/uM//ive88tGw4ADE9jd29juVqtbI/kQfR38e+zH9alyHmkD5Jn4RKk0fXgO4OKNRHdq37+TvvXdDKi8xe71XqpWL16jPOYdQMug+MXfUT8d9jJAAAAAAAAAAAAAAAAXQ3iE0vDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABX1/8DAAD//9RMyv0=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xffffffff}, 0x18) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x7de, 0x101, 0x0, 0x8, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0xffffffffffffff98, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r8}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000240)={0x3920e, r4, 0x2, 0x0, 0x2}) 4m20.292511696s ago: executing program 4 (id=3789): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0xfe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007c0011000000019078ac1efe01ac1414aa05009078e00400e0480000000000005d00110000ac000000000000018309000000000000030000009e035eeb01f9ec00000000007f00000100000000ac1414bb000000000000001f000000008c1414a700000000e00000017f000001000000"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0xa, 0x300) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private1, @in6=@private1, 0x2001, 0x0, 0x4e23, 0x4041, 0xa}, {0x800000000006, 0x3, 0xfffffffffffffffe, 0x0, 0x4, 0x801000000000000, 0xffffffffffffffff, 0x4}, {0x400, 0x3, 0x0, 0x800}, 0x8, 0x1, 0x1, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x32}, 0xa, @in6=@local, 0x3501, 0x2, 0x0, 0x0, 0xfffffffe, 0x3, 0x1}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}}, 0x1c) socket$packet(0x11, 0x3, 0x300) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000092000/0x3000)=nil, 0x3000, 0xb635773f07ebbee0, 0x8031, 0xffffffffffffffff, 0x8a754000) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0x1f, &(0x7f00000006c0)=ANY=[@ANYBLOB="0dff00000000000000000000ffffffff00000000080000000dd40900ffffff7fb7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000184500000600000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff8500000006000000"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0xf, 0x5, 0x2}, 0x10, 0xffffffffffffffff, r3, 0x4, &(0x7f00000005c0)=[0x1, 0xffffffffffffffff, r2], &(0x7f00000007c0)=[{0x2, 0x1, 0x4}, {0x0, 0x5, 0xe}, {0x5, 0x4, 0xb, 0x8}, {0x2, 0x2, 0x6, 0x5}], 0x10, 0x3, @void, @value}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x338, 0x208, 0x700001b, 0x148, 0x0, 0x148, 0x2a0, 0x206, 0x240, 0x2a0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x1ea, 0x1a0, 0x208, 0x0, {0x390, 0x8f00}, [@common=@inet=@recent1={{0x108}, {0xf, 0x8001, 0x20, 0x0, 'syz1\x00', 0x3, [0xa7ea79785227b1dc, 0xffffffff, 0xff, 0xffffffff]}}, @common=@inet=@socket3={{0x28}, 0x6}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1f, 0x8000, 0x0, 0x2, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x208}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) read$eventfd(0xffffffffffffffff, &(0x7f0000000a80), 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000104050000000000000000000700000006000640fbff0000050001"], 0x24}}, 0x2000004) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000a40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000009c0)=ANY=[@ANYBLOB="64000000090601020000000000090000020000030800094000000009050001000700000008000940000001a9c61db6c25eb3de7058ff08000940000007ff081fe24138fde3f5cfebce9d3244cd41da00094000006001595ec46119789aee4ee89b7b247f"], 0x64}, 0x1, 0x0, 0x0, 0x10002001}, 0x801) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93, 0x8, 0x0, 0x0}}, 0x10) r7 = syz_io_uring_setup(0x10018d6, &(0x7f0000000ec0)={0x0, 0x4f92, 0x8000}, &(0x7f0000ffe000), &(0x7f0000ffe000)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001140)={{0x1, 0xffffffffffffffff}, &(0x7f00000010c0), &(0x7f0000001100)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xb, 0x1d, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000004000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70000000000008500000083000000bf0900000000000055090100000000009500000000000000552ba0ffffffffff18200000", @ANYRES32, @ANYBLOB="000000003d3d000074850000ffffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000000d90ffff00000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x8, 0x4, &(0x7f0000000e00)=""/4, 0x41000, 0x36, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e80)={0x3, 0x3, 0x7, 0x2}, 0x10, r6, r0, 0x0, &(0x7f0000001180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r8], 0x0, 0x10, 0x823, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x2, &(0x7f0000000180), 0xfe) socket$packet(0x11, 0xa, 0x300) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), 0xffffffffffffffff) 4m20.291945066s ago: executing program 34 (id=3789): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0xfe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007c0011000000019078ac1efe01ac1414aa05009078e00400e0480000000000005d00110000ac000000000000018309000000000000030000009e035eeb01f9ec00000000007f00000100000000ac1414bb000000000000001f000000008c1414a700000000e00000017f000001000000"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0xa, 0x300) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private1, @in6=@private1, 0x2001, 0x0, 0x4e23, 0x4041, 0xa}, {0x800000000006, 0x3, 0xfffffffffffffffe, 0x0, 0x4, 0x801000000000000, 0xffffffffffffffff, 0x4}, {0x400, 0x3, 0x0, 0x800}, 0x8, 0x1, 0x1, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x32}, 0xa, @in6=@local, 0x3501, 0x2, 0x0, 0x0, 0xfffffffe, 0x3, 0x1}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}}, 0x1c) socket$packet(0x11, 0x3, 0x300) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000092000/0x3000)=nil, 0x3000, 0xb635773f07ebbee0, 0x8031, 0xffffffffffffffff, 0x8a754000) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0x1f, &(0x7f00000006c0)=ANY=[@ANYBLOB="0dff00000000000000000000ffffffff00000000080000000dd40900ffffff7fb7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000184500000600000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff8500000006000000"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0xf, 0x5, 0x2}, 0x10, 0xffffffffffffffff, r3, 0x4, &(0x7f00000005c0)=[0x1, 0xffffffffffffffff, r2], &(0x7f00000007c0)=[{0x2, 0x1, 0x4}, {0x0, 0x5, 0xe}, {0x5, 0x4, 0xb, 0x8}, {0x2, 0x2, 0x6, 0x5}], 0x10, 0x3, @void, @value}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x338, 0x208, 0x700001b, 0x148, 0x0, 0x148, 0x2a0, 0x206, 0x240, 0x2a0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x1ea, 0x1a0, 0x208, 0x0, {0x390, 0x8f00}, [@common=@inet=@recent1={{0x108}, {0xf, 0x8001, 0x20, 0x0, 'syz1\x00', 0x3, [0xa7ea79785227b1dc, 0xffffffff, 0xff, 0xffffffff]}}, @common=@inet=@socket3={{0x28}, 0x6}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1f, 0x8000, 0x0, 0x2, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x208}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) read$eventfd(0xffffffffffffffff, &(0x7f0000000a80), 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000104050000000000000000000700000006000640fbff0000050001"], 0x24}}, 0x2000004) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000a40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000009c0)=ANY=[@ANYBLOB="64000000090601020000000000090000020000030800094000000009050001000700000008000940000001a9c61db6c25eb3de7058ff08000940000007ff081fe24138fde3f5cfebce9d3244cd41da00094000006001595ec46119789aee4ee89b7b247f"], 0x64}, 0x1, 0x0, 0x0, 0x10002001}, 0x801) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93, 0x8, 0x0, 0x0}}, 0x10) r7 = syz_io_uring_setup(0x10018d6, &(0x7f0000000ec0)={0x0, 0x4f92, 0x8000}, &(0x7f0000ffe000), &(0x7f0000ffe000)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001140)={{0x1, 0xffffffffffffffff}, &(0x7f00000010c0), &(0x7f0000001100)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xb, 0x1d, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000004000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70000000000008500000083000000bf0900000000000055090100000000009500000000000000552ba0ffffffffff18200000", @ANYRES32, @ANYBLOB="000000003d3d000074850000ffffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000000d90ffff00000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x8, 0x4, &(0x7f0000000e00)=""/4, 0x41000, 0x36, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e80)={0x3, 0x3, 0x7, 0x2}, 0x10, r6, r0, 0x0, &(0x7f0000001180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r8], 0x0, 0x10, 0x823, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x2, &(0x7f0000000180), 0xfe) socket$packet(0x11, 0xa, 0x300) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), 0xffffffffffffffff) 2m23.748901412s ago: executing program 0 (id=6248): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) futex(&(0x7f0000000240), 0x4, 0x2, &(0x7f0000000380)={r0, r1+10000000}, &(0x7f00000003c0), 0x2) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002940)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd31, 0x0, {0x0, 0x0, 0x0, r8, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x20000010) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r6) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="6eca2459", @ANYRES16=r10, @ANYBLOB="20002dbd7000fddbdf25010000000500030001000000050003006700000014000900fe80000000000000000000000000000e05000400000000001400070000000000000000000000000000000000080006006401010204000500"], 0x60}, 0x1, 0x0, 0x0, 0x2004c884}, 0x4001) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m22.892954044s ago: executing program 0 (id=6259): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500), &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x2e, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000005304010000000000000000000500000a14000000110a5f6aa066d412ca3dfdd8bf2ea80ec86fe413f7683e5e3e27fb379153fd403bda36bcc97df735c160d3dcefd209b6a69b44e490d984cf8a767788329a9a98577055c076d56ae9eb9697f05c58a57c07184ba514ef13b1a7273b1a2c412002e57e55b06db343f4aeb460eb5a35e8fbf283b689b16cf1ab28b0b6ffba6d1ec29a282025952897e2d884526802256fbd3f3aee611a67753a5123a2b24ecb28256de4ef947f7a8a0ea5c6c75ec3c66eadd6c2ee00"/216], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x4}}, {{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3504, 0x2, 0x0, 0x0, 0x20000}}, 0xe8) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) 2m22.892478653s ago: executing program 0 (id=6260): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x480c0}, 0x30000080) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xff7fffff7ffffffd]}, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202006c3207b1af8ff00000000bfa100000000000007010000f8ffffff690b000000000000b50a0000000000008500000006000000a3e495000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m22.814963914s ago: executing program 0 (id=6261): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r5 = memfd_secret(0x0) futimesat(r5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000006c0)={0x0, 0x0}) syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r6, r4, 0x0, 0xa, &(0x7f00000005c0)='syzkaller\x00'}, 0x30) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000d000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=@framed={{}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r9, 0x84, 0x4, &(0x7f0000000640)=0x551, 0x4) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000003800)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x0, 0x5, 0xffff0000, 0x7, 0x6, 0xdcc, 0x81, 0x7, 0xf8, 0x9, 0x6e, 0xb, 0x10, 0x1f, 0x0, 0x5f7ee47a, 0x0, 0x78, 0x18000000, 0x2, 0x101, 0x2, 0x6, 0x4899a606, 0x81, 0x5, 0x5, 0x10, 0x20000000, 0x80, 0xfffffffd, 0x80000001, 0x7, 0x0, 0x7fff, 0x0, 0x1, 0x3, 0x2, 0xffff, 0x9, 0x1, 0x0, 0x2, 0xfc4, 0x5, 0x96ae, 0xffff, 0x1, 0x40, 0x2, 0x3, 0x4, 0x2, 0xfffffff7, 0x9, 0x80000000, 0x6, 0x1, 0x4, 0x4, 0x10001, 0x5, 0x4, 0x1, 0x6, 0x5, 0x8, 0x6bda55a8, 0x3, 0x5, 0x264, 0xc1, 0x0, 0x179ba908, 0x0, 0x7, 0x2a023d77, 0xfffffff7, 0x8, 0xa6, 0x9, 0x3, 0xa, 0xf, 0xffff6028, 0xbfffff07, 0xfffffff9, 0x6, 0x8, 0x7, 0x1, 0x0, 0x7ff, 0x63, 0x3, 0x7, 0x5, 0x2, 0x2d3, 0x200, 0xf, 0x3, 0xad, 0xffffffff, 0x10, 0x8, 0x4, 0x1, 0x1, 0x3, 0xc, 0x0, 0xc, 0xfffffffe, 0x1, 0x1, 0x7, 0x18, 0x7, 0x100, 0x5, 0x4, 0x9, 0x6, 0x4, 0x8, 0x4, 0x42, 0x3, 0x80, 0x0, 0x400, 0x4, 0x6, 0x101, 0x8, 0x2, 0x7f, 0x0, 0x7fff, 0xc, 0x15, 0x9, 0x7fffffff, 0x2, 0x80, 0x8001, 0x4, 0xb, 0xc00, 0xc, 0x9, 0xb9, 0x8, 0x2, 0x1000, 0x200, 0x1, 0x9, 0xfffffff7, 0x19, 0x3, 0xffffff81, 0x10000, 0x18, 0x4, 0xffff8001, 0x3, 0x6, 0x9, 0x6, 0x80000000, 0xc863, 0x81, 0x3, 0x4, 0x7, 0x2, 0x1, 0x2c2, 0x4, 0xfffffffb, 0x4, 0xf8, 0x7fff, 0x5, 0x80000000, 0x5, 0x9, 0x0, 0x3800, 0x9, 0x53, 0x47, 0x7fffffff, 0x1000, 0x3, 0x2, 0x81, 0x4, 0x80000001, 0x4, 0xe, 0xd, 0x6, 0x7, 0x1, 0x7ff, 0xfffff001, 0xa5, 0x10001, 0x3, 0x79, 0x807, 0x81, 0xe9ab, 0x6, 0x2, 0x4, 0x6, 0x7, 0x7, 0x3, 0x8c, 0x2, 0x718, 0x4, 0x0, 0x2, 0xab, 0x9, 0x9, 0x5, 0x4, 0xfffffff9, 0x7, 0x4, 0x4, 0x1, 0x90, 0xfffffd5d, 0x34ea, 0x6, 0x7, 0x8, 0x4, 0xfffffff7, 0x2, 0x2, 0xaa, 0x8, 0xfffffffd, 0x5, 0x8]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x8, 0x9, 0x4, {0x3, 0x0, 0x53d, 0x5, 0x1ea, 0xe0000000}, {0x4, 0x1, 0x4, 0x7f, 0xc, 0x8}, 0x6, 0x40000, 0x5}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe0, 0x1, 0xa, 0x1, 0x0, 0x3, 0xfffffffe, 0x8, 0xfffffffe, 0x7, 0x74d, 0x3, 0x0, 0x8, 0xc6, 0x5, 0x4, 0x2, 0x4, 0xfffff800, 0x3, 0x1, 0x8, 0xb25a, 0x2, 0x2, 0x101, 0x9, 0xca, 0x7, 0x50000, 0xe, 0x8, 0x0, 0x0, 0x4, 0x0, 0x4, 0x1, 0xfffffffd, 0x3, 0x80000001, 0xfff, 0x7, 0x40, 0x40, 0x86e, 0x40, 0x7, 0x8, 0x5, 0x0, 0x8000, 0x8, 0x8, 0x8, 0x5, 0x9, 0x6, 0x5, 0x9, 0x3, 0x8, 0x8, 0x5, 0x1000, 0xfffffffb, 0x5, 0x3, 0xf, 0x101, 0x5, 0x5, 0x7, 0x720f, 0x1, 0x8, 0x8, 0x5a1, 0x9, 0xe, 0xa684, 0xa000, 0x2, 0x5, 0xfffffffb, 0x4, 0x1000, 0x0, 0x41333142, 0x1, 0x2, 0xff, 0x605, 0x6, 0x4, 0x9f2b56b, 0xb0b7, 0xcd2, 0x6, 0x7, 0xb, 0x88, 0x1, 0x8000, 0x1, 0x8, 0x0, 0x2, 0x800, 0x5, 0x1c1c, 0xe0, 0xf06, 0x9, 0x7, 0xf6eb, 0x2, 0x2, 0x7, 0x8, 0x9, 0x6, 0x2, 0x1, 0x40, 0x4, 0x9600, 0xf8, 0x5, 0xfffffffc, 0x9, 0x2, 0x81, 0x10001, 0x4, 0x1, 0xfffffffd, 0xc, 0xab, 0x7, 0x1, 0x7fff, 0xffffffff, 0x10000, 0x7, 0x6, 0x9, 0x2, 0x8, 0x48e, 0xb, 0xfffffffc, 0x200, 0x0, 0x5eea, 0x7, 0x5, 0x7fffffff, 0x0, 0x8, 0x9, 0xfffffff5, 0x6, 0x9, 0x3, 0xf9, 0x800, 0x8, 0xfffff76c, 0x4, 0x0, 0x30f1554e, 0x1, 0x8, 0x2, 0x200, 0x4, 0x3, 0xd6a, 0x9, 0x3, 0x9, 0x1ff, 0xff, 0xef6, 0x800, 0x80, 0x2, 0x81, 0x8000, 0x4, 0x6, 0x9, 0x0, 0x3, 0x4d8f, 0x81, 0x9, 0x3, 0x7fff, 0x7f, 0x6, 0xc6a, 0x4, 0xfffffffb, 0x81a, 0xfffffffd, 0x1, 0xfffffffe, 0x952, 0x3, 0x40, 0x4, 0x8, 0x2, 0x2c, 0x60000, 0x0, 0xc0000000, 0x6, 0xfffffffb, 0x1, 0x8, 0x4, 0x1381, 0x2, 0x6, 0x4fc4, 0x800, 0x7, 0x8, 0x5, 0x80000000, 0x5, 0x2, 0x8, 0x5, 0x8, 0x3, 0xb, 0x100, 0x4, 0x40, 0x53, 0x0, 0x0, 0x7, 0x7ff, 0x4, 0x18000, 0x70, 0x6, 0x7, 0x6, 0xfffffffc]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x2}, 0x18) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SG_GET_VERSION_NUM(r10, 0x2282, &(0x7f00000001c0)) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r11, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r10, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)={0x34, r12, 0x2, 0x2, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX={0x0, 0x6, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x0, 0x8, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24044041) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018910000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r14}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) execve(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x45d, &(0x7f0000000a00)="$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") 2m22.452424799s ago: executing program 0 (id=6268): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mm_page_free\x00', r0, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000600)={[{@jqfmt_vfsv0}, {@debug}]}, 0x1, 0x439, &(0x7f0000000100)="$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") sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000000c0601010000000000000000010000070500030007000000fcff010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x8080) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f0000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 2m22.105100784s ago: executing program 0 (id=6270): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) getpgid(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000002c0)="03", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x398, @empty}, 0x1c) 2m22.102182864s ago: executing program 35 (id=6270): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) getpgid(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000002c0)="03", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x398, @empty}, 0x1c) 51.16443407s ago: executing program 8 (id=8310): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000080009000d000000", 0x24) socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) recvfrom$inet6(r0, &(0x7f0000000240)=""/11, 0xb, 0x100, &(0x7f0000000780)={0xa, 0x4e22, 0x86, @rand_addr=' \x01\x00', 0x40}, 0x1c) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r5, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r5}}, 0x18) 51.040950361s ago: executing program 8 (id=8312): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x20, 0x7800, 0x8, 0x2, {{0x22, 0x4, 0x0, 0x4, 0x88, 0x68, 0x0, 0x0, 0x4, 0x0, @private=0xa010101, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0xd0, 0x3, 0x0, [{@multicast2, 0xcd}, {@multicast1, 0x9}, {@rand_addr=0x64010102, 0xffffffff}, {@multicast2, 0x6}]}, @ssrr={0x89, 0x23, 0xdf, [@loopback, @loopback, @empty, @multicast1, @multicast1, @broadcast, @empty, @empty]}, @rr={0x7, 0xf, 0x41, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @lsrr={0x83, 0x1b, 0x84, [@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fdff00000000000000926403d89dd9f3000000180100002020702500000000002120207b1af8ff00000000bfa10000e600000007010000f8ffffffb70200000000b70300000000008385009d48159bd9726eb6b459626f6db4a29418fccea754009168d2f461dd8b996fc06f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', r0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"/370], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0000200"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r8, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 50.804522804s ago: executing program 8 (id=8316): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x1a8, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@empty, 0x4d2, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x800000}, {0x0, 0x4}, 0x0, 0x3502, 0x2}, [@offload={0xc}, @policy={0xac, 0x7, {{@in6=@rand_addr=' \x01\x00', @in=@broadcast, 0x4e24, 0x6, 0x4e23, 0xff6e, 0x2, 0x0, 0x80, 0x44}, {0x2, 0x16fa00, 0x4a, 0x9, 0x1, 0x7, 0x400, 0x6}, {0x757, 0xaa12, 0x6, 0x1}, 0x2, 0x6e6bb1, 0x1, 0x0, 0x1}}]}, 0x1a8}}, 0x0) 50.782684995s ago: executing program 8 (id=8318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) 50.715267826s ago: executing program 8 (id=8320): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 50.676430186s ago: executing program 8 (id=8322): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r6, 0x40095505, 0x0) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r3, &(0x7f00000010c0)={0x1d, r4, 0x1, {0x0, 0x0, 0x1}, 0xfe}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005000)=@newtfilter={0xa18, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xfffd, 0x89c77fb34cc3db7f}, {0xa, 0x1}, {0xfff2, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x16}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_bpf={{0x8}, {0x9dc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_POLICE={0x89c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x6b70, 0x101, 0x253, 0x400, 0x3, 0x3, 0x8, 0xff, 0xc15b, 0x80000001, 0x0, 0x8, 0x0, 0x2, 0x6, 0x40, 0x10, 0x401, 0x5, 0x7, 0x10001, 0x48, 0xfffffe00, 0x7ff, 0x8000, 0x1, 0x80000000, 0x3, 0x8, 0x5, 0xef, 0xfffffff7, 0x5, 0x3, 0xa, 0x1ff, 0x1, 0x7, 0xa60, 0x6, 0x9, 0x9, 0x81, 0x2, 0x5, 0xd4, 0x4, 0x81, 0x7, 0xfa, 0x5, 0x3, 0x8, 0xce7f5e7, 0xec, 0x8000, 0x2, 0x4, 0x3f, 0x4, 0x1, 0x8, 0x4, 0xb, 0x6, 0x9, 0x3, 0x9, 0x4, 0x200, 0xab, 0x2, 0x8, 0xf, 0x9, 0x8, 0x1, 0x0, 0x8, 0x64ce, 0x6, 0x401, 0x13b, 0x80, 0xfffffffa, 0x8, 0xbb2d09a, 0x80000000, 0x2, 0xf, 0x6, 0x3dc, 0x22, 0x7, 0x9158, 0xd84, 0x15d, 0x1, 0x5, 0x0, 0x9, 0x8, 0x4, 0x8, 0x8, 0x2, 0x8, 0x52, 0x40, 0x8490, 0x2, 0xfe, 0x101, 0x4, 0x8000, 0x34a71484, 0x7, 0x2, 0x7fff, 0x1, 0x0, 0x3f, 0x1000, 0x3, 0x6, 0x6, 0x0, 0x1, 0x1, 0x4411dd87, 0x2172, 0x6, 0x5f2f40e7, 0x1, 0x3, 0x800, 0x7, 0x4, 0x8, 0x7, 0x646ddddc, 0x1, 0x0, 0x1, 0x6, 0x7, 0x6, 0x6, 0x10001, 0x4, 0x1, 0xd, 0x0, 0xe48, 0x8001, 0x7, 0xfffffffe, 0x4, 0x9, 0xded2, 0x3, 0x9, 0xffffffff, 0x8, 0x200, 0x4, 0x4, 0x40, 0x5, 0x39edd6c0, 0x6, 0x3, 0x5, 0x5, 0xfffff5c6, 0x4, 0x9, 0x200, 0x3ff, 0x4, 0x1, 0x342, 0x1, 0x5, 0x8, 0x2, 0x0, 0xffffffff, 0x0, 0xb7, 0x5, 0xd, 0x0, 0xf3f, 0x1, 0x5338, 0x401, 0x1, 0x2e, 0x1ff, 0x7, 0x4, 0x0, 0x7fff, 0x6, 0x81, 0x80, 0x200, 0x101, 0x1000, 0xfffffffc, 0x1, 0x3, 0x8, 0x8, 0x800, 0x8, 0x3, 0x7, 0x8, 0x7, 0x40, 0x3, 0xffffffff, 0xffffffff, 0x8, 0xe, 0x100, 0x5, 0xc, 0x2, 0x6e96914e, 0x7, 0x5, 0x1, 0x80000000, 0x1, 0x9, 0x7, 0x4, 0xe, 0x1, 0x4, 0xffff8001, 0x5, 0x10000, 0x4, 0xffff, 0x9, 0x8, 0xb3, 0x101, 0x5, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4800, 0x7, 0x1, 0x9ba, 0x0, {0x6, 0x1, 0x8, 0x100, 0x504, 0x100003}, {0x5, 0x0, 0x2, 0x3, 0xe, 0x7fc}, 0x2393, 0x3, 0x1ff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0xffffffdb, 0xfffffff7, 0x4, {0x8, 0x3, 0x9, 0xe, 0x2f7d, 0x8}, {0x2, 0x2, 0x3, 0x7, 0x3, 0x9}, 0x3, 0xe, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xffffff7f, 0x7, 0x2dc, 0x9, 0x8001, 0xfffffff9, 0x291, 0x3, 0x5, 0x3, 0x8001, 0x4a49, 0xfffffff6, 0x1, 0x4, 0x4, 0x6ca, 0x7, 0x7, 0xb, 0x8, 0xc, 0xffffff7f, 0x8000, 0x811, 0x5, 0x3, 0x2, 0xff, 0xff, 0x1c, 0x2, 0x7, 0x2, 0x5, 0x0, 0x6af7, 0x10, 0x4, 0x400, 0x1, 0x6, 0x401, 0x5, 0x4, 0x7fff, 0xeb9, 0xdac, 0x8, 0x80, 0xf7, 0x7, 0x4, 0xfffffffa, 0x9, 0x4, 0x4, 0x7, 0x8000, 0x4, 0x10, 0x8, 0x4, 0x8, 0xe, 0x1, 0x10000, 0xe, 0xd0ee, 0x0, 0xffffff32, 0x2, 0xffffffff, 0xbd6, 0xfffffff8, 0xffff0001, 0x0, 0x2, 0xfffff6c2, 0x8, 0x1, 0x9, 0x5, 0x6, 0x8, 0x5, 0x3, 0x1, 0x5, 0x4, 0x6, 0x6, 0x2, 0x81, 0x8, 0x5, 0x8, 0x1, 0x8, 0xf, 0x6c2, 0xb2, 0x80000001, 0x6, 0xa7a7, 0xc0000000, 0x800, 0x80000000, 0x7cc, 0x1, 0x3, 0x6, 0x5, 0x6, 0x0, 0xc3, 0x7fff, 0x800, 0x2, 0x5, 0x6, 0x8, 0xffffffff, 0x9, 0xc, 0xddb7, 0x3ff, 0x7fff, 0x200, 0x1, 0x81, 0x1, 0x100, 0x4, 0x401, 0x6, 0xd, 0x3ff, 0x3ff, 0x58a, 0x5, 0x53d1, 0x0, 0x8, 0x8, 0x2, 0x4, 0x5, 0x69a, 0x5, 0x3, 0x7, 0x200, 0xfffffff2, 0x0, 0x1, 0x8, 0x0, 0x200, 0x3, 0x7, 0xd7f, 0x80000001, 0x0, 0x10000, 0x3, 0x2, 0x81ce, 0x80000001, 0xfffffffa, 0xf, 0x0, 0x40, 0x5, 0xa, 0x7, 0x7, 0xfee, 0x2, 0xeec7, 0x40000000, 0xc6, 0x6d2, 0x9, 0x9, 0x6, 0x5, 0xa, 0x9, 0x3, 0x0, 0x7, 0x3, 0xffffffff, 0x0, 0xfffffffd, 0x7, 0x0, 0x2, 0x58, 0x8, 0x0, 0x753, 0x10000, 0x3, 0x8, 0x2, 0xb5, 0xffffffff, 0x8ec1, 0x9, 0x8001, 0x6, 0x1e, 0x8001, 0x7fffffff, 0x5, 0x2, 0x7d4, 0x400, 0xffff, 0x100, 0x800, 0xe, 0x26f4c879, 0x5, 0x6, 0x5, 0x894, 0x7, 0x6, 0xb, 0x764, 0x5c8a, 0xe0, 0x401, 0x81, 0xffffffff, 0x2, 0xf, 0xe8, 0x6, 0x0, 0x400, 0x9, 0xe, 0xfffffffd, 0xe73, 0x5, 0x1, 0x6, 0x8, 0x3, 0x454a]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x0, 0x1, 0xf, 0x2466aaee}, {0xfff, 0x0, 0xf, 0x2}, {0x1, 0xf8, 0xc, 0x1}, {0x3, 0x3, 0xf7, 0x1ff}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_ACT={0xd0, 0x1, [@m_csum={0xcc, 0x17, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x7, 0x3, 0x1, 0x1f9}, 0xf}}]}, {0x82, 0x6, "1cc777346f4a77963fca8ddd5c7925d3a3015c0c2d696c10910df00601ff73b0c64196c8b3a8ca7ee74edaae58bd0cfbfd7d43d61ac2de0ab0b819fad9a2567126484124b7d3305b1504f77ad91d0b0ce7f34230cf89ebde83700f0275fac58f53e84df07a81ca1d4cbb1f075e4a265a402b23c904584a7f4cb44c4fbcd6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0x3}}]}}]}, 0xa18}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 35.596391303s ago: executing program 36 (id=8322): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r6, 0x40095505, 0x0) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r3, &(0x7f00000010c0)={0x1d, r4, 0x1, {0x0, 0x0, 0x1}, 0xfe}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005000)=@newtfilter={0xa18, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xfffd, 0x89c77fb34cc3db7f}, {0xa, 0x1}, {0xfff2, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x16}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_bpf={{0x8}, {0x9dc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_POLICE={0x89c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x6b70, 0x101, 0x253, 0x400, 0x3, 0x3, 0x8, 0xff, 0xc15b, 0x80000001, 0x0, 0x8, 0x0, 0x2, 0x6, 0x40, 0x10, 0x401, 0x5, 0x7, 0x10001, 0x48, 0xfffffe00, 0x7ff, 0x8000, 0x1, 0x80000000, 0x3, 0x8, 0x5, 0xef, 0xfffffff7, 0x5, 0x3, 0xa, 0x1ff, 0x1, 0x7, 0xa60, 0x6, 0x9, 0x9, 0x81, 0x2, 0x5, 0xd4, 0x4, 0x81, 0x7, 0xfa, 0x5, 0x3, 0x8, 0xce7f5e7, 0xec, 0x8000, 0x2, 0x4, 0x3f, 0x4, 0x1, 0x8, 0x4, 0xb, 0x6, 0x9, 0x3, 0x9, 0x4, 0x200, 0xab, 0x2, 0x8, 0xf, 0x9, 0x8, 0x1, 0x0, 0x8, 0x64ce, 0x6, 0x401, 0x13b, 0x80, 0xfffffffa, 0x8, 0xbb2d09a, 0x80000000, 0x2, 0xf, 0x6, 0x3dc, 0x22, 0x7, 0x9158, 0xd84, 0x15d, 0x1, 0x5, 0x0, 0x9, 0x8, 0x4, 0x8, 0x8, 0x2, 0x8, 0x52, 0x40, 0x8490, 0x2, 0xfe, 0x101, 0x4, 0x8000, 0x34a71484, 0x7, 0x2, 0x7fff, 0x1, 0x0, 0x3f, 0x1000, 0x3, 0x6, 0x6, 0x0, 0x1, 0x1, 0x4411dd87, 0x2172, 0x6, 0x5f2f40e7, 0x1, 0x3, 0x800, 0x7, 0x4, 0x8, 0x7, 0x646ddddc, 0x1, 0x0, 0x1, 0x6, 0x7, 0x6, 0x6, 0x10001, 0x4, 0x1, 0xd, 0x0, 0xe48, 0x8001, 0x7, 0xfffffffe, 0x4, 0x9, 0xded2, 0x3, 0x9, 0xffffffff, 0x8, 0x200, 0x4, 0x4, 0x40, 0x5, 0x39edd6c0, 0x6, 0x3, 0x5, 0x5, 0xfffff5c6, 0x4, 0x9, 0x200, 0x3ff, 0x4, 0x1, 0x342, 0x1, 0x5, 0x8, 0x2, 0x0, 0xffffffff, 0x0, 0xb7, 0x5, 0xd, 0x0, 0xf3f, 0x1, 0x5338, 0x401, 0x1, 0x2e, 0x1ff, 0x7, 0x4, 0x0, 0x7fff, 0x6, 0x81, 0x80, 0x200, 0x101, 0x1000, 0xfffffffc, 0x1, 0x3, 0x8, 0x8, 0x800, 0x8, 0x3, 0x7, 0x8, 0x7, 0x40, 0x3, 0xffffffff, 0xffffffff, 0x8, 0xe, 0x100, 0x5, 0xc, 0x2, 0x6e96914e, 0x7, 0x5, 0x1, 0x80000000, 0x1, 0x9, 0x7, 0x4, 0xe, 0x1, 0x4, 0xffff8001, 0x5, 0x10000, 0x4, 0xffff, 0x9, 0x8, 0xb3, 0x101, 0x5, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4800, 0x7, 0x1, 0x9ba, 0x0, {0x6, 0x1, 0x8, 0x100, 0x504, 0x100003}, {0x5, 0x0, 0x2, 0x3, 0xe, 0x7fc}, 0x2393, 0x3, 0x1ff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0xffffffdb, 0xfffffff7, 0x4, {0x8, 0x3, 0x9, 0xe, 0x2f7d, 0x8}, {0x2, 0x2, 0x3, 0x7, 0x3, 0x9}, 0x3, 0xe, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xffffff7f, 0x7, 0x2dc, 0x9, 0x8001, 0xfffffff9, 0x291, 0x3, 0x5, 0x3, 0x8001, 0x4a49, 0xfffffff6, 0x1, 0x4, 0x4, 0x6ca, 0x7, 0x7, 0xb, 0x8, 0xc, 0xffffff7f, 0x8000, 0x811, 0x5, 0x3, 0x2, 0xff, 0xff, 0x1c, 0x2, 0x7, 0x2, 0x5, 0x0, 0x6af7, 0x10, 0x4, 0x400, 0x1, 0x6, 0x401, 0x5, 0x4, 0x7fff, 0xeb9, 0xdac, 0x8, 0x80, 0xf7, 0x7, 0x4, 0xfffffffa, 0x9, 0x4, 0x4, 0x7, 0x8000, 0x4, 0x10, 0x8, 0x4, 0x8, 0xe, 0x1, 0x10000, 0xe, 0xd0ee, 0x0, 0xffffff32, 0x2, 0xffffffff, 0xbd6, 0xfffffff8, 0xffff0001, 0x0, 0x2, 0xfffff6c2, 0x8, 0x1, 0x9, 0x5, 0x6, 0x8, 0x5, 0x3, 0x1, 0x5, 0x4, 0x6, 0x6, 0x2, 0x81, 0x8, 0x5, 0x8, 0x1, 0x8, 0xf, 0x6c2, 0xb2, 0x80000001, 0x6, 0xa7a7, 0xc0000000, 0x800, 0x80000000, 0x7cc, 0x1, 0x3, 0x6, 0x5, 0x6, 0x0, 0xc3, 0x7fff, 0x800, 0x2, 0x5, 0x6, 0x8, 0xffffffff, 0x9, 0xc, 0xddb7, 0x3ff, 0x7fff, 0x200, 0x1, 0x81, 0x1, 0x100, 0x4, 0x401, 0x6, 0xd, 0x3ff, 0x3ff, 0x58a, 0x5, 0x53d1, 0x0, 0x8, 0x8, 0x2, 0x4, 0x5, 0x69a, 0x5, 0x3, 0x7, 0x200, 0xfffffff2, 0x0, 0x1, 0x8, 0x0, 0x200, 0x3, 0x7, 0xd7f, 0x80000001, 0x0, 0x10000, 0x3, 0x2, 0x81ce, 0x80000001, 0xfffffffa, 0xf, 0x0, 0x40, 0x5, 0xa, 0x7, 0x7, 0xfee, 0x2, 0xeec7, 0x40000000, 0xc6, 0x6d2, 0x9, 0x9, 0x6, 0x5, 0xa, 0x9, 0x3, 0x0, 0x7, 0x3, 0xffffffff, 0x0, 0xfffffffd, 0x7, 0x0, 0x2, 0x58, 0x8, 0x0, 0x753, 0x10000, 0x3, 0x8, 0x2, 0xb5, 0xffffffff, 0x8ec1, 0x9, 0x8001, 0x6, 0x1e, 0x8001, 0x7fffffff, 0x5, 0x2, 0x7d4, 0x400, 0xffff, 0x100, 0x800, 0xe, 0x26f4c879, 0x5, 0x6, 0x5, 0x894, 0x7, 0x6, 0xb, 0x764, 0x5c8a, 0xe0, 0x401, 0x81, 0xffffffff, 0x2, 0xf, 0xe8, 0x6, 0x0, 0x400, 0x9, 0xe, 0xfffffffd, 0xe73, 0x5, 0x1, 0x6, 0x8, 0x3, 0x454a]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x0, 0x1, 0xf, 0x2466aaee}, {0xfff, 0x0, 0xf, 0x2}, {0x1, 0xf8, 0xc, 0x1}, {0x3, 0x3, 0xf7, 0x1ff}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_ACT={0xd0, 0x1, [@m_csum={0xcc, 0x17, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x7, 0x3, 0x1, 0x1f9}, 0xf}}]}, {0x82, 0x6, "1cc777346f4a77963fca8ddd5c7925d3a3015c0c2d696c10910df00601ff73b0c64196c8b3a8ca7ee74edaae58bd0cfbfd7d43d61ac2de0ab0b819fad9a2567126484124b7d3305b1504f77ad91d0b0ce7f34230cf89ebde83700f0275fac58f53e84df07a81ca1d4cbb1f075e4a265a402b23c904584a7f4cb44c4fbcd6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0x3}}]}}]}, 0xa18}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1.164993094s ago: executing program 2 (id=9391): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = eventfd2(0x0, 0x0) io_setup(0x6, 0x0) io_submit(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r3}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r3}]) shutdown(r2, 0x0) socket$kcm(0xa, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) 1.164100765s ago: executing program 1 (id=9392): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0xa6a, 0xcb, 0x80, 0x7}, {0x4, 0x9, 0xfe}]}, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x90, r1, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x6679fb74bcda4679}, {0xc, 0x8f, 0xb}, {0xc, 0x90, 0x1f6}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) 1.095485255s ago: executing program 2 (id=9395): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x800, &(0x7f0000000000)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x96) pwrite64(r0, &(0x7f0000000140)='2', 0x155c2, 0x8000c64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x60) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x1, 0xa) sendfile(r1, r1, 0x0, 0xe0000000) 1.036807746s ago: executing program 1 (id=9396): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r0, 0x0, 0x0, 0x34, &(0x7f0000001d40), &(0x7f0000001200)=""/52, 0x1d, 0x0, 0x0, 0x32, &(0x7f0000001240), &(0x7f00000012c0)="8c0a08e910ae7032e864da188ced87e298c590c914144603afafa3902765c0ff3af303a506aaf9c0902e99d79df694294c78", 0x4, 0x0, 0x5}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x1, 0x0, {0x0, 0x1, 0x0, 0x0, 0x8}}}]]}, {0x5f}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0xc050) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400000045"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) gettid() futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) 1.003596167s ago: executing program 6 (id=9397): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00'], 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, '\a\x00', "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", "58a190f0", "2a1e833e7af32011"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace389ff5c0", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d054", "29a78ab9b0a4e8ae"}, 0x38) (fail_nth: 1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 783.24963ms ago: executing program 9 (id=9398): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="d3"], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffb1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4(r0, 0x0, 0x0, 0x0) 695.336891ms ago: executing program 6 (id=9399): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x1d, 0x0, 0x3}, 0x18, &(0x7f0000000340)={&(0x7f0000000980)="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", 0xfffffded}}, 0x44000000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 636.959852ms ago: executing program 9 (id=9401): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x1, 0x2, 0x5, 0x8002, 0xfe, "90730aef00fffffffffffffbff95647fffffeb"}) r4 = dup(r3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000009000000070000000100000f0100000005000000050000000200000082040000000006000f030000009a045900302e616161006100"], &(0x7f0000000280)=""/6, 0x49, 0x6, 0x1, 0x3, 0x0, @void, @value}, 0x28) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x10c) fcntl$notify(r6, 0x402, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES64=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10, 0x0, 0x2}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x0) 617.537942ms ago: executing program 6 (id=9402): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x64, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) socket$inet(0x2, 0x3, 0x2) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f000073d000/0x3000)=nil) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000200)) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') 568.342622ms ago: executing program 9 (id=9403): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$bind(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x80022, 0x0) 541.829813ms ago: executing program 2 (id=9404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 538.653243ms ago: executing program 7 (id=9405): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x64, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) socket$inet(0x2, 0x3, 0x2) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f000073d000/0x3000)=nil) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000200)) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') 516.508123ms ago: executing program 9 (id=9406): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xbd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x5, 0xb, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) socket$kcm(0x2d, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) kexec_load(0x5, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000240)="9376c38951dd0daec2de1e32f8e24e3ee617d031908fa9f9e9df55d14109ec9571a85fd88473bc1f68c22ba98c877c88b89f61165ca9da78c1bc166e68cc6a137635343b60876205cedbe589ad", 0x4d, 0x1, 0x9}], 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 515.768783ms ago: executing program 1 (id=9407): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe6b, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000001840)='net/unix\x00') lseek(r4, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x17, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_fd={0x18, 0x2, 0x1, 0x0, r4}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x2, 0x1, 0x0, r4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x23, &(0x7f0000000400)=""/35, 0x41100, 0xc, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000440)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0xd, 0x9, 0x5bb6}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[r4, r4, 0xffffffffffffffff, r4, r4], &(0x7f0000000500)=[{0x1, 0x5, 0x6, 0x7}, {0x5, 0x4, 0x1, 0x6}, {0x0, 0x3, 0x4, 0x1}, {0x4, 0x2, 0xf, 0xc}, {0x5, 0x5, 0x1, 0x2}], 0x10, 0x400, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r6}, &(0x7f0000000240), &(0x7f0000000340)}, 0x20) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x2c, 0x26, 0x4, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x7}, {0x4, 0xffff}, {0xc, 0x1}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x180}, 0x814) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x64, r10, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x64}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpeername(r8, 0x0, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f0000000640), 0x7, 0x200740) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00ffff0000000000000000000000fc7cbc4f8c80cd5c406174e1ff30e0d8000000000041655cbdaf247388988a9ec2233c9611e3a6fb39eb269fa3052f522651b484a16cd418edb528cc1a9312749faa259b369b3e8d254869527222fb13032d9d070052887dfc078e8713", @ANYRES32=0x0, @ANYBLOB="00000000202000002c001280deff010067726574617000001c00028005000a00000000004e001300010000000800140000000000"], 0x4c}}, 0x0) r11 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r11, 0x8008551d, &(0x7f0000000140)=ANY=[]) 471.597434ms ago: executing program 6 (id=9408): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x400) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000200)={{0x0, 0x2, 0x213, 0x1}}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="321f933c2a76a5bef384ab782d030dc89bb1e61fe2ec6707c5206a8a658d7242773f63ccae47e6bd93a4c8dee19dab54b406b4b17aaefcaea6be"], 0x28}], 0x1}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f00000005c0)=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x60) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioperm(0x0, 0x6, 0x2da3b9f3) r6 = syz_clone(0xd0002000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x2, &(0x7f0000000740)={0x0, 0x60}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000640)="b9a4139164b187d42b587197bd92", 0x0, 0x3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x6}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x0, 0x4, @rand_addr=0x64010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000400)={{'\x00', 0x2}, {0x1f2}, 0x10, 0x0, 0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000500)="9ff3ccfd831b40dbd2c383ca5fa30646331b15757cde875530ad24cd57ba3a57f6ad297c1bd4f4a97da882582f3f2f10634b6dc46c5a9a2ec384f005b3adf9744613b082b6757a2b95d235e9e725cdc64c1a352ceb7a01174796e4037a3a9fa706790490c0c7e0c2130cf982bafbeeb082952fc922a73832c3b9541aa84d4d4bb87a12dd96d4636316f7f84d74", 0x8d, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x225}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, @perf_config_ext={0xc, 0x9}, 0x4008, 0xfff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, r5, 0x8) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) 457.899574ms ago: executing program 7 (id=9409): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r0, 0x0, 0x0, 0x34, &(0x7f0000001d40), &(0x7f0000001200)=""/52, 0x1d, 0x0, 0x0, 0x32, &(0x7f0000001240), &(0x7f00000012c0)="8c0a08e910ae7032e864da188ced87e298c590c914144603afafa3902765c0ff3af303a506aaf9c0902e99d79df694294c78", 0x4, 0x0, 0x5}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x1, 0x0, {0x0, 0x1, 0x0, 0x0, 0x8}}}]]}, {0x5f}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0xc050) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400000045"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) gettid() futex_waitv(&(0x7f0000000d00), 0x0, 0x0, 0x0, 0x1) 420.008955ms ago: executing program 9 (id=9410): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000800)={r0, 0x0, &(0x7f0000000740)=""/156}, 0x20) 419.406624ms ago: executing program 7 (id=9411): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$bind(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x80022, 0x0) 418.881735ms ago: executing program 1 (id=9420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 404.566575ms ago: executing program 9 (id=9412): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="0020000000000000000000000000c9c300000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 403.891665ms ago: executing program 2 (id=9413): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x1, 0x2, 0x5, 0x8002, 0xfe, "90730aef00fffffffffffffbff95647fffffeb"}) r4 = dup(r3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000009000000070000000100000f0100000005000000050000000200000082040000000006000f030000009a045900302e616161006100"], &(0x7f0000000280)=""/6, 0x49, 0x6, 0x1, 0x3, 0x0, @void, @value}, 0x28) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x10c) fcntl$notify(r6, 0x402, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000070000000000000000001fa8c7d95eafb2e4d631e5e42501887536ef3c70db2d286b9f080f72e178bab6a7636872d2ae664a6792cc570822f3cce05ccc34a53a77e46a19631d7f7929890b08213aaa5e4efe583b1d2f16598d1005ad2b1b9811dd6ba8ac9a431851930de1ab18b0beb8263076014db7df", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES64=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10, 0x0, 0x2}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x0) 370.906585ms ago: executing program 1 (id=9414): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = dup(r3) ioctl$TIOCSTI(r4, 0x5412, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000009000000070000000100000f0100000005000000050000000200000082040000000006000f030000009a045900302e616161006100"], &(0x7f0000000280)=""/6, 0x49, 0x6, 0x1, 0x3, 0x0, @void, @value}, 0x28) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10c) fcntl$notify(r6, 0x402, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES64=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9, 0x0, 0x2}, 0x18) 338.347636ms ago: executing program 7 (id=9415): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 291.002406ms ago: executing program 7 (id=9416): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$bind(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x80022, 0x0) 255.114987ms ago: executing program 6 (id=9417): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x800, &(0x7f0000000000)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x96) pwrite64(r0, &(0x7f0000000140)='2', 0x155c2, 0x8000c64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x60) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x1, 0xa) sendfile(r1, r1, 0x0, 0xe0000000) 198.824208ms ago: executing program 7 (id=9418): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x7, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 42.37966ms ago: executing program 2 (id=9419): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x64, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) socket$inet(0x2, 0x3, 0x2) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f000073d000/0x3000)=nil) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000200)) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') 42.069699ms ago: executing program 6 (id=9421): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) r3 = io_uring_setup(0x78c4, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0x1, 0x3bd}) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0xfffe, @empty}}, 0x24) inotify_init1(0x80000) listen(0xffffffffffffffff, 0x4) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) close_range(r3, r4, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = memfd_secret(0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100032ec90d22e2ca8ba000000000000", @ANYRES32=0x0, @ANYBLOB="030100000000000014001280090001007866726d000000000400028008001a8004001c00"], 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x4014) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) unshare(0x68040200) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) process_mrelease(r5, 0x0) sendfile(r1, r1, 0x0, 0x401) 14.43703ms ago: executing program 2 (id=9422): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r0, 0x0, 0x0, 0x34, &(0x7f0000001d40), &(0x7f0000001200)=""/52, 0x1d, 0x0, 0x0, 0x32, &(0x7f0000001240), &(0x7f00000012c0)="8c0a08e910ae7032e864da188ced87e298c590c914144603afafa3902765c0ff3af303a506aaf9c0902e99d79df694294c78", 0x4, 0x0, 0x5}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x1, 0x0, {0x0, 0x1, 0x0, 0x0, 0x8}}}]]}, {0x5f}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0xc050) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400000045"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) gettid() futex_waitv(&(0x7f0000000d00), 0x0, 0x0, 0x0, 0x1) 0s ago: executing program 1 (id=9423): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc0000000800110007000000", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) kernel console output (not intermixed with test programs): b0 [ 473.359371][T25048] ? clear_bhb_loop+0x40/0x90 [ 473.359398][T25048] ? clear_bhb_loop+0x40/0x90 [ 473.359426][T25048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.359452][T25048] RIP: 0033:0x7fc9bfcce969 [ 473.359475][T25048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.359514][T25048] RSP: 002b:00007fc9be337038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.359538][T25048] RAX: ffffffffffffffda RBX: 00007fc9bfef5fa0 RCX: 00007fc9bfcce969 [ 473.359556][T25048] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 473.359572][T25048] RBP: 00007fc9be337090 R08: 0000000000000000 R09: 0000000000000000 [ 473.359588][T25048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.359604][T25048] R13: 0000000000000000 R14: 00007fc9bfef5fa0 R15: 00007ffc7dc9f208 [ 473.359657][T25048] [ 473.772178][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 473.772196][ T29] audit: type=1326 audit(1748334562.333:40305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25061 comm="syz.2.8142" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffab3c6e969 code=0x0 [ 473.814217][T25056] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 473.840511][ T29] audit: type=1400 audit(1748334562.393:40306): avc: denied { ioctl } for pid=25065 comm="syz.8.8140" path="socket:[87449]" dev="sockfs" ino=87449 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 473.906257][ T29] audit: type=1400 audit(1748334562.463:40307): avc: denied { remount } for pid=25067 comm="syz.6.8143" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 473.939180][ T29] audit: type=1400 audit(1748334562.493:40308): avc: denied { read } for pid=25067 comm="syz.6.8143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 473.967271][ T29] audit: type=1400 audit(1748334562.523:40309): avc: denied { write } for pid=25069 comm="syz.7.8144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 473.986869][ T29] audit: type=1400 audit(1748334562.523:40310): avc: denied { connect } for pid=25069 comm="syz.7.8144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 474.007483][ T29] audit: type=1400 audit(1748334562.553:40311): avc: denied { create } for pid=25065 comm="syz.8.8140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 474.027249][ T29] audit: type=1400 audit(1748334562.553:40312): avc: denied { setopt } for pid=25065 comm="syz.8.8140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 474.046933][ T29] audit: type=1400 audit(1748334562.563:40313): avc: denied { read } for pid=25067 comm="syz.6.8143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 474.076515][ T29] audit: type=1400 audit(1748334562.633:40314): avc: denied { bind } for pid=25065 comm="syz.8.8140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 474.120636][T25083] tipc: Started in network mode [ 474.125991][T25083] tipc: Node identity , cluster identity 4711 [ 474.132099][T25083] tipc: Failed to obtain node identity [ 474.137746][T25083] tipc: Enabling of bearer rejected, failed to enable media [ 474.358093][T25095] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 474.416378][T25099] hub 8-0:1.0: USB hub found [ 474.429425][T25099] hub 8-0:1.0: 8 ports detected [ 474.589786][T25109] FAULT_INJECTION: forcing a failure. [ 474.589786][T25109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.602928][T25109] CPU: 0 UID: 0 PID: 25109 Comm: syz.1.8160 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 474.603036][T25109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 474.603103][T25109] Call Trace: [ 474.603110][T25109] [ 474.603119][T25109] __dump_stack+0x1d/0x30 [ 474.603142][T25109] dump_stack_lvl+0xe8/0x140 [ 474.603163][T25109] dump_stack+0x15/0x1b [ 474.603216][T25109] should_fail_ex+0x265/0x280 [ 474.603310][T25109] should_fail+0xb/0x20 [ 474.603348][T25109] should_fail_usercopy+0x1a/0x20 [ 474.603378][T25109] _copy_to_user+0x20/0xa0 [ 474.603440][T25109] simple_read_from_buffer+0xb5/0x130 [ 474.603471][T25109] proc_fail_nth_read+0x100/0x140 [ 474.603504][T25109] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 474.603577][T25109] vfs_read+0x1a0/0x6f0 [ 474.603605][T25109] ? __rcu_read_unlock+0x4f/0x70 [ 474.603666][T25109] ? __rcu_read_unlock+0x4f/0x70 [ 474.603688][T25109] ? __fget_files+0x184/0x1c0 [ 474.603817][T25109] ksys_read+0xda/0x1a0 [ 474.603860][T25109] __x64_sys_read+0x40/0x50 [ 474.603890][T25109] x64_sys_call+0x2d77/0x2fb0 [ 474.603948][T25109] do_syscall_64+0xd0/0x1b0 [ 474.603971][T25109] ? clear_bhb_loop+0x40/0x90 [ 474.603994][T25109] ? clear_bhb_loop+0x40/0x90 [ 474.604033][T25109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.604056][T25109] RIP: 0033:0x7f7e7cf7d37c [ 474.604163][T25109] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 474.604244][T25109] RSP: 002b:00007f7e7b5e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 474.604270][T25109] RAX: ffffffffffffffda RBX: 00007f7e7d1a5fa0 RCX: 00007f7e7cf7d37c [ 474.604284][T25109] RDX: 000000000000000f RSI: 00007f7e7b5e70a0 RDI: 0000000000000006 [ 474.604298][T25109] RBP: 00007f7e7b5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 474.604312][T25109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.604325][T25109] R13: 0000000000000000 R14: 00007f7e7d1a5fa0 R15: 00007ffd5ba950b8 [ 474.604445][T25109] [ 474.857706][T25113] loop2: detected capacity change from 0 to 164 [ 474.890844][T25113] tipc: Started in network mode [ 474.895783][T25113] tipc: Node identity , cluster identity 4711 [ 474.901928][T25113] tipc: Failed to obtain node identity [ 474.907398][T25113] tipc: Enabling of bearer rejected, failed to enable media [ 474.947341][T25115] tipc: Enabling of bearer rejected, failed to enable media [ 475.016764][T25129] program syz.8.8169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 475.072560][T25138] macvlan1: entered promiscuous mode [ 475.091035][T25138] ipvlan0: entered promiscuous mode [ 475.108191][T25138] ipvlan0: left promiscuous mode [ 475.121739][T25138] macvlan1: left promiscuous mode [ 475.145517][T25123] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 475.184789][T25145] FAULT_INJECTION: forcing a failure. [ 475.184789][T25145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.198303][T25145] CPU: 1 UID: 0 PID: 25145 Comm: syz.2.8173 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 475.198332][T25145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 475.198346][T25145] Call Trace: [ 475.198351][T25145] [ 475.198359][T25145] __dump_stack+0x1d/0x30 [ 475.198388][T25145] dump_stack_lvl+0xe8/0x140 [ 475.198415][T25145] dump_stack+0x15/0x1b [ 475.198455][T25145] should_fail_ex+0x265/0x280 [ 475.198484][T25145] should_fail+0xb/0x20 [ 475.198567][T25145] should_fail_usercopy+0x1a/0x20 [ 475.198605][T25145] strncpy_from_user+0x25/0x230 [ 475.198632][T25145] ? __kmalloc_cache_noprof+0x189/0x320 [ 475.198666][T25145] __se_sys_memfd_create+0x1ff/0x590 [ 475.198698][T25145] __x64_sys_memfd_create+0x31/0x40 [ 475.198759][T25145] x64_sys_call+0x122f/0x2fb0 [ 475.198783][T25145] do_syscall_64+0xd0/0x1b0 [ 475.198808][T25145] ? clear_bhb_loop+0x40/0x90 [ 475.198832][T25145] ? clear_bhb_loop+0x40/0x90 [ 475.198864][T25145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.198918][T25145] RIP: 0033:0x7ffab3c6e969 [ 475.198934][T25145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.199008][T25145] RSP: 002b:00007ffab22d6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 475.199028][T25145] RAX: ffffffffffffffda RBX: 000000000000050a RCX: 00007ffab3c6e969 [ 475.199042][T25145] RDX: 00007ffab22d6ef0 RSI: 0000000000000000 RDI: 00007ffab3cf1444 [ 475.199056][T25145] RBP: 0000200000000200 R08: 00007ffab22d6bb7 R09: 00007ffab22d6e40 [ 475.199069][T25145] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 475.199126][T25145] R13: 00007ffab22d6ef0 R14: 00007ffab22d6eb0 R15: 0000200000000080 [ 475.199145][T25145] [ 475.472973][T25154] tipc: Enabling of bearer rejected, failed to enable media [ 475.512633][T25159] loop2: detected capacity change from 0 to 128 [ 475.521041][T25159] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 475.534898][T25159] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.673250][T19456] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 475.839725][T25176] hub 8-0:1.0: USB hub found [ 475.849812][T25178] macvlan1: entered promiscuous mode [ 475.851952][T25176] hub 8-0:1.0: 8 ports detected [ 475.869834][T25178] ipvlan0: entered promiscuous mode [ 475.890589][T25178] ipvlan0: left promiscuous mode [ 475.907135][T25178] macvlan1: left promiscuous mode [ 476.146254][T25191] tipc: Enabling of bearer rejected, failed to enable media [ 476.248807][T25203] FAULT_INJECTION: forcing a failure. [ 476.248807][T25203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.261985][T25203] CPU: 0 UID: 0 PID: 25203 Comm: syz.6.8197 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 476.262040][T25203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 476.262057][T25203] Call Trace: [ 476.262066][T25203] [ 476.262076][T25203] __dump_stack+0x1d/0x30 [ 476.262104][T25203] dump_stack_lvl+0xe8/0x140 [ 476.262125][T25203] dump_stack+0x15/0x1b [ 476.262143][T25203] should_fail_ex+0x265/0x280 [ 476.262187][T25203] should_fail+0xb/0x20 [ 476.262218][T25203] should_fail_usercopy+0x1a/0x20 [ 476.262254][T25203] _copy_from_user+0x1c/0xb0 [ 476.262366][T25203] copy_from_bpfptr+0x5c/0x90 [ 476.262438][T25203] bpf_prog_load+0x74a/0x1070 [ 476.262501][T25203] ? security_bpf+0x2b/0x90 [ 476.262538][T25203] __sys_bpf+0x51d/0x790 [ 476.262598][T25203] __x64_sys_bpf+0x41/0x50 [ 476.262633][T25203] x64_sys_call+0x2478/0x2fb0 [ 476.262701][T25203] do_syscall_64+0xd0/0x1b0 [ 476.262731][T25203] ? clear_bhb_loop+0x40/0x90 [ 476.262759][T25203] ? clear_bhb_loop+0x40/0x90 [ 476.262786][T25203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.262826][T25203] RIP: 0033:0x7f78063ae969 [ 476.262845][T25203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.262869][T25203] RSP: 002b:00007f7804a17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 476.262893][T25203] RAX: ffffffffffffffda RBX: 00007f78065d5fa0 RCX: 00007f78063ae969 [ 476.262938][T25203] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 476.262954][T25203] RBP: 00007f7804a17090 R08: 0000000000000000 R09: 0000000000000000 [ 476.262969][T25203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.262985][T25203] R13: 0000000000000000 R14: 00007f78065d5fa0 R15: 00007fff9ebf9ec8 [ 476.263008][T25203] [ 476.504351][T25205] __nla_validate_parse: 96 callbacks suppressed [ 476.504371][T25205] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8191'. [ 476.639066][T25227] FAULT_INJECTION: forcing a failure. [ 476.639066][T25227] name failslab, interval 1, probability 0, space 0, times 0 [ 476.652059][T25227] CPU: 0 UID: 0 PID: 25227 Comm: syz.1.8205 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 476.652089][T25227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 476.652103][T25227] Call Trace: [ 476.652175][T25227] [ 476.652185][T25227] __dump_stack+0x1d/0x30 [ 476.652214][T25227] dump_stack_lvl+0xe8/0x140 [ 476.652239][T25227] dump_stack+0x15/0x1b [ 476.652262][T25227] should_fail_ex+0x265/0x280 [ 476.652353][T25227] should_failslab+0x8c/0xb0 [ 476.652393][T25227] __kmalloc_noprof+0xa5/0x3e0 [ 476.652415][T25227] ? alloc_pipe_info+0x1c9/0x350 [ 476.652447][T25227] alloc_pipe_info+0x1c9/0x350 [ 476.652551][T25227] splice_direct_to_actor+0x592/0x680 [ 476.652659][T25227] ? file_has_perm+0x357/0x370 [ 476.652680][T25227] ? __pfx_direct_splice_actor+0x10/0x10 [ 476.652717][T25227] do_splice_direct+0xda/0x150 [ 476.652749][T25227] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 476.652790][T25227] do_sendfile+0x380/0x650 [ 476.652877][T25227] __x64_sys_sendfile64+0x105/0x150 [ 476.652900][T25227] x64_sys_call+0xb39/0x2fb0 [ 476.652928][T25227] do_syscall_64+0xd0/0x1b0 [ 476.652954][T25227] ? clear_bhb_loop+0x40/0x90 [ 476.652995][T25227] ? clear_bhb_loop+0x40/0x90 [ 476.653023][T25227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.653061][T25227] RIP: 0033:0x7f7e7cf7e969 [ 476.653107][T25227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.653130][T25227] RSP: 002b:00007f7e7b5e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 476.653154][T25227] RAX: ffffffffffffffda RBX: 00007f7e7d1a5fa0 RCX: 00007f7e7cf7e969 [ 476.653171][T25227] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 476.653235][T25227] RBP: 00007f7e7b5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 476.653248][T25227] R10: 4000000000000104 R11: 0000000000000246 R12: 0000000000000001 [ 476.653260][T25227] R13: 0000000000000000 R14: 00007f7e7d1a5fa0 R15: 00007ffd5ba950b8 [ 476.653283][T25227] [ 476.872260][T25229] tipc: Enabling of bearer rejected, failed to enable media [ 476.914722][T25211] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 477.088393][T25251] loop2: detected capacity change from 0 to 8192 [ 477.641429][T25274] loop2: detected capacity change from 0 to 128 [ 477.661142][T25275] tipc: Enabling of bearer rejected, failed to enable media [ 477.689889][T25274] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 477.818532][T25274] ext4 filesystem being mounted at /423/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.989243][T25279] hub 8-0:1.0: USB hub found [ 477.999293][T25279] hub 8-0:1.0: 8 ports detected [ 478.009911][T25274] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 478.031167][T19456] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 478.085518][T25293] syzkaller0: entered promiscuous mode [ 478.091096][T25293] syzkaller0: entered allmulticast mode [ 478.100325][T25293] FAULT_INJECTION: forcing a failure. [ 478.100325][T25293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.113554][T25293] CPU: 1 UID: 0 PID: 25293 Comm: syz.7.8231 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 478.113591][T25293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 478.113607][T25293] Call Trace: [ 478.113615][T25293] [ 478.113624][T25293] __dump_stack+0x1d/0x30 [ 478.113671][T25293] dump_stack_lvl+0xe8/0x140 [ 478.113692][T25293] dump_stack+0x15/0x1b [ 478.113708][T25293] should_fail_ex+0x265/0x280 [ 478.113777][T25293] should_fail+0xb/0x20 [ 478.113808][T25293] should_fail_usercopy+0x1a/0x20 [ 478.113906][T25293] _copy_to_user+0x20/0xa0 [ 478.113949][T25293] simple_read_from_buffer+0xb5/0x130 [ 478.114030][T25293] proc_fail_nth_read+0x100/0x140 [ 478.114062][T25293] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 478.114094][T25293] vfs_read+0x1a0/0x6f0 [ 478.114142][T25293] ? save_fpregs_to_fpstate+0x100/0x160 [ 478.114202][T25293] ? __rcu_read_unlock+0x4f/0x70 [ 478.114243][T25293] ? __fget_files+0x184/0x1c0 [ 478.114279][T25293] ? _raw_spin_unlock+0x26/0x50 [ 478.114318][T25293] ksys_read+0xda/0x1a0 [ 478.114361][T25293] __x64_sys_read+0x40/0x50 [ 478.114390][T25293] x64_sys_call+0x2d77/0x2fb0 [ 478.114452][T25293] do_syscall_64+0xd0/0x1b0 [ 478.114484][T25293] ? clear_bhb_loop+0x40/0x90 [ 478.114509][T25293] ? clear_bhb_loop+0x40/0x90 [ 478.114540][T25293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.114567][T25293] RIP: 0033:0x7fc9bfccd37c [ 478.114587][T25293] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 478.114609][T25293] RSP: 002b:00007fc9be337030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 478.114716][T25293] RAX: ffffffffffffffda RBX: 00007fc9bfef5fa0 RCX: 00007fc9bfccd37c [ 478.114734][T25293] RDX: 000000000000000f RSI: 00007fc9be3370a0 RDI: 0000000000000009 [ 478.114751][T25293] RBP: 00007fc9be337090 R08: 0000000000000000 R09: 0000000000000000 [ 478.114767][T25293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.114797][T25293] R13: 0000000000000000 R14: 00007fc9bfef5fa0 R15: 00007ffc7dc9f208 [ 478.114823][T25293] [ 478.674038][T25320] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 478.823792][T25343] SELinux: syz.6.8252 (25343) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 478.857861][T25343] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 478.857883][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 478.857899][ T29] audit: type=1400 audit(1748334567.413:40457): avc: denied { load_policy } for pid=25342 comm="syz.6.8252" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 478.897059][T25343] SELinux: failed to load policy [ 478.902607][T25339] hub 8-0:1.0: USB hub found [ 478.907409][T25339] hub 8-0:1.0: 8 ports detected [ 478.913784][T25343] siw: device registration error -23 [ 479.202297][T25362] loop2: detected capacity change from 0 to 2048 [ 479.208935][ T29] audit: type=1400 audit(1748334567.763:40458): avc: denied { read } for pid=25363 comm="syz.1.8262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 479.242632][ T29] audit: type=1326 audit(1748334567.803:40459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25359 comm="syz.8.8260" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdfc83ae969 code=0x0 [ 479.281234][T25362] Alternate GPT is invalid, using primary GPT. [ 479.287698][T25362] loop2: p2 p3 p7 [ 479.301734][T25369] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8257'. [ 479.396303][T25378] loop2: detected capacity change from 0 to 512 [ 479.444274][T25378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.474335][T25378] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.482972][T25376] hub 8-0:1.0: USB hub found [ 479.489558][T25376] hub 8-0:1.0: 8 ports detected [ 479.620055][ T29] audit: type=1326 audit(1748334568.173:40460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25377 comm="syz.2.8266" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffab3c6e969 code=0x0 [ 479.724226][T25398] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8275'. [ 479.849409][T25403] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 480.238574][T19456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.250789][T25434] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 480.365057][ T29] audit: type=1326 audit(1748334568.923:40461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25448 comm="syz.7.8294" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9bfcce969 code=0x0 [ 480.689947][T25469] macvlan1: entered promiscuous mode [ 480.697183][T25469] macvlan1: left promiscuous mode [ 480.948103][ T29] audit: type=1400 audit(1748334569.493:40462): avc: denied { mount } for pid=25486 comm="syz.8.8310" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 480.970494][ T29] audit: type=1400 audit(1748334569.493:40463): avc: denied { read write } for pid=25486 comm="syz.8.8310" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 480.994938][ T29] audit: type=1400 audit(1748334569.493:40464): avc: denied { open } for pid=25486 comm="syz.8.8310" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 481.020211][ T29] audit: type=1400 audit(1748334569.503:40465): avc: denied { unmount } for pid=20237 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 481.085165][T25494] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8314'. [ 481.124236][T25494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.173731][T25494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.184867][T25494] bond0 (unregistering): Released all slaves [ 481.196613][T25497] tipc: Enabling of bearer rejected, failed to enable media [ 481.267904][ T29] audit: type=1326 audit(1748334569.823:40466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25505 comm="syz.1.8317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7cf7e969 code=0x7ffc0000 [ 481.297528][T25502] netlink: 'syz.7.8315': attribute type 10 has an invalid length. [ 481.305504][T25502] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8315'. [ 481.335061][T25502] team0: Port device geneve1 added [ 481.404791][T25524] netlink: 'syz.7.8325': attribute type 12 has an invalid length. [ 481.515420][T25531] FAULT_INJECTION: forcing a failure. [ 481.515420][T25531] name failslab, interval 1, probability 0, space 0, times 0 [ 481.528148][T25531] CPU: 1 UID: 0 PID: 25531 Comm: syz.1.8328 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 481.528262][T25531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 481.528354][T25531] Call Trace: [ 481.528361][T25531] [ 481.528369][T25531] __dump_stack+0x1d/0x30 [ 481.528393][T25531] dump_stack_lvl+0xe8/0x140 [ 481.528420][T25531] dump_stack+0x15/0x1b [ 481.528443][T25531] should_fail_ex+0x265/0x280 [ 481.528494][T25531] should_failslab+0x8c/0xb0 [ 481.528531][T25531] kmem_cache_alloc_node_noprof+0x57/0x320 [ 481.528596][T25531] ? __alloc_skb+0x101/0x320 [ 481.528639][T25531] __alloc_skb+0x101/0x320 [ 481.528676][T25531] ? audit_log_start+0x365/0x6c0 [ 481.528799][T25531] audit_log_start+0x380/0x6c0 [ 481.528841][T25531] audit_seccomp+0x48/0x100 [ 481.528938][T25531] ? __seccomp_filter+0x68c/0x10d0 [ 481.528968][T25531] __seccomp_filter+0x69d/0x10d0 [ 481.529022][T25531] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 481.529118][T25531] ? vfs_write+0x75e/0x8e0 [ 481.529155][T25531] ? __rcu_read_unlock+0x4f/0x70 [ 481.529183][T25531] ? __fget_files+0x184/0x1c0 [ 481.529238][T25531] __secure_computing+0x82/0x150 [ 481.529265][T25531] syscall_trace_enter+0xcf/0x1e0 [ 481.529290][T25531] do_syscall_64+0xaa/0x1b0 [ 481.529389][T25531] ? clear_bhb_loop+0x40/0x90 [ 481.529415][T25531] ? clear_bhb_loop+0x40/0x90 [ 481.529437][T25531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.529461][T25531] RIP: 0033:0x7f7e7cf7e969 [ 481.529480][T25531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.529536][T25531] RSP: 002b:00007f7e7b5e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f4 [ 481.529562][T25531] RAX: ffffffffffffffda RBX: 00007f7e7d1a5fa0 RCX: 00007f7e7cf7e969 [ 481.529578][T25531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 481.529591][T25531] RBP: 00007f7e7b5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 481.529604][T25531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.529616][T25531] R13: 0000000000000000 R14: 00007f7e7d1a5fa0 R15: 00007ffd5ba950b8 [ 481.529641][T25531] [ 481.749617][T25525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.770098][T25525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.793403][T25525] __nla_validate_parse: 1 callbacks suppressed [ 481.793500][T25525] netlink: 2552 bytes leftover after parsing attributes in process `syz.8.8322'. [ 482.119024][T25509] tipc: Started in network mode [ 482.124023][T25509] tipc: Node identity ac14140f, cluster identity 4711 [ 482.149590][T25509] tipc: New replicast peer: 255.255.255.255 [ 482.156290][T25509] tipc: Enabled bearer , priority 10 [ 482.185344][T25545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8332'. [ 482.194521][T25545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8332'. [ 482.204847][T25545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8332'. [ 482.223309][T25545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8332'. [ 482.252929][T25545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8332'. [ 482.272928][T25545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8332'. [ 482.282099][T25545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8332'. [ 482.311992][T25545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8332'. [ 482.321020][T25545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8332'. [ 482.584435][T25568] netlink: 'syz.6.8339': attribute type 10 has an invalid length. [ 482.598362][T25568] team0: Port device geneve1 added [ 482.707580][T25578] FAULT_INJECTION: forcing a failure. [ 482.707580][T25578] name failslab, interval 1, probability 0, space 0, times 0 [ 482.720639][T25578] CPU: 0 UID: 0 PID: 25578 Comm: syz.6.8344 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 482.720687][T25578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 482.720704][T25578] Call Trace: [ 482.720711][T25578] [ 482.720721][T25578] __dump_stack+0x1d/0x30 [ 482.720748][T25578] dump_stack_lvl+0xe8/0x140 [ 482.720774][T25578] dump_stack+0x15/0x1b [ 482.720865][T25578] should_fail_ex+0x265/0x280 [ 482.720896][T25578] should_failslab+0x8c/0xb0 [ 482.720928][T25578] kmem_cache_alloc_node_noprof+0x57/0x320 [ 482.720954][T25578] ? __alloc_skb+0x101/0x320 [ 482.721071][T25578] __alloc_skb+0x101/0x320 [ 482.721134][T25578] ? audit_log_start+0x365/0x6c0 [ 482.721173][T25578] audit_log_start+0x380/0x6c0 [ 482.721271][T25578] audit_seccomp+0x48/0x100 [ 482.721302][T25578] ? __seccomp_filter+0x68c/0x10d0 [ 482.721410][T25578] __seccomp_filter+0x69d/0x10d0 [ 482.721440][T25578] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 482.721478][T25578] ? vfs_write+0x75e/0x8e0 [ 482.721537][T25578] __secure_computing+0x82/0x150 [ 482.721587][T25578] syscall_trace_enter+0xcf/0x1e0 [ 482.721622][T25578] do_syscall_64+0xaa/0x1b0 [ 482.721651][T25578] ? clear_bhb_loop+0x40/0x90 [ 482.721680][T25578] ? clear_bhb_loop+0x40/0x90 [ 482.721765][T25578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.721838][T25578] RIP: 0033:0x7f78063ae969 [ 482.721856][T25578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.721879][T25578] RSP: 002b:00007f7804a17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 482.721902][T25578] RAX: ffffffffffffffda RBX: 00007f78065d5fa0 RCX: 00007f78063ae969 [ 482.721917][T25578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 482.721972][T25578] RBP: 00007f7804a17090 R08: 0000000000000000 R09: 0000000000000000 [ 482.721988][T25578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.722004][T25578] R13: 0000000000000000 R14: 00007f78065d5fa0 R15: 00007fff9ebf9ec8 [ 482.722100][T25578] [ 483.211756][ T2971] tipc: Node number set to 2886997007 [ 483.326084][T25624] FAULT_INJECTION: forcing a failure. [ 483.326084][T25624] name failslab, interval 1, probability 0, space 0, times 0 [ 483.339007][T25624] CPU: 1 UID: 0 PID: 25624 Comm: syz.6.8363 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 483.339046][T25624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 483.339063][T25624] Call Trace: [ 483.339073][T25624] [ 483.339084][T25624] __dump_stack+0x1d/0x30 [ 483.339170][T25624] dump_stack_lvl+0xe8/0x140 [ 483.339192][T25624] dump_stack+0x15/0x1b [ 483.339210][T25624] should_fail_ex+0x265/0x280 [ 483.339256][T25624] should_failslab+0x8c/0xb0 [ 483.339297][T25624] __kmalloc_noprof+0xa5/0x3e0 [ 483.339423][T25624] ? kernfs_fop_write_iter+0xe1/0x2d0 [ 483.339448][T25624] ? avc_policy_seqno+0x15/0x30 [ 483.339475][T25624] kernfs_fop_write_iter+0xe1/0x2d0 [ 483.339535][T25624] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 483.339584][T25624] vfs_write+0x4a0/0x8e0 [ 483.339630][T25624] ksys_write+0xda/0x1a0 [ 483.339670][T25624] __x64_sys_write+0x40/0x50 [ 483.339781][T25624] x64_sys_call+0x2cdd/0x2fb0 [ 483.339872][T25624] do_syscall_64+0xd0/0x1b0 [ 483.339943][T25624] ? clear_bhb_loop+0x40/0x90 [ 483.339967][T25624] ? clear_bhb_loop+0x40/0x90 [ 483.340019][T25624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.340046][T25624] RIP: 0033:0x7f78063ae969 [ 483.340066][T25624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.340091][T25624] RSP: 002b:00007f7804a17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 483.340116][T25624] RAX: ffffffffffffffda RBX: 00007f78065d5fa0 RCX: 00007f78063ae969 [ 483.340199][T25624] RDX: 0000000000000012 RSI: 0000200000000500 RDI: 0000000000000006 [ 483.340213][T25624] RBP: 00007f7804a17090 R08: 0000000000000000 R09: 0000000000000000 [ 483.340230][T25624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.340244][T25624] R13: 0000000000000000 R14: 00007f78065d5fa0 R15: 00007fff9ebf9ec8 [ 483.340263][T25624] [ 483.607176][T25631] loop2: detected capacity change from 0 to 128 [ 483.625332][T25631] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 483.638770][T25631] ext4 filesystem being mounted at /444/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.760912][T19456] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 483.864239][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 483.864257][ T29] audit: type=1400 audit(1748334572.423:40618): avc: denied { create } for pid=25642 comm="syz.2.8370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 483.864514][ T29] audit: type=1400 audit(1748334572.423:40619): avc: denied { setopt } for pid=25642 comm="syz.2.8370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 483.865547][ T29] audit: type=1400 audit(1748334572.423:40620): avc: denied { create } for pid=25642 comm="syz.2.8370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 484.129889][T25656] xt_CT: No such helper "syz0" [ 484.154801][T25659] hub 8-0:1.0: USB hub found [ 484.159688][T25659] hub 8-0:1.0: 8 ports detected [ 484.304938][ T29] audit: type=1326 audit(1748334572.863:40621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25664 comm="syz.1.8378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7cf7e969 code=0x7ffc0000 [ 484.330466][ T29] audit: type=1326 audit(1748334572.863:40622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25664 comm="syz.1.8378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7cf7e969 code=0x7ffc0000 [ 484.354235][ T29] audit: type=1326 audit(1748334572.863:40623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25664 comm="syz.1.8378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f7e7cf7e969 code=0x7ffc0000 [ 484.377919][ T29] audit: type=1326 audit(1748334572.863:40624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25664 comm="syz.1.8378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7cf7e969 code=0x7ffc0000 [ 484.401558][ T29] audit: type=1326 audit(1748334572.863:40625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25664 comm="syz.1.8378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f7e7cf7e969 code=0x7ffc0000 [ 484.427622][ T29] audit: type=1326 audit(1748334572.983:40626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25664 comm="syz.1.8378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7cf7e969 code=0x7ffc0000 [ 484.464189][ T29] audit: type=1326 audit(1748334572.983:40627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25664 comm="syz.1.8378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7cf7e969 code=0x7ffc0000 [ 484.667807][T25672] netlink: 'syz.2.8382': attribute type 12 has an invalid length. [ 485.149482][T25705] loop2: detected capacity change from 0 to 128 [ 485.172807][T25705] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 485.195400][T25705] ext4 filesystem being mounted at /450/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 485.357757][T19456] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 485.464281][T25733] tipc: Enabling of bearer rejected, failed to enable media [ 485.662542][T25757] SELinux: syz.1.8417 (25757) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 485.676824][T25757] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 485.687633][T25757] SELinux: failed to load policy [ 485.694269][T25757] siw: device registration error -23 [ 485.946817][T25771] tipc: Enabling of bearer rejected, failed to enable media [ 486.245535][T25797] tipc: Enabling of bearer rejected, failed to enable media [ 486.726122][T25836] hub 8-0:1.0: USB hub found [ 486.731039][T25836] hub 8-0:1.0: 8 ports detected [ 486.892220][T25854] program syz.7.8458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 486.987681][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.001999][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.019299][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.029459][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.069262][T25863] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20004 [ 487.076979][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.084036][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.091170][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.098382][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.105922][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.112999][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.119918][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.135388][T25861] loop2: detected capacity change from 0 to 1024 [ 487.173084][T25861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.183687][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.185359][T25861] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.204052][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.211164][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.222123][T25861] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 393: padding at end of block bitmap is not set [ 487.236532][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.236573][T25861] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 487.255996][T25861] EXT4-fs (loop2): This should not happen!! Data will be lost [ 487.255996][T25861] [ 487.256124][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.332761][T19456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.352903][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.376272][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.392759][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.408477][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.421176][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.439597][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.463153][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.484147][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.491399][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.498546][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.507167][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.514628][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.523650][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.531833][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.538939][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.551872][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.567053][T25865] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 487.657204][T25877] SELinux: syz.6.8466 (25877) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 487.672597][T25877] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 487.691100][T25877] SELinux: failed to load policy [ 487.698139][T25877] siw: device registration error -23 [ 487.974031][T25906] hub 8-0:1.0: USB hub found [ 487.978905][T25906] hub 8-0:1.0: 8 ports detected [ 488.009558][T25909] SELinux: syz.7.8479 (25909) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 488.024074][T25909] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 488.034642][T25909] SELinux: failed to load policy [ 488.041263][T25909] siw: device registration error -23 [ 489.084542][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 489.084562][ T29] audit: type=1400 audit(1748334577.643:40688): avc: denied { mount } for pid=25956 comm="syz.1.8498" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 489.183155][T25961] __nla_validate_parse: 61 callbacks suppressed [ 489.183202][T25961] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8501'. [ 489.209757][T25961] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8501'. [ 489.211116][ T29] audit: type=1400 audit(1748334577.673:40689): avc: denied { read } for pid=25956 comm="syz.1.8498" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 489.242098][ T29] audit: type=1400 audit(1748334577.673:40690): avc: denied { open } for pid=25956 comm="syz.1.8498" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 489.265916][ T29] audit: type=1400 audit(1748334577.673:40691): avc: denied { ioctl } for pid=25956 comm="syz.1.8498" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 489.291459][ T29] audit: type=1400 audit(1748334577.673:40692): avc: denied { read } for pid=25956 comm="syz.1.8498" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 489.314817][ T29] audit: type=1400 audit(1748334577.673:40693): avc: denied { open } for pid=25956 comm="syz.1.8498" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 489.338498][ T29] audit: type=1400 audit(1748334577.673:40694): avc: denied { ioctl } for pid=25956 comm="syz.1.8498" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 489.344783][T25966] loop2: detected capacity change from 0 to 2048 [ 489.363624][ T29] audit: type=1326 audit(1748334577.703:40695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25954 comm="syz.7.8499" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9bfcce969 code=0x0 [ 489.393008][ T29] audit: type=1400 audit(1748334577.763:40696): avc: denied { tracepoint } for pid=25959 comm="syz.2.8500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 489.463836][ T29] audit: type=1326 audit(1748334577.983:40697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25967 comm="syz.6.8502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 489.492525][T25966] loop2: p1 < > p4 [ 489.497114][T25966] loop2: p4 size 8388608 extends beyond EOD, truncated [ 489.923944][T25993] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8512'. [ 489.933042][T25993] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8512'. [ 489.943196][T25993] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8512'. [ 489.952334][T25993] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8512'. [ 489.961450][T25993] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8512'. [ 489.970972][T25993] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8512'. [ 489.980322][T25993] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8512'. [ 489.990084][T25993] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8512'. [ 490.094921][T26004] tipc: Enabling of bearer rejected, failed to enable media [ 490.381250][T26030] tipc: Enabling of bearer rejected, failed to enable media [ 490.928107][T26072] hub 8-0:1.0: USB hub found [ 490.942439][T26072] hub 8-0:1.0: 8 ports detected [ 491.004979][T26078] SELinux: syz.6.8549 (26078) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 491.026215][T26078] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 491.036837][T26078] SELinux: failed to load policy [ 491.046130][T26078] siw: device registration error -23 [ 491.105862][T26086] tipc: Enabling of bearer rejected, failed to enable media [ 491.250403][T26098] hub 8-0:1.0: USB hub found [ 491.258257][T26098] hub 8-0:1.0: 8 ports detected [ 491.443284][T26111] FAULT_INJECTION: forcing a failure. [ 491.443284][T26111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.456451][T26111] CPU: 0 UID: 0 PID: 26111 Comm: syz.2.8564 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 491.456486][T26111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 491.456502][T26111] Call Trace: [ 491.456510][T26111] [ 491.456519][T26111] __dump_stack+0x1d/0x30 [ 491.456547][T26111] dump_stack_lvl+0xe8/0x140 [ 491.456567][T26111] dump_stack+0x15/0x1b [ 491.456643][T26111] should_fail_ex+0x265/0x280 [ 491.456748][T26111] should_fail+0xb/0x20 [ 491.456778][T26111] should_fail_usercopy+0x1a/0x20 [ 491.456827][T26111] _copy_to_user+0x20/0xa0 [ 491.456871][T26111] simple_read_from_buffer+0xb5/0x130 [ 491.456904][T26111] proc_fail_nth_read+0x100/0x140 [ 491.456958][T26111] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 491.456997][T26111] vfs_read+0x1a0/0x6f0 [ 491.457030][T26111] ? __rcu_read_unlock+0x4f/0x70 [ 491.457134][T26111] ? __rcu_read_unlock+0x4f/0x70 [ 491.457155][T26111] ? __fget_files+0x184/0x1c0 [ 491.457187][T26111] ksys_read+0xda/0x1a0 [ 491.457230][T26111] __x64_sys_read+0x40/0x50 [ 491.457267][T26111] x64_sys_call+0x2d77/0x2fb0 [ 491.457296][T26111] do_syscall_64+0xd0/0x1b0 [ 491.457326][T26111] ? clear_bhb_loop+0x40/0x90 [ 491.457354][T26111] ? clear_bhb_loop+0x40/0x90 [ 491.457408][T26111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.457476][T26111] RIP: 0033:0x7ffab3c6d37c [ 491.457495][T26111] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 491.457518][T26111] RSP: 002b:00007ffab22d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 491.457543][T26111] RAX: ffffffffffffffda RBX: 00007ffab3e95fa0 RCX: 00007ffab3c6d37c [ 491.457559][T26111] RDX: 000000000000000f RSI: 00007ffab22d70a0 RDI: 0000000000000006 [ 491.457593][T26111] RBP: 00007ffab22d7090 R08: 0000000000000000 R09: 0000000000000000 [ 491.457680][T26111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.457696][T26111] R13: 0000000000000000 R14: 00007ffab3e95fa0 R15: 00007ffea4c6e9d8 [ 491.457722][T26111] [ 491.809700][T26127] loop2: detected capacity change from 0 to 128 [ 491.818651][T26127] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 491.831117][T26127] ext4 filesystem being mounted at /483/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.924653][T19456] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 492.152797][T26146] loop2: detected capacity change from 0 to 1024 [ 492.162055][T26146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.174323][T26146] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.227720][T19456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.307352][T26161] netlink: 'syz.2.8580': attribute type 1 has an invalid length. [ 492.770798][T26182] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 492.802082][T26190] tipc: Enabling of bearer rejected, failed to enable media [ 492.833264][T26192] hub 8-0:1.0: USB hub found [ 492.838024][T26192] hub 8-0:1.0: 8 ports detected [ 493.776321][T26264] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 493.938922][T26284] loop2: detected capacity change from 0 to 8192 [ 494.093189][ T29] kauditd_printk_skb: 633 callbacks suppressed [ 494.093207][ T29] audit: type=1326 audit(1748334582.653:41331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26295 comm="syz.7.8644" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9bfcce969 code=0x0 [ 494.152070][ T29] audit: type=1400 audit(1748334582.713:41332): avc: denied { watch watch_reads } for pid=26299 comm="syz.6.8645" path="/213" dev="tmpfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 494.346636][ T29] audit: type=1400 audit(1748334582.903:41333): avc: denied { create } for pid=26307 comm="syz.6.8647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 494.390611][ T29] audit: type=1400 audit(1748334582.933:41334): avc: denied { write } for pid=26307 comm="syz.6.8647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 494.461544][ T29] audit: type=1400 audit(1748334582.983:41335): avc: denied { create } for pid=26307 comm="syz.6.8647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 494.461629][ T29] audit: type=1400 audit(1748334582.983:41336): avc: denied { setopt } for pid=26307 comm="syz.6.8647" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 494.461660][ T29] audit: type=1400 audit(1748334582.983:41337): avc: denied { write } for pid=26307 comm="syz.6.8647" name="mcfilter" dev="proc" ino=4026532475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 494.660558][ T29] audit: type=1400 audit(1748334583.213:41338): avc: denied { create } for pid=26311 comm="syz.6.8648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 494.702338][T26314] hub 8-0:1.0: USB hub found [ 494.712532][T26314] hub 8-0:1.0: 8 ports detected [ 494.713433][ T29] audit: type=1400 audit(1748334583.213:41339): avc: denied { unmount } for pid=19456 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 494.737581][ T29] audit: type=1400 audit(1748334583.213:41340): avc: denied { write } for pid=26311 comm="syz.6.8648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 494.868262][T26322] loop2: detected capacity change from 0 to 512 [ 494.882215][T26325] SELinux: syz.1.8655 (26325) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 494.897026][T26325] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 494.916508][T26325] SELinux: failed to load policy [ 494.927813][T26325] siw: device registration error -23 [ 494.943330][T26322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.993547][T26322] ext4 filesystem being mounted at /498/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.351049][T26357] hub 8-0:1.0: USB hub found [ 495.364474][T26357] hub 8-0:1.0: 8 ports detected [ 495.693368][T19456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.768598][T26375] __nla_validate_parse: 76 callbacks suppressed [ 495.768618][T26375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8674'. [ 495.795453][T26375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8674'. [ 495.826161][T26375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8674'. [ 495.849155][T26375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8674'. [ 495.858262][T26375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8674'. [ 495.869029][T26375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8674'. [ 495.878449][T26375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8674'. [ 495.904844][T26375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8674'. [ 495.915941][T26375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8674'. [ 495.925225][T26375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8674'. [ 495.991309][T26391] SELinux: syz.2.8681 (26391) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 496.012545][T26391] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 496.024595][T26391] SELinux: failed to load policy [ 496.211614][T26402] hub 8-0:1.0: USB hub found [ 496.216407][T26402] hub 8-0:1.0: 8 ports detected [ 496.257719][T26404] tipc: Enabling of bearer rejected, failed to enable media [ 496.546998][T26436] tipc: Enabling of bearer rejected, failed to enable media [ 496.681468][T26433] lo speed is unknown, defaulting to 1000 [ 496.764256][T26449] hub 8-0:1.0: USB hub found [ 496.769007][T26449] hub 8-0:1.0: 8 ports detected [ 496.820189][T26431] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 496.928032][T26433] chnl_net:caif_netlink_parms(): no params data found [ 497.064832][T26433] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.071990][T26433] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.081008][T26433] bridge_slave_0: entered allmulticast mode [ 497.090550][T26433] bridge_slave_0: entered promiscuous mode [ 497.098693][T26433] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.105827][T26433] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.113810][T26433] bridge_slave_1: entered allmulticast mode [ 497.120425][T26433] bridge_slave_1: entered promiscuous mode [ 497.159469][T26475] SELinux: syz.7.8712 (26475) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 497.159486][T26433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.182627][T26473] tipc: Enabling of bearer rejected, failed to enable media [ 497.192927][T26433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.223998][T26475] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 497.236224][T26475] SELinux: failed to load policy [ 497.243193][T26475] siw: device registration error -23 [ 497.337281][T26433] team0: Port device team_slave_0 added [ 497.360322][T26433] team0: Port device team_slave_1 added [ 497.366073][T26480] loop2: detected capacity change from 0 to 1024 [ 497.383485][T26480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.396062][T26480] ext4 filesystem being mounted at /509/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.413192][T26480] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 393: padding at end of block bitmap is not set [ 497.427934][T26480] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 497.440634][T26480] EXT4-fs (loop2): This should not happen!! Data will be lost [ 497.440634][T26480] [ 497.455305][T26433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.462437][T26433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.488597][T26433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.558184][T19456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.574067][T26433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.581052][T26433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.607151][T26433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.654973][T26433] hsr_slave_0: entered promiscuous mode [ 497.661226][T26433] hsr_slave_1: entered promiscuous mode [ 497.667333][T26433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 497.675083][T26433] Cannot create hsr debugfs directory [ 497.858598][T26433] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 497.869956][T26433] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 497.884615][T26433] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 497.896702][T26433] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 497.986200][T26433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.014733][T26433] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.041257][T19372] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.048376][T19372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.088882][T19372] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.096089][T19372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.135464][T26433] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 498.145978][T26433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 498.296566][T26433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.528212][T26562] hub 8-0:1.0: USB hub found [ 498.536258][T26562] hub 8-0:1.0: 8 ports detected [ 498.555478][T26433] veth0_vlan: entered promiscuous mode [ 498.577667][T26433] veth1_vlan: entered promiscuous mode [ 498.614731][T26433] veth0_macvtap: entered promiscuous mode [ 498.633515][T26433] veth1_macvtap: entered promiscuous mode [ 498.660404][T26433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.684092][T26433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.706897][T26433] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.715692][T26433] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.724517][T26433] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.733316][T26433] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.918565][T26594] SELinux: syz.2.8751 (26594) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 498.962380][T26594] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 498.986815][T26594] SELinux: failed to load policy [ 499.103177][ T29] kauditd_printk_skb: 388 callbacks suppressed [ 499.103239][ T29] audit: type=1400 audit(1748334587.663:41729): avc: denied { create } for pid=26601 comm="syz.7.8756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 499.177919][ T29] audit: type=1400 audit(1748334587.723:41730): avc: denied { watch watch_reads } for pid=26605 comm="syz.2.8757" path="/523" dev="tmpfs" ino=2865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 499.260116][ T29] audit: type=1326 audit(1748334587.783:41731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26614 comm="syz.1.8762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7cf7e969 code=0x7ffc0000 [ 499.283824][ T29] audit: type=1326 audit(1748334587.783:41732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26614 comm="syz.1.8762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7cf7e969 code=0x7ffc0000 [ 499.307633][ T29] audit: type=1326 audit(1748334587.783:41733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26614 comm="syz.1.8762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f7e7cf7e969 code=0x7ffc0000 [ 499.331412][ T29] audit: type=1326 audit(1748334587.793:41734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26614 comm="syz.1.8762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7cf7e969 code=0x7ffc0000 [ 499.441286][ T29] audit: type=1400 audit(1748334587.983:41735): avc: denied { create } for pid=26618 comm="syz.1.8773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 499.461188][ T29] audit: type=1400 audit(1748334587.983:41736): avc: denied { write } for pid=26618 comm="syz.1.8773" name="mcfilter" dev="proc" ino=4026533039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 499.502966][T26623] loop2: detected capacity change from 0 to 8192 [ 499.511375][ T29] audit: type=1400 audit(1748334588.063:41737): avc: denied { mount } for pid=26620 comm="syz.2.8764" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 499.515281][ T29] audit: type=1400 audit(1748334588.073:41738): avc: denied { create } for pid=26629 comm="syz.7.8767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 499.577247][T26632] SELinux: syz.9.8768 (26632) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 499.577473][T26632] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 499.577699][T26632] SELinux: failed to load policy [ 499.579069][T26632] siw: device registration error -23 [ 499.759751][T26637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.770439][T26637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.863672][T26644] hub 8-0:1.0: USB hub found [ 499.868378][T26644] hub 8-0:1.0: 8 ports detected [ 501.246159][T26714] loop2: detected capacity change from 0 to 8192 [ 501.263951][T26725] hub 8-0:1.0: USB hub found [ 501.273431][T26725] hub 8-0:1.0: 8 ports detected [ 502.006713][T26759] hub 8-0:1.0: USB hub found [ 502.045709][T26759] hub 8-0:1.0: 8 ports detected [ 502.431937][T26782] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 502.584740][T26790] SELinux: syz.9.8837 (26790) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 502.599725][T26790] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 502.616257][T26790] SELinux: failed to load policy [ 502.622450][T26790] siw: device registration error -23 [ 502.714107][T26803] __nla_validate_parse: 51 callbacks suppressed [ 502.714128][T26803] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8841'. [ 502.750792][T26803] netlink: 'syz.6.8841': attribute type 1 has an invalid length. [ 503.050651][T26820] SELinux: syz.9.8850 (26820) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 503.050897][T26820] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 503.051168][T26820] SELinux: failed to load policy [ 503.052347][T26820] siw: device registration error -23 [ 503.222371][T26814] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 503.362460][T26841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8858'. [ 503.384668][T26841] netlink: 'syz.1.8858': attribute type 1 has an invalid length. [ 504.136895][T26871] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 504.225656][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 504.225677][ T29] audit: type=1326 audit(1748334592.783:41822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26883 comm="syz.6.8872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 504.257502][ T29] audit: type=1326 audit(1748334592.783:41823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26883 comm="syz.6.8872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 504.283300][ T29] audit: type=1326 audit(1748334592.813:41824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26883 comm="syz.6.8872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 504.307058][ T29] audit: type=1326 audit(1748334592.813:41825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26883 comm="syz.6.8872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 504.330987][ T29] audit: type=1326 audit(1748334592.813:41826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26883 comm="syz.6.8872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 504.362383][ T29] audit: type=1326 audit(1748334592.843:41827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26883 comm="syz.6.8872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 504.386210][ T29] audit: type=1326 audit(1748334592.843:41828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26883 comm="syz.6.8872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 504.409878][ T29] audit: type=1326 audit(1748334592.843:41829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26883 comm="syz.6.8872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 504.433803][ T29] audit: type=1326 audit(1748334592.913:41830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26883 comm="syz.6.8872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 504.457422][ T29] audit: type=1326 audit(1748334592.913:41831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26883 comm="syz.6.8872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 504.762921][T26902] hub 8-0:1.0: USB hub found [ 504.767671][T26902] hub 8-0:1.0: 8 ports detected [ 504.866560][T26906] SELinux: syz.2.8882 (26906) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 504.881106][T26906] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 504.891532][T26906] SELinux: failed to load policy [ 505.016834][T26913] loop2: detected capacity change from 0 to 2048 [ 505.062289][T26913] loop2: p1 < > p4 [ 505.068757][T26913] loop2: p4 size 8388608 extends beyond EOD, truncated [ 505.134211][T26908] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 505.822851][T26941] loop2: detected capacity change from 0 to 512 [ 505.872432][T26946] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8898'. [ 505.881544][T26946] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8898'. [ 505.903269][T26946] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8898'. [ 505.919544][T26941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.952026][T26941] ext4 filesystem being mounted at /542/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.963863][T26946] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8898'. [ 506.007841][T26946] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8898'. [ 506.017325][T26946] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8898'. [ 506.026401][T26946] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8898'. [ 506.035821][T26946] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8898'. [ 506.128556][T26944] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 506.686147][T19456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.760451][T26994] SELinux: syz.6.8917 (26994) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 506.790182][T26994] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 506.811022][T26994] SELinux: failed to load policy [ 506.826053][T26994] siw: device registration error -23 [ 507.074509][T27008] netlink: 'syz.7.8920': attribute type 1 has an invalid length. [ 507.113913][T27001] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 507.586366][T27031] SELinux: syz.6.8929 (27031) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 507.603622][T27031] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 507.615491][T27031] SELinux: failed to load policy [ 507.621814][T27031] siw: device registration error -23 [ 507.698325][T27046] loop2: detected capacity change from 0 to 2048 [ 507.707473][T27047] netlink: 'syz.6.8933': attribute type 1 has an invalid length. [ 507.733494][T27046] loop2: p1 < > p4 [ 507.738602][T27046] loop2: p4 size 8388608 extends beyond EOD, truncated [ 507.949406][T27051] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 508.123593][T27067] SELinux: syz.6.8943 (27067) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 508.137998][T27067] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 508.153947][T27067] SELinux: failed to load policy [ 508.160391][T27067] siw: device registration error -23 [ 508.384706][T27079] netlink: 'syz.9.8947': attribute type 1 has an invalid length. [ 508.696919][T27098] SELinux: syz.1.8955 (27098) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 508.711382][T27098] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 508.753118][T27098] SELinux: failed to load policy [ 508.769841][T27098] siw: device registration error -23 [ 508.892036][T27108] hub 8-0:1.0: USB hub found [ 508.896944][T27108] hub 8-0:1.0: 8 ports detected [ 509.106514][T27115] __nla_validate_parse: 13 callbacks suppressed [ 509.106536][T27115] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 509.138120][T27120] netlink: 'syz.2.8964': attribute type 1 has an invalid length. [ 509.236375][T27129] SELinux: syz.6.8968 (27129) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 509.253193][T27129] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 509.263918][T27129] SELinux: failed to load policy [ 509.270097][T27129] siw: device registration error -23 [ 509.307999][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 509.308016][ T29] audit: type=1400 audit(1748334597.863:42020): avc: denied { create } for pid=27130 comm="syz.1.8970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 509.336242][T27131] hub 8-0:1.0: USB hub found [ 509.341002][T27131] hub 8-0:1.0: 8 ports detected [ 509.379252][ T29] audit: type=1326 audit(1748334597.923:42021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27134 comm="syz.2.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab3c6e969 code=0x7ffc0000 [ 509.403089][ T29] audit: type=1326 audit(1748334597.923:42022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27134 comm="syz.2.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab3c6e969 code=0x7ffc0000 [ 509.426750][ T29] audit: type=1326 audit(1748334597.923:42023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27134 comm="syz.2.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7ffab3c6e969 code=0x7ffc0000 [ 509.450536][ T29] audit: type=1326 audit(1748334597.923:42024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27134 comm="syz.2.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab3c6e969 code=0x7ffc0000 [ 509.474236][ T29] audit: type=1326 audit(1748334597.923:42025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27134 comm="syz.2.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab3c6e969 code=0x7ffc0000 [ 509.595804][ T29] audit: type=1326 audit(1748334598.153:42026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27141 comm="syz.1.8974" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e7cf7e969 code=0x0 [ 509.773732][T27156] SELinux: syz.7.8980 (27156) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 509.824922][T27164] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 509.851950][ T29] audit: type=1326 audit(1748334598.403:42027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27157 comm="syz.9.8981" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcaeb15e969 code=0x0 [ 509.877573][T27164] SELinux: failed to load policy [ 509.896194][T27156] siw: device registration error -23 [ 510.001823][T27166] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8976'. [ 510.215960][T27187] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8989'. [ 510.269342][T27181] loop2: detected capacity change from 0 to 2048 [ 510.303714][ T29] audit: type=1326 audit(1748334598.863:42028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27193 comm="syz.7.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bfcce969 code=0x7ffc0000 [ 510.327481][ T29] audit: type=1326 audit(1748334598.863:42029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27193 comm="syz.7.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9bfcce969 code=0x7ffc0000 [ 510.352055][T27181] loop2: p1 < > p4 [ 510.356613][T27181] loop2: p4 size 8388608 extends beyond EOD, truncated [ 510.454357][T27198] SELinux: syz.1.8995 (27198) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 510.470571][T27198] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 510.481351][T27198] SELinux: failed to load policy [ 510.488365][T27198] siw: device registration error -23 [ 510.618114][T27202] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 511.253877][T27225] hub 8-0:1.0: USB hub found [ 511.263165][T27225] hub 8-0:1.0: 8 ports detected [ 511.345623][T27231] loop2: detected capacity change from 0 to 512 [ 511.402953][T27231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.441832][T27231] ext4 filesystem being mounted at /563/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.840905][T27244] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 512.158056][T19456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.425142][T27277] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 512.564068][T27298] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9029'. [ 512.654410][T27304] loop2: detected capacity change from 0 to 1024 [ 512.666861][T27304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.670353][T27307] SELinux: syz.1.9035 (27307) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 512.679053][T27304] ext4 filesystem being mounted at /567/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.716703][T27307] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 512.727404][T27304] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9033: bg 0: block 393: padding at end of block bitmap is not set [ 512.743689][T27304] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 512.756322][T27304] EXT4-fs (loop2): This should not happen!! Data will be lost [ 512.756322][T27304] [ 512.770011][T27310] hub 8-0:1.0: USB hub found [ 512.774741][T27310] hub 8-0:1.0: 8 ports detected [ 512.780050][T27307] SELinux: failed to load policy [ 512.795323][T19456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.795835][T27311] siw: device registration error -23 [ 512.910026][T27322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9036'. [ 512.940142][T27322] netlink: 'syz.2.9036': attribute type 1 has an invalid length. [ 513.009233][T27315] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 513.102200][T27335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9042'. [ 513.201805][T27342] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 513.306543][T27349] SELinux: syz.7.9048 (27349) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 513.320695][T27349] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 513.353560][T27349] SELinux: failed to load policy [ 513.359360][T27349] siw: device registration error -23 [ 513.447321][T27344] loop2: detected capacity change from 0 to 512 [ 513.456492][T27359] netlink: 'syz.7.9052': attribute type 1 has an invalid length. [ 513.466551][T27344] EXT4-fs: Ignoring removed mblk_io_submit option [ 513.526007][T27344] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 513.606266][T27344] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm +}[@: iget: bad extended attribute block 1 [ 513.635582][T27344] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm +}[@: couldn't read orphan inode 15 (err -117) [ 513.720284][T27377] netlink: 'syz.1.9056': attribute type 1 has an invalid length. [ 513.762965][T27344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.205331][T19456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.217684][T27398] __nla_validate_parse: 3 callbacks suppressed [ 514.217703][T27398] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9066'. [ 514.569331][T27422] loop2: detected capacity change from 0 to 512 [ 514.580382][T27422] EXT4-fs: Ignoring removed mblk_io_submit option [ 514.602088][T27422] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 514.636000][T27422] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm +}[@: iget: bad extended attribute block 1 [ 514.651241][T27422] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm +}[@: couldn't read orphan inode 15 (err -117) [ 514.671209][T27422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.712070][T19456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.833783][T27445] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9087'. [ 514.857058][T27445] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9087'. [ 514.878178][T27445] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9087'. [ 514.901169][T27445] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9087'. [ 514.926579][T27445] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9087'. [ 514.943554][T27445] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9087'. [ 514.952995][T27445] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9087'. [ 514.962187][T27445] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9087'. [ 514.971401][T27445] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9087'. [ 514.983839][T27448] tipc: Enabling of bearer rejected, failed to enable media [ 515.097313][T27463] loop2: detected capacity change from 0 to 512 [ 515.150554][T27463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.163253][T27463] ext4 filesystem being mounted at /580/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.164025][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 515.164041][ T29] audit: type=1400 audit(1748334603.723:42382): avc: denied { mounton } for pid=27466 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 515.232825][ T29] audit: type=1326 audit(1748334603.793:42383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27460 comm="syz.2.9093" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffab3c6e969 code=0x0 [ 515.310971][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.367432][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.430894][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.462541][T27466] lo speed is unknown, defaulting to 1000 [ 515.499390][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.646624][T27466] chnl_net:caif_netlink_parms(): no params data found [ 515.657991][ T29] audit: type=1326 audit(1748334604.213:42384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27494 comm="syz.6.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 515.701663][ T29] audit: type=1326 audit(1748334604.213:42385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27494 comm="syz.6.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 515.725427][ T29] audit: type=1326 audit(1748334604.213:42386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27494 comm="syz.6.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 515.749076][ T29] audit: type=1326 audit(1748334604.253:42387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27494 comm="syz.6.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 515.772824][ T29] audit: type=1326 audit(1748334604.253:42388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27494 comm="syz.6.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 515.834839][ T12] bridge_slave_1: left allmulticast mode [ 515.840510][ T12] bridge_slave_1: left promiscuous mode [ 515.846331][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.864989][ T12] bridge_slave_0: left allmulticast mode [ 515.870676][ T12] bridge_slave_0: left promiscuous mode [ 515.876456][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.942527][T19456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.012419][T27498] tipc: Enabling of bearer rejected, failed to enable media [ 516.060807][ T12] IPVS: stopping master sync thread 23968 ... [ 516.094100][T27466] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.101208][T27466] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.122818][T27466] bridge_slave_0: entered allmulticast mode [ 516.129323][T27466] bridge_slave_0: entered promiscuous mode [ 516.139959][ T12] hsr_slave_0: left promiscuous mode [ 516.148231][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.148290][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.154792][ T12] veth1_macvtap: left promiscuous mode [ 516.154822][ T12] veth0_macvtap: left promiscuous mode [ 516.154947][ T12] veth1_vlan: left promiscuous mode [ 516.154982][ T12] veth0_vlan: left promiscuous mode [ 516.219187][ T29] audit: type=1326 audit(1748334604.773:42389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27529 comm="syz.6.9115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 516.250931][ T29] audit: type=1326 audit(1748334604.793:42390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27529 comm="syz.6.9115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 516.274751][ T29] audit: type=1326 audit(1748334604.803:42391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27529 comm="syz.6.9115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 516.402888][ T12] team0 (unregistering): Port device team_slave_1 removed [ 516.434000][ T12] team0 (unregistering): Port device team_slave_0 removed [ 516.540635][T27466] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.547767][T27466] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.571777][T27466] bridge_slave_1: entered allmulticast mode [ 516.588804][T27466] bridge_slave_1: entered promiscuous mode [ 516.640999][T27466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.684979][T27466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.738552][T27466] team0: Port device team_slave_0 added [ 516.751132][T27466] team0: Port device team_slave_1 added [ 516.785727][T27555] netlink: 'syz.9.9124': attribute type 1 has an invalid length. [ 516.832243][T27466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.832259][T27466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.832394][T27466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.841730][T27466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.841753][T27466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.841819][T27466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.041777][ T12] IPVS: stop unused estimator thread 0... [ 517.047067][T27466] hsr_slave_0: entered promiscuous mode [ 517.048896][T27466] hsr_slave_1: entered promiscuous mode [ 517.483163][T27466] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 517.498471][T27574] loop2: detected capacity change from 0 to 512 [ 517.516136][T27466] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 517.524343][T27574] EXT4-fs: Ignoring removed mblk_io_submit option [ 517.535746][T27466] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 517.554685][T27466] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 517.564836][T27574] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 517.625138][T27466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.629501][T27574] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm +}[@: iget: bad extended attribute block 1 [ 517.659912][T27574] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm +}[@: couldn't read orphan inode 15 (err -117) [ 517.700847][T27574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.727272][T27466] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.799010][T19357] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.806209][T19357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.846262][T19377] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.853469][T19377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.010316][T27466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.187491][T27466] veth0_vlan: entered promiscuous mode [ 518.207274][T27466] veth1_vlan: entered promiscuous mode [ 518.247435][T27466] veth0_macvtap: entered promiscuous mode [ 518.264015][T27466] veth1_macvtap: entered promiscuous mode [ 518.298786][T19456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.309552][T27466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.328290][T27466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.338502][T27466] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.347333][T27466] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.356142][T27466] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.365111][T27466] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.645000][T27646] FAULT_INJECTION: forcing a failure. [ 518.645000][T27646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.658287][T27646] CPU: 0 UID: 0 PID: 27646 Comm: syz.1.9156 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 518.658323][T27646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 518.658419][T27646] Call Trace: [ 518.658427][T27646] [ 518.658435][T27646] __dump_stack+0x1d/0x30 [ 518.658463][T27646] dump_stack_lvl+0xe8/0x140 [ 518.658489][T27646] dump_stack+0x15/0x1b [ 518.658552][T27646] should_fail_ex+0x265/0x280 [ 518.658613][T27646] should_fail+0xb/0x20 [ 518.658692][T27646] should_fail_usercopy+0x1a/0x20 [ 518.658729][T27646] _copy_from_user+0x1c/0xb0 [ 518.658789][T27646] btf_new_fd+0x20a/0x790 [ 518.658829][T27646] bpf_btf_load+0x112/0x130 [ 518.658854][T27646] __sys_bpf+0x561/0x790 [ 518.658903][T27646] __x64_sys_bpf+0x41/0x50 [ 518.658951][T27646] x64_sys_call+0x2478/0x2fb0 [ 518.658982][T27646] do_syscall_64+0xd0/0x1b0 [ 518.659012][T27646] ? clear_bhb_loop+0x40/0x90 [ 518.659061][T27646] ? clear_bhb_loop+0x40/0x90 [ 518.659115][T27646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.659144][T27646] RIP: 0033:0x7f4231e8e969 [ 518.659164][T27646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.659187][T27646] RSP: 002b:00007f42304f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 518.659344][T27646] RAX: ffffffffffffffda RBX: 00007f42320b5fa0 RCX: 00007f4231e8e969 [ 518.659362][T27646] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 518.659378][T27646] RBP: 00007f42304f7090 R08: 0000000000000000 R09: 0000000000000000 [ 518.659395][T27646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.659454][T27646] R13: 0000000000000000 R14: 00007f42320b5fa0 R15: 00007fffd3d395f8 [ 518.659477][T27646] [ 519.039251][T27670] netlink: 'syz.6.9166': attribute type 1 has an invalid length. [ 519.233687][T27682] netlink: 'syz.1.9169': attribute type 1 has an invalid length. [ 520.005793][T27695] SELinux: syz.9.9175 (27695) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 520.040122][T27695] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 520.053441][T27695] SELinux: failed to load policy [ 520.075616][T27695] siw: device registration error -23 [ 520.132537][T27708] __nla_validate_parse: 35 callbacks suppressed [ 520.132554][T27708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9180'. [ 520.190564][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 520.190580][ T29] audit: type=1326 audit(1748334608.733:42466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27700 comm="syz.7.9179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fc9bfcce969 code=0x7ffc0000 [ 520.220712][ T29] audit: type=1326 audit(1748334608.733:42467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27700 comm="syz.7.9179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bfcce969 code=0x7ffc0000 [ 520.244457][ T29] audit: type=1326 audit(1748334608.733:42468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27700 comm="syz.7.9179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9bfcce969 code=0x7ffc0000 [ 520.268063][ T29] audit: type=1326 audit(1748334608.733:42469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27700 comm="syz.7.9179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bfcce969 code=0x7ffc0000 [ 520.291700][ T29] audit: type=1326 audit(1748334608.733:42470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27700 comm="syz.7.9179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc9bfcce969 code=0x7ffc0000 [ 520.335685][ T29] audit: type=1400 audit(1748334608.883:42471): avc: denied { name_bind } for pid=27719 comm="syz.6.9183" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 520.357708][ T29] audit: type=1400 audit(1748334608.883:42472): avc: denied { node_bind } for pid=27719 comm="syz.6.9183" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 520.380352][ T29] audit: type=1326 audit(1748334608.893:42473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27700 comm="syz.7.9179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bfcce969 code=0x7ffc0000 [ 520.380413][ T29] audit: type=1326 audit(1748334608.893:42474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27700 comm="syz.7.9179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bfcce969 code=0x7ffc0000 [ 520.438060][T27723] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9184'. [ 520.447454][T27723] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9184'. [ 520.456551][T27723] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9184'. [ 520.467300][T27723] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9184'. [ 520.476448][T27723] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9184'. [ 520.485589][T27723] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9184'. [ 520.495871][T27723] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9184'. [ 520.505292][T27723] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9184'. [ 520.514419][T27723] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9184'. [ 520.524254][ T29] audit: type=1400 audit(1748334608.903:42475): avc: denied { create } for pid=27719 comm="syz.6.9183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 521.453676][T27786] lo speed is unknown, defaulting to 1000 [ 521.637609][T27783] lo speed is unknown, defaulting to 1000 [ 521.802553][T27783] chnl_net:caif_netlink_parms(): no params data found [ 521.967668][T27783] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.974866][T27783] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.982684][T27783] bridge_slave_0: entered allmulticast mode [ 521.989336][T27783] bridge_slave_0: entered promiscuous mode [ 521.996427][T27783] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.003645][T27783] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.022374][T27783] bridge_slave_1: entered allmulticast mode [ 522.030450][T27783] bridge_slave_1: entered promiscuous mode [ 522.083040][T27783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.123786][T27783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.156768][T27783] team0: Port device team_slave_0 added [ 522.164317][T27783] team0: Port device team_slave_1 added [ 522.203390][T27783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.210378][T27783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.236525][T27783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.278144][T27783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.285277][T27783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.311355][T27783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.478382][ T12] bridge_slave_1: left allmulticast mode [ 522.484456][ T12] bridge_slave_1: left promiscuous mode [ 522.490176][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.502833][ T12] bridge_slave_0: left allmulticast mode [ 522.508582][ T12] bridge_slave_0: left promiscuous mode [ 522.514434][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.673930][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.683370][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.694517][ T12] bond0 (unregistering): Released all slaves [ 522.713935][T27783] hsr_slave_0: entered promiscuous mode [ 522.720740][T27783] hsr_slave_1: entered promiscuous mode [ 522.727765][T27783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 522.735609][T27783] Cannot create hsr debugfs directory [ 522.749883][T27863] vlan2: entered allmulticast mode [ 522.755065][T27863] bond0: entered allmulticast mode [ 522.760247][T27863] bond_slave_0: entered allmulticast mode [ 522.766123][T27863] bond_slave_1: entered allmulticast mode [ 522.799775][ T12] hsr_slave_0: left promiscuous mode [ 522.805986][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.901214][ T12] team0 (unregistering): Port device team_slave_1 removed [ 522.913408][ T12] team0 (unregistering): Port device team_slave_0 removed [ 523.091976][T27879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.100516][T27879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.341961][T27783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 523.351295][T27783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 523.361309][T27783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 523.388413][T27783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 523.459220][T27783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.473497][T27783] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.484406][T19377] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.491537][T19377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.508343][T19357] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.515657][T19357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.533013][T27886] netlink: 'syz.7.9245': attribute type 1 has an invalid length. [ 523.637180][T27783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.718564][T27907] SELinux: syz.6.9251 (27907) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 523.742291][T27907] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 523.762028][T27907] SELinux: failed to load policy [ 523.768293][T27783] veth0_vlan: entered promiscuous mode [ 523.807596][T27783] veth1_vlan: entered promiscuous mode [ 523.828000][T27783] veth0_macvtap: entered promiscuous mode [ 523.835885][T27783] veth1_macvtap: entered promiscuous mode [ 523.848364][T27783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.860722][T27783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.880901][T27783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.889858][T27783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.898681][T27783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.907595][T27783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.054720][T27918] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 524.145326][T27943] FAULT_INJECTION: forcing a failure. [ 524.145326][T27943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.158481][T27943] CPU: 0 UID: 0 PID: 27943 Comm: syz.2.9265 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 524.158572][T27943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 524.158588][T27943] Call Trace: [ 524.158595][T27943] [ 524.158603][T27943] __dump_stack+0x1d/0x30 [ 524.158627][T27943] dump_stack_lvl+0xe8/0x140 [ 524.158679][T27943] dump_stack+0x15/0x1b [ 524.158701][T27943] should_fail_ex+0x265/0x280 [ 524.158805][T27943] should_fail+0xb/0x20 [ 524.158836][T27943] should_fail_usercopy+0x1a/0x20 [ 524.158908][T27943] copy_to_user_nofault+0x7f/0x120 [ 524.158970][T27943] bpf_probe_write_user+0x83/0xc0 [ 524.159012][T27943] bpf_prog_6303d92f98284ad8+0x44/0x4c [ 524.159030][T27943] bpf_trace_run2+0x104/0x1c0 [ 524.159066][T27943] ? key_user_lookup+0x157/0x270 [ 524.159098][T27943] ? selinux_capable+0x1f9/0x270 [ 524.159125][T27943] ? key_user_lookup+0x157/0x270 [ 524.159153][T27943] __traceiter_kfree+0x2e/0x50 [ 524.159222][T27943] ? key_user_lookup+0x157/0x270 [ 524.159249][T27943] kfree+0x27b/0x320 [ 524.159274][T27943] key_user_lookup+0x157/0x270 [ 524.159306][T27943] keyctl_chown_key+0x29c/0x5d0 [ 524.159378][T27943] ? get_pid_task+0x96/0xd0 [ 524.159410][T27943] ? proc_fail_nth_write+0x12d/0x160 [ 524.159525][T27943] __se_sys_keyctl+0x120/0xb80 [ 524.159547][T27943] ? __rcu_read_unlock+0x4f/0x70 [ 524.159569][T27943] ? __fget_files+0x184/0x1c0 [ 524.159677][T27943] ? fput+0x8f/0xc0 [ 524.159699][T27943] __x64_sys_keyctl+0x67/0x80 [ 524.159725][T27943] x64_sys_call+0x2e7f/0x2fb0 [ 524.159749][T27943] do_syscall_64+0xd0/0x1b0 [ 524.159849][T27943] ? clear_bhb_loop+0x40/0x90 [ 524.159938][T27943] ? clear_bhb_loop+0x40/0x90 [ 524.159962][T27943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.159985][T27943] RIP: 0033:0x7f4e6e19e969 [ 524.160000][T27943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.160018][T27943] RSP: 002b:00007f4e6c807038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 524.160036][T27943] RAX: ffffffffffffffda RBX: 00007f4e6e3c5fa0 RCX: 00007f4e6e19e969 [ 524.160058][T27943] RDX: 0000000000000000 RSI: 000000001620cc73 RDI: 0000000000000004 [ 524.160124][T27943] RBP: 00007f4e6c807090 R08: 0000000000000000 R09: 0000000000000000 [ 524.160139][T27943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.160154][T27943] R13: 0000000000000000 R14: 00007f4e6e3c5fa0 R15: 00007ffd8d31f608 [ 524.160172][T27943] [ 524.516585][T27954] FAULT_INJECTION: forcing a failure. [ 524.516585][T27954] name failslab, interval 1, probability 0, space 0, times 0 [ 524.529487][T27954] CPU: 0 UID: 0 PID: 27954 Comm: syz.1.9268 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 524.529549][T27954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 524.529566][T27954] Call Trace: [ 524.529575][T27954] [ 524.529586][T27954] __dump_stack+0x1d/0x30 [ 524.529637][T27954] dump_stack_lvl+0xe8/0x140 [ 524.529666][T27954] dump_stack+0x15/0x1b [ 524.529741][T27954] should_fail_ex+0x265/0x280 [ 524.529894][T27954] ? nfc_allocate_device+0xbd/0x2e0 [ 524.529927][T27954] should_failslab+0x8c/0xb0 [ 524.530020][T27954] __kmalloc_cache_noprof+0x4c/0x320 [ 524.530100][T27954] ? __pfx_nci_transceive+0x10/0x10 [ 524.530168][T27954] nfc_allocate_device+0xbd/0x2e0 [ 524.530203][T27954] nci_allocate_device+0x13b/0x200 [ 524.530297][T27954] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 524.530332][T27954] virtual_ncidev_open+0x55/0x140 [ 524.530437][T27954] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 524.530522][T27954] misc_open+0x1d6/0x200 [ 524.530562][T27954] chrdev_open+0x2e8/0x3a0 [ 524.530657][T27954] do_dentry_open+0x646/0xa20 [ 524.530783][T27954] ? __pfx_chrdev_open+0x10/0x10 [ 524.530832][T27954] vfs_open+0x37/0x1e0 [ 524.530861][T27954] path_openat+0x1c5e/0x2170 [ 524.530923][T27954] do_filp_open+0x109/0x230 [ 524.530988][T27954] do_sys_openat2+0xa6/0x110 [ 524.531082][T27954] __x64_sys_openat+0xf2/0x120 [ 524.531125][T27954] x64_sys_call+0x1af/0x2fb0 [ 524.531168][T27954] do_syscall_64+0xd0/0x1b0 [ 524.531254][T27954] ? clear_bhb_loop+0x40/0x90 [ 524.531277][T27954] ? clear_bhb_loop+0x40/0x90 [ 524.531299][T27954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.531323][T27954] RIP: 0033:0x7f4231e8e969 [ 524.531383][T27954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.531409][T27954] RSP: 002b:00007f42304f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 524.531436][T27954] RAX: ffffffffffffffda RBX: 00007f42320b5fa0 RCX: 00007f4231e8e969 [ 524.531522][T27954] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 524.531540][T27954] RBP: 00007f42304f7090 R08: 0000000000000000 R09: 0000000000000000 [ 524.531557][T27954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.531577][T27954] R13: 0000000000000000 R14: 00007f42320b5fa0 R15: 00007fffd3d395f8 [ 524.531603][T27954] [ 524.990530][T27981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65520 sclass=netlink_route_socket pid=27981 comm=syz.7.9278 [ 525.013779][T27981] IPv6: NLM_F_CREATE should be specified when creating new route [ 525.082957][T27998] loop2: detected capacity change from 0 to 128 [ 525.128025][T27998] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 525.153734][T27998] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.215158][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 525.215174][ T29] audit: type=1400 audit(1748334613.773:42595): avc: denied { mount } for pid=28008 comm="syz.7.9290" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 525.300235][T27975] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 525.301284][T27998] __nla_validate_parse: 57 callbacks suppressed [ 525.301303][T27998] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 525.341735][T27998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.359341][T28023] FAULT_INJECTION: forcing a failure. [ 525.359341][T28023] name failslab, interval 1, probability 0, space 0, times 0 [ 525.372166][T28023] CPU: 1 UID: 0 PID: 28023 Comm: syz.7.9295 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 525.372333][T28023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 525.372347][T28023] Call Trace: [ 525.372355][T28023] [ 525.372365][T28023] __dump_stack+0x1d/0x30 [ 525.372394][T28023] dump_stack_lvl+0xe8/0x140 [ 525.372422][T28023] dump_stack+0x15/0x1b [ 525.372445][T28023] should_fail_ex+0x265/0x280 [ 525.372513][T28023] should_failslab+0x8c/0xb0 [ 525.372554][T28023] __kmalloc_noprof+0xa5/0x3e0 [ 525.372654][T28023] ? kernfs_fop_write_iter+0xe1/0x2d0 [ 525.372679][T28023] ? avc_policy_seqno+0x15/0x30 [ 525.372712][T28023] kernfs_fop_write_iter+0xe1/0x2d0 [ 525.372774][T28023] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 525.372793][T28023] vfs_write+0x4a0/0x8e0 [ 525.372876][T28023] ksys_write+0xda/0x1a0 [ 525.372913][T28023] __x64_sys_write+0x40/0x50 [ 525.372942][T28023] x64_sys_call+0x2cdd/0x2fb0 [ 525.373005][T28023] do_syscall_64+0xd0/0x1b0 [ 525.373035][T28023] ? clear_bhb_loop+0x40/0x90 [ 525.373062][T28023] ? clear_bhb_loop+0x40/0x90 [ 525.373108][T28023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.373171][T28023] RIP: 0033:0x7fc9bfcce969 [ 525.373190][T28023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.373214][T28023] RSP: 002b:00007fc9be337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 525.373286][T28023] RAX: ffffffffffffffda RBX: 00007fc9bfef5fa0 RCX: 00007fc9bfcce969 [ 525.373299][T28023] RDX: 0000000000000012 RSI: 0000200000000500 RDI: 0000000000000006 [ 525.373312][T28023] RBP: 00007fc9be337090 R08: 0000000000000000 R09: 0000000000000000 [ 525.373331][T28023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.373347][T28023] R13: 0000000000000000 R14: 00007fc9bfef5fa0 R15: 00007ffc7dc9f208 [ 525.373372][T28023] [ 525.377372][T27998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.475071][ T29] audit: type=1326 audit(1748334614.033:42596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28019 comm="syz.6.9293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 525.601885][ T29] audit: type=1326 audit(1748334614.033:42597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28019 comm="syz.6.9293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 525.626695][ T29] audit: type=1326 audit(1748334614.043:42598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28019 comm="syz.6.9293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 525.650531][ T29] audit: type=1326 audit(1748334614.053:42599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28019 comm="syz.6.9293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 525.674206][ T29] audit: type=1326 audit(1748334614.053:42600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28019 comm="syz.6.9293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 525.698031][ T29] audit: type=1326 audit(1748334614.053:42601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28019 comm="syz.6.9293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 525.721523][ T29] audit: type=1326 audit(1748334614.053:42602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28019 comm="syz.6.9293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 525.745225][ T29] audit: type=1326 audit(1748334614.053:42603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28019 comm="syz.6.9293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 525.769401][ T29] audit: type=1326 audit(1748334614.053:42604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28019 comm="syz.6.9293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78063ae969 code=0x7ffc0000 [ 525.796315][T28025] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9296'. [ 525.806995][T28025] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9296'. [ 525.816653][T28025] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9296'. [ 525.826216][T28025] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9296'. [ 525.835296][T28025] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9296'. [ 525.844530][T28025] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9296'. [ 525.853605][T28025] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9296'. [ 525.862778][T28025] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9296'. [ 525.871956][T28025] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9296'. [ 525.900390][T28032] tipc: Enabled bearer , priority 0 [ 525.919074][T28019] tipc: Disabling bearer [ 526.405464][T28052] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 527.286117][T28094] tipc: Started in network mode [ 527.291141][T28094] tipc: Node identity 4adf3f516756, cluster identity 4711 [ 527.298449][T28094] tipc: Enabled bearer , priority 0 [ 527.334109][T28093] tipc: Resetting bearer [ 527.405174][T28093] tipc: Disabling bearer [ 527.519329][T28102] SELinux: syz.9.9325 (28102) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 527.571735][T28102] SELinux: policydb magic number 0xf903ff8c does not match expected magic number 0xf97cff8c [ 527.605126][T28102] SELinux: failed to load policy [ 527.626598][T27783] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 527.809766][T28104] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 528.307499][T28148] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 528.344219][T28150] netlink: 'syz.7.9346': attribute type 5 has an invalid length. [ 528.520183][T28153] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 528.822189][T28182] FAULT_INJECTION: forcing a failure. [ 528.822189][T28182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.835467][T28182] CPU: 0 UID: 0 PID: 28182 Comm: syz.9.9360 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 528.835503][T28182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 528.835516][T28182] Call Trace: [ 528.835522][T28182] [ 528.835531][T28182] __dump_stack+0x1d/0x30 [ 528.835582][T28182] dump_stack_lvl+0xe8/0x140 [ 528.835602][T28182] dump_stack+0x15/0x1b [ 528.835639][T28182] should_fail_ex+0x265/0x280 [ 528.835753][T28182] should_fail+0xb/0x20 [ 528.835902][T28182] should_fail_usercopy+0x1a/0x20 [ 528.835931][T28182] copy_to_user_nofault+0x7f/0x120 [ 528.835973][T28182] bpf_probe_write_user+0x83/0xc0 [ 528.836049][T28182] bpf_prog_6303d92f98284ad8+0x44/0x4c [ 528.836072][T28182] bpf_trace_run2+0x104/0x1c0 [ 528.836104][T28182] ? pppol2tp_connect+0x495/0xa00 [ 528.836137][T28182] ? pppol2tp_connect+0x495/0xa00 [ 528.836188][T28182] kfree+0x27b/0x320 [ 528.836210][T28182] ? l2tp_tunnel_create+0x19d/0x1d0 [ 528.836304][T28182] pppol2tp_connect+0x495/0xa00 [ 528.836339][T28182] ? __pfx_pppol2tp_connect+0x10/0x10 [ 528.836372][T28182] __sys_connect+0x1f2/0x2b0 [ 528.836420][T28182] __x64_sys_connect+0x3f/0x50 [ 528.836523][T28182] x64_sys_call+0x1daa/0x2fb0 [ 528.836548][T28182] do_syscall_64+0xd0/0x1b0 [ 528.836578][T28182] ? clear_bhb_loop+0x40/0x90 [ 528.836606][T28182] ? clear_bhb_loop+0x40/0x90 [ 528.836631][T28182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.836763][T28182] RIP: 0033:0x7fcaeb15e969 [ 528.836779][T28182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.836834][T28182] RSP: 002b:00007fcae97c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 528.836860][T28182] RAX: ffffffffffffffda RBX: 00007fcaeb385fa0 RCX: 00007fcaeb15e969 [ 528.836877][T28182] RDX: 0000000000000032 RSI: 00002000000002c0 RDI: 0000000000000003 [ 528.836894][T28182] RBP: 00007fcae97c7090 R08: 0000000000000000 R09: 0000000000000000 [ 528.836911][T28182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.836928][T28182] R13: 0000000000000000 R14: 00007fcaeb385fa0 R15: 00007ffcb8ce2928 [ 528.836953][T28182] [ 529.334205][T28187] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 529.379923][T28210] FAULT_INJECTION: forcing a failure. [ 529.379923][T28210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.393216][T28210] CPU: 0 UID: 0 PID: 28210 Comm: syz.1.9372 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 529.393261][T28210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 529.393274][T28210] Call Trace: [ 529.393309][T28210] [ 529.393317][T28210] __dump_stack+0x1d/0x30 [ 529.393403][T28210] dump_stack_lvl+0xe8/0x140 [ 529.393432][T28210] dump_stack+0x15/0x1b [ 529.393520][T28210] should_fail_ex+0x265/0x280 [ 529.393548][T28210] should_fail+0xb/0x20 [ 529.393572][T28210] should_fail_usercopy+0x1a/0x20 [ 529.393615][T28210] _copy_from_user+0x1c/0xb0 [ 529.393714][T28210] copy_clone_args_from_user+0x14f/0x490 [ 529.393788][T28210] ? kstrtouint+0x76/0xc0 [ 529.393818][T28210] __se_sys_clone3+0x6f/0x200 [ 529.393895][T28210] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 529.394068][T28210] __x64_sys_clone3+0x31/0x40 [ 529.394155][T28210] x64_sys_call+0x10c9/0x2fb0 [ 529.394178][T28210] do_syscall_64+0xd0/0x1b0 [ 529.394271][T28210] ? clear_bhb_loop+0x40/0x90 [ 529.394348][T28210] ? clear_bhb_loop+0x40/0x90 [ 529.394378][T28210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.394408][T28210] RIP: 0033:0x7f4231e8e969 [ 529.394473][T28210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.394492][T28210] RSP: 002b:00007f42304f6f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 529.394510][T28210] RAX: ffffffffffffffda RBX: 000000000000007a RCX: 00007f4231e8e969 [ 529.394526][T28210] RDX: 00007f42304f6f20 RSI: 000000000000007a RDI: 00007f42304f6f20 [ 529.394542][T28210] RBP: 00007f42304f7090 R08: 0000000000000000 R09: 000000000000007a [ 529.394558][T28210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.394571][T28210] R13: 0000000000000000 R14: 00007f42320b5fa0 R15: 00007fffd3d395f8 [ 529.394653][T28210] [ 529.883382][T28233] loop2: detected capacity change from 0 to 256 [ 530.359000][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 530.359015][ T29] audit: type=1400 audit(1748334618.913:42691): avc: denied { unmount } for pid=27783 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 530.462610][ T29] audit: type=1326 audit(1748334618.943:42692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28247 comm="syz.9.9385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaeb15e969 code=0x7ffc0000 [ 530.486357][ T29] audit: type=1326 audit(1748334618.943:42693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28247 comm="syz.9.9385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaeb15e969 code=0x7ffc0000 [ 530.510156][ T29] audit: type=1326 audit(1748334618.943:42694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28247 comm="syz.9.9385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fcaeb15e969 code=0x7ffc0000 [ 530.833406][ T29] audit: type=1326 audit(1748334619.373:42695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28247 comm="syz.9.9385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaeb15e969 code=0x7ffc0000 [ 530.867050][ T29] audit: type=1400 audit(1748334619.423:42696): avc: denied { setopt } for pid=28261 comm="syz.1.9392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 530.888306][T28263] netlink: 'syz.1.9392': attribute type 62 has an invalid length. [ 530.938421][T28268] loop2: detected capacity change from 0 to 512 [ 530.952075][T28268] EXT4-fs: Ignoring removed bh option [ 530.961247][T28271] __nla_validate_parse: 59 callbacks suppressed [ 530.961267][T28271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9396'. [ 530.979363][T28268] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 530.987796][T28271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9396'. [ 530.997226][T28271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9396'. [ 531.007028][T28271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9396'. [ 531.016725][T28268] EXT4-fs (loop2): 1 truncate cleaned up [ 531.026614][T28271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9396'. [ 531.028348][T28277] FAULT_INJECTION: forcing a failure. [ 531.028348][T28277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.035744][T28271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9396'. [ 531.048630][T28277] CPU: 0 UID: 0 PID: 28277 Comm: syz.6.9397 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 531.048694][T28277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 531.048713][T28277] Call Trace: [ 531.048723][T28277] [ 531.048733][T28277] __dump_stack+0x1d/0x30 [ 531.048843][T28277] dump_stack_lvl+0xe8/0x140 [ 531.048872][T28277] dump_stack+0x15/0x1b [ 531.048897][T28277] should_fail_ex+0x265/0x280 [ 531.048935][T28277] should_fail+0xb/0x20 [ 531.048972][T28277] should_fail_usercopy+0x1a/0x20 [ 531.049021][T28277] _copy_from_user+0x1c/0xb0 [ 531.049208][T28277] tls_setsockopt+0x3ec/0xce0 [ 531.049264][T28277] sock_common_setsockopt+0x66/0x80 [ 531.049303][T28277] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 531.049349][T28277] __sys_setsockopt+0x181/0x200 [ 531.049392][T28277] __x64_sys_setsockopt+0x64/0x80 [ 531.049438][T28277] x64_sys_call+0x2bd5/0x2fb0 [ 531.049503][T28277] do_syscall_64+0xd0/0x1b0 [ 531.049534][T28277] ? clear_bhb_loop+0x40/0x90 [ 531.049619][T28277] ? clear_bhb_loop+0x40/0x90 [ 531.049650][T28277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.049679][T28277] RIP: 0033:0x7f78063ae969 [ 531.049701][T28277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.049726][T28277] RSP: 002b:00007f7804a17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 531.049764][T28277] RAX: ffffffffffffffda RBX: 00007f78065d5fa0 RCX: 00007f78063ae969 [ 531.049782][T28277] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 531.049835][T28277] RBP: 00007f7804a17090 R08: 0000000000000038 R09: 0000000000000000 [ 531.049852][T28277] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 531.049869][T28277] R13: 0000000000000000 R14: 00007f78065d5fa0 R15: 00007fff9ebf9ec8 [ 531.049936][T28277] [ 531.066484][T28268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.069992][T28271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9396'. [ 531.081625][T28278] netlink: 'syz.9.9394': attribute type 1 has an invalid length. [ 531.083460][T28271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9396'. [ 531.283242][T28271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9396'. [ 531.304438][T28271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9396'. [ 531.356343][ T29] audit: type=1326 audit(1748334619.913:42697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28287 comm="syz.7.9400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bfcce969 code=0x7ffc0000 [ 531.380457][ T29] audit: type=1326 audit(1748334619.913:42698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28287 comm="syz.7.9400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bfcce969 code=0x7ffc0000 [ 531.404086][ T29] audit: type=1326 audit(1748334619.913:42699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28287 comm="syz.7.9400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fc9bfcce969 code=0x7ffc0000 [ 531.498305][T27783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.500809][ T29] audit: type=1326 audit(1748334620.013:42700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28287 comm="syz.7.9400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9bfcce969 code=0x7ffc0000 [ 531.625212][T28314] netlink: 'syz.6.9408': attribute type 1 has an invalid length. [ 532.043575][T28336] ================================================================== [ 532.051781][T28336] BUG: KCSAN: data-race in getrusage / vms_clear_ptes [ 532.058586][T28336] [ 532.060919][T28336] write to 0xffff888109e86e70 of 8 bytes by task 28335 on cpu 1: [ 532.068907][T28336] vms_clear_ptes+0x18c/0x2d0 [ 532.073605][T28336] mmap_region+0x653/0x1470 [ 532.078122][T28336] do_mmap+0x9d0/0xc10 [ 532.082481][T28336] vm_mmap_pgoff+0x17a/0x2e0 [ 532.088037][T28336] ksys_mmap_pgoff+0xc2/0x310 [ 532.092733][T28336] x64_sys_call+0x1602/0x2fb0 [ 532.097437][T28336] do_syscall_64+0xd0/0x1b0 [ 532.101965][T28336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.107881][T28336] [ 532.110205][T28336] read to 0xffff888109e86e70 of 8 bytes by task 28336 on cpu 0: [ 532.117836][T28336] getrusage+0xa52/0xbb0 [ 532.122093][T28336] io_sq_thread+0x5dd/0x1110 [ 532.126706][T28336] ret_from_fork+0x4e/0x60 [ 532.131145][T28336] ret_from_fork_asm+0x1a/0x30 [ 532.135925][T28336] [ 532.138253][T28336] value changed: 0x00000000000014cb -> 0x0000000000001694 [ 532.145448][T28336] [ 532.147776][T28336] Reported by Kernel Concurrency Sanitizer on: [ 532.153975][T28336] CPU: 0 UID: 0 PID: 28336 Comm: iou-sqp-28335 Not tainted 6.15.0-syzkaller-01958-g785cdec46e92 #0 PREEMPT(voluntary) [ 532.166396][T28336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 532.176459][T28336] ==================================================================