last executing test programs: 3m57.919394135s ago: executing program 3 (id=1068): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) 3m57.714214939s ago: executing program 3 (id=1070): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1014002, &(0x7f0000001900)={[{@usrjquota}, {@noload}, {@norecovery}]}, 0xff, 0x634, &(0x7f0000000100)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 3m57.452807154s ago: executing program 3 (id=1078): writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)='9\x00\x00\x00', 0x4}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 3m57.331682646s ago: executing program 3 (id=1081): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r1, &(0x7f00000001c0)=""/200, 0xc8, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/124, 0x7c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x200000000}, 0x18) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000001180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) nanosleep(0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYRES64=r6], &(0x7f0000003ff6)='GPL\x00', 0x204, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xffff8000, 0x3}, 0x10, 0x0, r1}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) recvfrom(r6, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x532, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x4, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) munlockall() getdents64(r2, &(0x7f0000000140)=""/47, 0x24) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) 3m56.949586674s ago: executing program 3 (id=1085): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x44}, @loopback, 0x7820, 0x80, 0x8, 0x8}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x400, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffea3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17f}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x100019, 0x1}}, 0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x0, @isdn={0x22, 0x2, 0x8, 0x5a, 0x1}, @generic={0x1a, "9b0a10a0f2efbaa802d597b68ca5"}, @nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x32af, 0x0, 0xfffffffffffffffe, 0x1, 0x2}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @empty}, 0x1, r0}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x23500d8, 0x0, 0x1, 0x0, &(0x7f0000000000)) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 3m56.685963579s ago: executing program 3 (id=1088): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}]}, 0x3, 0x4eb, &(0x7f0000001fc0)="$eJzs3d9rW20dAPDvSX9u62ynXsyBc+ikG7ikXd1WvJgVRK8Gznlfa5uW0rQpbbqtZUiHf4Ag/kKvvPJG8FoE2Z8gwkDvRUQZus0LL973zUuSk3ddlrYpa5q2+Xzg6XnOj57v90k4T/LkHM4JoGtdiYipiOiJiOsRMZwuz6Qltmulst2rl09mKyWJcvnBf5JI0mX1fSXp9Fz6b4MR8d1vR/wgeTfu+ubW0kyhkF9L53Ol5dXc+ubWjcXlmYX8Qn5lamL89uSdyVuTY4fW1rvf/OfPf/zbb93901ce/X3639d+WElrKF23sx2t2G5xu1rT+6qvRV1vRKwdJNgx1pO2p6/TiQAA0JLKd/xPR8QXI+L1rzqdDQAAANAO5a8PxQdJRBkAAAA4tTLVa2CTTDa9FmAoMplstnYN72fjbKbQHxHzxY2Vudq1siPRl5lfLOTH0muFR6IvqcyPV+tv5m82zE9ExIWI+Onwmep8drZYmOv0jx8AAADQJc41jP//N1wb/wMAAACnzMgBtm1yLy8AAADgBDjI+B8AAAA4mXYd/ye9R5sIAAAA0A7fuXevUsr151/PPdzcWCo+vDGXX1/KLm/MZmeLa6vZhWJxoXrPvuX99lcoFle/Gisbj3Ol/Hopt765Nb1c3FgpTVef6z2d95xoAAAAOHoXvvDsb0lEbH/tTLVU9KfrWhirT7U3O6CdMgfb3N0/4BTp6XQCQMc0XODb36k8gKPnfDywz8D+Zw3zB/zZAAAAOA5GP/de5/+dD4QTzEAeupfz/9C93OALupfz/9DlBvbfZHC3FX8+5FwAAIC2GaqWJJNNzwUORSaTzUacrz4WoC+ZXyzkxyLiUxHx1+G+gcr8eKeTBgAAAAAAAAAAAAAAAAAAAAAAAIATplxOogwAAACcahGZfyXpg/xHh68ONf4+0J/8f7g6jYhHv37wi8czpdLaeGX5fz9ZXvpluvxmfQkAAADQSfVxen0cDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH6dXLJ7P1cpRxX3wjIkaaxe+Nwep08A/DEXH2dRK9O/4viYieQ4i//TQiLr4dvyeNMFJNrZZFY/xMRJxpU/xoMf65Q4gP3exZpf+Zqhx/fQ3HXyauVKfNj7/etLyvF1d26/8y9f6v2s816//O773rwXrl0vPf53aN/zTiUm/z/qceP3nP/vf739va2m1d+TcRo/t8/lRi5UrLq7n1za0bi8szC/mF/MrExPjtyTuTtybHcvOLhXz6t2mMn3z+jx/t1f6zTePX+t+92n/13d0NNIvx4fPHLz+zR/xrX2r+/l/cI37ltf9y+jlQWT9ar2/X6jtd/t1fLu/V/rld2r/f+39tt502uH7/R/9ocVMA4Aisb24tzRQK+bWTUYmofSs/Lvl0tnI+jkUaKq1VhtJjbseqnrYHvf9u0NYqneuTAACA9njzpb/TmQAAAAAAAAAAAAAAAAAAAED3avudzwbevrPAYOeaCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwp48DAAD//85EyV0=") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 3m41.660403611s ago: executing program 32 (id=1088): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}]}, 0x3, 0x4eb, &(0x7f0000001fc0)="$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") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 3m7.452027746s ago: executing program 2 (id=1892): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x453, 0x200, 0x70bd28, 0x25dfdbfd, "d21a50334f1aa54d07204bfa55ff3f53d40a3b74f3ab14851aaa13f476ba9e3d9a349552a97256874f", ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x28094) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0xfc, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000160a0145f600000000000000020000010900020073797a32000000000900010073797a300000000010000380080002"], 0x64}}, 0x4000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f71f4ff99b9389d04249961b019f00000000000000000000000000000000000000000000180000000000"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x24, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@jmp={0x5, 0x1, 0x9, 0x9, 0xa, 0x80, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit, @generic={0x3, 0x7, 0x8, 0x793, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x18) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) syz_read_part_table(0x103d, &(0x7f0000002080)="$eJzsz9EJAjEQBNDJhRPXIuzKkmzGJiMX9DgLEBHe+whksmTY8FNLWsZIT41NknVL6/U8k8thNmlz7rrW/kc/z3O/tzoUnD7KkuXe31HL7fG9zQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgfzwDAAD//5E7Dv0=") ioctl$TCSETAF(r8, 0x5408, &(0x7f00000000c0)={0x4e00, 0x0, 0x730, 0xbdff, 0xe, "feeeff000000001b"}) write$binfmt_aout(r8, &(0x7f0000001040)=ANY=[], 0xff2e) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0x0, "0000000000000000f7fcfeff000000a88000"}) r9 = syz_open_pts(r8, 0x8182) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000540)=0x1) r10 = dup3(r9, r8, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x17) open_by_handle_at(r10, 0x0, 0x600000) pause() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='btrfs_sync_fs\x00', r5, 0x0, 0x7}, 0x18) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7) 3m6.121485032s ago: executing program 2 (id=1900): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) recvmsg$can_raw(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000540)=[{&(0x7f0000000440)=""/64, 0x40}, {&(0x7f0000000480)=""/159, 0x9f}], 0x2, &(0x7f0000000580)=""/131, 0x83}, 0x20) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000a80)) stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) fcntl$dupfd(r2, 0x0, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4000010}, 0x4000010) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) 3m5.659005771s ago: executing program 2 (id=1904): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x71f}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsopen(&(0x7f0000000080)='squashfs\x00', 0x1) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000000c0)='GPL\x00', &(0x7f0000000100)='./file0\x00', r3) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 3m5.381933826s ago: executing program 2 (id=1906): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x808000, &(0x7f0000000040)=ANY=[], 0x1, 0x55a, &(0x7f0000000540)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) r3 = pidfd_getfd(r1, r1, 0x0) setns(r3, 0x14020000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b40)='ext4_fc_track_inode\x00', r3}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r4, 0x540a, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x1, 0x2, 0x0, 0x9}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fefd000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r10 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x40042, 0x1) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r11, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r12, 0x0, 0x68f}, 0x18) r13 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r13, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) read$ptp(r13, &(0x7f0000000280)=""/176, 0xb0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)) 3m5.237419569s ago: executing program 2 (id=1914): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) (fail_nth: 5) 3m5.011676714s ago: executing program 2 (id=1918): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 3m4.978981034s ago: executing program 33 (id=1918): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 2m54.769874082s ago: executing program 1 (id=2089): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x0, 0x0, 0x0, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {0x2000}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x40}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4002000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x6}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffc}, {0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x0, 0xa}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x1, 0x0, 0x0, 0x401}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x7, 0x0, 0x0, 0x1d4ce113}, {}, {0x400}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x1000000}, {}, {0x2}, {0x0, 0x0, 0x0, 0x7}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x1}, {}, {0x8001}, {0x400000}, {}, {}, {0x0, 0xd}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x1}, {0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}], [{0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x2}, {}, {0x6}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x721119ea02b29831}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x4000) 2m54.692091664s ago: executing program 1 (id=2092): r0 = socket$inet6(0xa, 0x3, 0x6) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000002}}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x5c9100, 0x0, 0x2}, 0x18) fspick(r3, &(0x7f00000001c0)='./file0\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r2}, 0x18) socket$packet(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0043, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x48) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x100000000000000) 2m54.455123759s ago: executing program 1 (id=2098): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x2e, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @local, @remote}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x0, 0x0, 0xfe}}}}}}, 0x0) syz_emit_ethernet(0xf6, &(0x7f0000000180)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108105", 0xc0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[@routing={0x3c, 0x10, 0x1, 0x5, 0x0, [@local, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @private0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x38}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local]}, @fragment={0xc, 0x0, 0x2, 0x1, 0x0, 0x8, 0x67}, @hopopts={0x8, 0x3, '\x00', [@ra={0x5, 0x2, 0x4}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}]}], {0x0, 0xe22, 0x8}}}}}}, 0x0) 2m54.414192799s ago: executing program 1 (id=2099): syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r1 = io_uring_setup(0x6c4, &(0x7f0000000300)={0x0, 0x4075, 0x18, 0x2, 0x40}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') r2 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) fcntl$addseals(r2, 0x409, 0xb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000003f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1b, 0x0, 0x0) listen(r4, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa618e38850ee1745fcd181046fcd7c1ce7e6486dd6000000001040000fe8000000000010000000000000000bbfe8000000000000000000000000000aa4e234e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5402000090780000"], 0x0) 2m53.546314927s ago: executing program 1 (id=2101): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000280)='sys_enter\x00', r1, 0x0, 0x182}, 0x18) utime(0x0, 0x0) 2m53.545348137s ago: executing program 1 (id=2103): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x0, 0x0, 0x0, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {0x2000}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x40}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4002000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x6}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffc}, {0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x0, 0xa}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x1, 0x0, 0x0, 0x401}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x7, 0x0, 0x0, 0x1d4ce113}, {}, {0x400}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x1000000}, {}, {0x2}, {0x0, 0x0, 0x0, 0x7}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x1}, {}, {0x8001}, {0x400000}, {}, {}, {0x0, 0xd}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x1}, {0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}], [{0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x2}, {}, {0x6}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x721119ea02b29831}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x4000) 2m53.544268726s ago: executing program 34 (id=2103): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x0, 0x0, 0x0, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {0x2000}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x40}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4002000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x6}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffc}, {0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x0, 0xa}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x1, 0x0, 0x0, 0x401}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x7, 0x0, 0x0, 0x1d4ce113}, {}, {0x400}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x1000000}, {}, {0x2}, {0x0, 0x0, 0x0, 0x7}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x1}, {}, {0x8001}, {0x400000}, {}, {}, {0x0, 0xd}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x1}, {0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}], [{0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x2}, {}, {0x6}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x721119ea02b29831}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x4000) 2m16.162724273s ago: executing program 5 (id=2854): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) close_range(r2, 0xffffffffffffffff, 0x0) 2m16.121087724s ago: executing program 5 (id=2855): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000b08000/0x4000)=nil, 0x4000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x40}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 2m15.30827246s ago: executing program 5 (id=2863): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt(r0, 0x0, 0x16, &(0x7f0000000400)=""/1, &(0x7f0000000440)=0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_crash_size', 0x169a82, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r1, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8fd3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe2(&(0x7f0000001440), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff3}, {0xfff1, 0x10}, {0xc, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x14000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e0000000074000280060001"], 0xb4}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x12}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x60}}, 0x0) 2m14.936229187s ago: executing program 5 (id=2869): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r4, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) 2m13.992967045s ago: executing program 5 (id=2876): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf250f00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x24008080) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r8, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x4c}, 0x2, 0x34005}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f0000000240)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x14c, r2, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x130, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x300}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x697}]}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9ce3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x300}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x6000400}, 0xc000) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') read$char_usb(r9, &(0x7f0000000940)=""/4096, 0x1000) preadv(r9, &(0x7f0000000900)=[{&(0x7f0000002280)=""/256, 0x100}], 0x1, 0x6, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getroute={0x14, 0x1a, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200480c0}, 0x4004009) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x2d, 0x400eeb4, 0x13}, 0x2c) 2m13.825805979s ago: executing program 5 (id=2878): inotify_init1(0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@delpolicy={0x58, 0x14, 0x2, 0x70bd2b, 0x25dfdbfc, {{@in=@dev={0xac, 0x14, 0x14, 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e24, 0x6, 0x4e21, 0x3, 0xa, 0x80, 0x20, 0x0, r2, r4}, 0x6e6bb6}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x7f}]}, 0x58}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 1m59.509399457s ago: executing program 35 (id=2878): inotify_init1(0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@delpolicy={0x58, 0x14, 0x2, 0x70bd2b, 0x25dfdbfc, {{@in=@dev={0xac, 0x14, 0x14, 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e24, 0x6, 0x4e21, 0x3, 0xa, 0x80, 0x20, 0x0, r2, r4}, 0x6e6bb6}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x7f}]}, 0x58}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 2.454448043s ago: executing program 8 (id=5363): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = eventfd2(0xfffffffe, 0x0) write$eventfd(r2, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r2, &(0x7f0000000040)=0x8, 0x8) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000b40)={0x20, r3, 0x1, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x141}, 0x0) 1.796163375s ago: executing program 6 (id=5372): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd61bcc1d7008c292a5b0100"/51], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.459964112s ago: executing program 8 (id=5377): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000140)=[{0x48, 0xfd, 0x2, 0x100}, {0x6, 0x6, 0xe, 0x3}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 1.459554652s ago: executing program 8 (id=5379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14) 1.431674513s ago: executing program 8 (id=5381): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(0x0, 0x43) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r0, 0x3) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(0x0, 0x92) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) accept$inet6(r0, 0x0, 0x0) 1.420949203s ago: executing program 6 (id=5382): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) flock(r0, 0x5) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x38c, 0x30, 0xc96f2b0dc02612b1, 0x71bd25, 0x25dfdbff, {}, [{0x2a0, 0x1, [@m_xt={0x188, 0xa, 0x0, 0x0, {{0x7}, {0x104, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x800}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x4d, 0x6, {0x2fe, 'nat\x00', 0x7, 0x1000, "32191f502c659f78524cedcb63159b9970fd761bd5a7356aa2eb78ed001acbeda2a4ab"}}, @TCA_IPT_TARG={0x54, 0x6, {0x8001, 'nat\x00', 0xe, 0x1000, "5b17aa89d80870c15066789ffc3b484ddb037d507299171c05cbd077a4e3492a17ecb2370233755138b3"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffd}, @TCA_IPT_TARG={0x2a, 0x6, {0x22, 'mangle\x00', 0x8, 0x9}}]}, {0x5d, 0x6, "668b59ac2020ba29ce8ff8c48837a4cfa8d7faef2c0c9c47f90899beeb9ec12d5fb2a3764d658c54c9ef3022011ee444ce5a7dc00a4e66fc5defa808044cb95d644f5b9530133c1b3749bb40f74ae0d523a3d8bd5b5f88a20a"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xe4, 0x34, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd, 0x6, 0x8, 0x9}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x4, 0x0, 0x136bcb9c}, 0x6c}}]}, {0x7f, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be5706319618121198d886a3a0c6633142505684e260d3f73821a3729"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0xd8, 0x1, [@m_gact={0xd4, 0x16, 0x0, 0x0, {{0x9}, {0x4}, {0xa7, 0x6, "3b5787a933d0695a3c65e24e5c4c8a9428e87983fcb08e778c4c16d937c9d6cdd2b42f9e24f75184f7dfdc33389e6615d6aa21fe6ee7d9836096a2743418947b1a45472c40db288e9fd9c34c8ceed8fb34c3bb42b89f5d42e9ec5f7e781cf88ee98688cd4e3817aab179991acb608cb1c9d6602df0c66e9c85c04ed665949bc57820d143f2c35d2b11306076c500bca5dfe8a73bb5282cd3d23713e622e54ddf68775a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x38c}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r3 = syz_open_dev$MSR(&(0x7f0000000780), 0x80, 0x0) copy_file_range(r1, 0xfffffffffffffffe, r3, 0x0, 0x8, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b89, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0xfffffffffffffffe}, 0x18) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x11c, 0x1}, 0x20) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r11) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x1c001, 0x0) syz_open_procfs(r10, &(0x7f00000003c0)='numa_maps\x00') syz_usb_disconnect(0xffffffffffffffff) close_range(r9, 0xffffffffffffffff, 0x0) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r12, 0xc08c5332, &(0x7f0000000300)={0xfffffffe, 0x0, 0x0, 'queue1\x00', 0x7f}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r12, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="04002bbd7000ffdbdf250700000008002b00070000001707b76f53726340b458526621d7755155851db9b507bcca0a2c85281a7a6dc0b90106702109d521d903294bc1588335a26e7bb861bc783d19bb8423de68bb5dea933deca6e425ea1d0859dace5f"], 0x1c}, 0x1, 0x0, 0x0, 0x80488b0}, 0x4000) 746.618256ms ago: executing program 7 (id=5400): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000880)={[], [{@flag='lazytime'}, {@smackfsdef={'smackfsdef', 0x3d, '@'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@euid_eq}, {@subj_user={'subj_user', 0x3d, 'commit'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'noauto_da_a\x82p\xad\x7f\xdaYg.u\xd2\xe8\xed\n~y3Z\xea\xe6\xfc\xdd\xfcxX/p\x19\x1bYaa\x11q\x0fY\xf0\r\xa4\xef\x1e\xadB\xee\x9e\xa3\xd4&\x15\xb0\t\xa2\xe6\x05r\x80\xd6\x00\x00\x00\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000400), &(0x7f0000000500)=r2}, 0x20) socket$packet(0x11, 0xa, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x52, &(0x7f0000030300)=ANY=[], 0x0) 739.049626ms ago: executing program 7 (id=5402): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x40, &(0x7f0000000300)='trans=rdma,') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000"], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4804}, 0x18) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000959800001801000020207025000004000020203675c293a11be23e00bfa100000000000007010000f07ea3fe84080eba669c0376ffffd4f001327277938faaa41900"/86], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r4, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) write$UHID_DESTROY(r4, &(0x7f0000000080), 0x4) close_range(r3, 0xffffffffffffffff, 0x0) 718.441717ms ago: executing program 0 (id=5403): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0xf41, 0x4) sendto$packet(r2, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14) 673.459827ms ago: executing program 0 (id=5404): faccessat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40, 0x100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfc, 0x0, 0x9, 0x0, 0x0, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x10498a, 0xc8, 0x3, 0x0, 0x1}, 0x0, 0x8000000000, 0xffffffffffffffff, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033200fefd000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 661.261268ms ago: executing program 4 (id=5405): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005000000030024"], 0xd0}}, 0x0) 597.174229ms ago: executing program 0 (id=5406): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) pipe2(&(0x7f0000000300), 0xc080) 584.218239ms ago: executing program 6 (id=5407): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007b080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff9, &(0x7f00000014c0)=""/4089}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa3, 0xa3, 0x9, [@restrict={0x7, 0x0, 0x0, 0xb, 0x1}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x35, 0x0, 0x18, 0x3}, @datasec={0xb, 0xa, 0x0, 0xf, 0x3, [{0x4, 0x1000, 0x1856}, {0x1, 0x1}, {0x2, 0x80, 0x7}, {0x5, 0xd, 0x7}, {0x2, 0xfffffff9, 0x4}, {0x5, 0x2, 0x5}, {0x5, 0x4, 0x7ff}, {0x5, 0x8, 0x2}, {0x5, 0x4d0, 0x6}, {0x5, 0x3}], "588efa"}]}, {0x0, [0x5f, 0x30, 0x2e, 0x5f, 0x61, 0x61, 0x61]}}, &(0x7f00000008c0)=""/198, 0xc5, 0xc6, 0x1}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000009c0)={0x8, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)='%+9llu \x00'}, 0x20) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file0\x00', 0x0, 0x10}, 0x18) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1200) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x17, 0x2, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r0}], &(0x7f0000000340)='GPL\x00', 0x800, 0x8d, &(0x7f0000000540)=""/141, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x25, r1, 0x8, &(0x7f0000000600)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x8, 0x4, 0xe72}, 0x10, r2, r3, 0x6, &(0x7f0000000d40)=[r4, r5, r6, r7, r10], &(0x7f0000000d80)=[{0x1, 0x1, 0x1, 0x7}, {0x1, 0x3, 0x7, 0x3}, {0x5, 0x3, 0xc, 0x4}, {0x2, 0x2, 0x6, 0x4}, {0x1, 0x4, 0xd}, {0x0, 0x2, 0xa, 0x7}], 0x10, 0x1}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r14, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) recvmsg(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/208, 0xd0}], 0x1}, 0x2140) 583.771289ms ago: executing program 8 (id=5408): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) getdents64(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000bc0)={r1, 0x1, 0x3}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB="30dc860d4dc8e940fd62086a93cd1b387f112867e3bfefb18201dd04716a5f9d3d67e7b77ed56d847f32718ca2f4036bb6330806fe689c6cb7e47a53abffb276ccc591da7fd2df826f4fc25ef616eff20e81322057922f5b3a74f95b383cfeca5e5f3b7a971beb6312b32fc762ff5c6990eb21764681452cf4ed73cce98be032606990758d56a134db01b842babed6266d3189e6d2ead5d43045d2", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r5, @ANYBLOB="080003"], 0x80}}, 0x8000) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x62442, 0x0) r7 = dup(r6) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f00000000c0)={{0x10001, 0x5}, {0x8, 0xfd3}, 0x4006, 0xfffffffe}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000900)='./file0\x00', 0x0, 0x8}, 0x18) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@generic={&(0x7f0000000980)='./file0\x00', 0x0, 0x18}, 0x18) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d001800"], 0x0, 0x42}, 0x28) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xdde6, r11, 0x1000000}, 0x38) fcntl$lock(r10, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r10, 0x7, &(0x7f00000000c0)={0x2, 0x2, 0x7, 0x401}) r12 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r12, &(0x7f0000001240)=""/102400, 0x200000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000082cb00000000001108fb89291831559c724e5706b9e7698f6598461d67d33f694b7dec03000000"], &(0x7f0000000180)='GPL\x00', 0x5, 0x7c, &(0x7f00000001c0)=""/124, 0x40f00, 0x2, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x6, 0xddb, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000a00)=[r8, r9, r10, r3, r12, 0x1], &(0x7f0000000a40)=[{0x4, 0x1, 0xe, 0x1}, {0x1, 0x5, 0x6, 0x9}, {0x1, 0x3, 0x10000000, 0x7}, {0x2, 0xe, 0xc, 0x6}, {0x3, 0x4, 0x8, 0x7}, {0x2, 0x1, 0xe, 0xb}, {0x0, 0x5, 0xa, 0x9}], 0x10, 0xc}, 0x94) ioctl$sock_inet_SIOCGIFPFLAGS(r7, 0x8935, &(0x7f0000000c00)={'veth1_to_bridge\x00'}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) 534.56242ms ago: executing program 6 (id=5409): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611484960c6db90fd4514f000000fbff9400000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 500.434861ms ago: executing program 4 (id=5410): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0xf4) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) lseek(r4, 0xffffffffffffffff, 0x4) r5 = pidfd_getfd(r3, r3, 0x0) setns(r5, 0x66020000) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c756e616d653dd0aedec1aa20ffd81da396eda2ab40a26d93dd083c0074dcab6cab21ae16c4cdf97b345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea3c8d91906aea81b200cc00000000000000002c00"/119]) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x6, 0x0, 0x1, 0xa, 0x20006, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_devices(r4, &(0x7f0000000280)='devices.allow\x00', 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) get_robust_list(0x0, &(0x7f0000000540)=0x0, &(0x7f0000000840)) setsockopt$inet6_IPV6_PKTINFO(r8, 0x29, 0x32, &(0x7f00000002c0)={@private1, r9}, 0x11) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r11, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r12 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r12, &(0x7f0000000200)={0x1d, r13}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r13, {0x1}, {0xffff, 0xfff1}, {0x1}}}, 0x24}}, 0x0) 454.477942ms ago: executing program 0 (id=5411): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x99}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r7, @ANYBLOB="04003080"], 0x20}}, 0x0) 454.194512ms ago: executing program 6 (id=5412): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x7, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05c500010000070000000d0000682300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYRES16=r2], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYRES32=r6], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$netlink(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 453.988482ms ago: executing program 0 (id=5413): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000880)={[], [{@flag='lazytime'}, {@smackfsdef={'smackfsdef', 0x3d, '@'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@euid_eq}, {@subj_user={'subj_user', 0x3d, 'commit'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'noauto_da_a\x82p\xad\x7f\xdaYg.u\xd2\xe8\xed\n~y3Z\xea\xe6\xfc\xdd\xfcxX/p\x19\x1bYaa\x11q\x0fY\xf0\r\xa4\xef\x1e\xadB\xee\x9e\xa3\xd4&\x15\xb0\t\xa2\xe6\x05r\x80\xd6\x00\x00\x00\x00'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000400), &(0x7f0000000500)=r2}, 0x20) socket$packet(0x11, 0xa, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x52, &(0x7f0000030300)=ANY=[], 0x0) 413.061992ms ago: executing program 7 (id=5414): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0xf41, 0x4) sendto$packet(r2, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14) 362.537683ms ago: executing program 6 (id=5415): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = memfd_create(&(0x7f0000000c80)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6\xc5\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/\\;U\xd4\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1bj|G\xe0\x83\b\x00\x00\x00\x00\x00\x00\x00+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\fKh\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x06y\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0z\xd5X\x89D\xae%\v\x1e\x16\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7)\xf2\x93\xd3\t\xd9-\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x18lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb\xf8|_G\xd9\x7f\x11\xed\xa8\xb1\xbd\x98Y\xbf\xa0\xcb\x8c\x82L\x11TP>\xf8C\x9b\xaf\x11U0\x94\x92O\xed\xf8\xbau\x97;\x19\x1f\xe3\xce\xc1j\xd7\xaf\x19\xee\xdb\xf3\xfbe\xf2\x94P\xcc\x14\x06\xa7\xf9\xba\xca\x06\xc1\xea\x9d\x11\xfam\xb2\xc1\x91;\xe8\x1f\x11&\x04\xeeqY=\xe0\xb9\xbc)Y\xf7\xeb\xd8\xbe\xe4\xcf\x9e\x7f\xb2b7\xb6\xf4/s\x9bO~\x02v\xefbRPM\x05m\xf2s\xae\xdf\a;Q\xed\xf5!\xd9\x95(\xf5\xa5\xee6\x95\xd8s\xf3\xdc]\x979\x15\x0fG\xb1\x19p\"O\x01zu\xe2cb\xd5\x11\x17\r\x04=+?_T\xb4\xf7\xc1\x8a\xf4\xca)\xe7\xdb\xdfd\x92\xab\xcc\xee\xab\xbfP\x89Ix\xc5vv{\xc0H\x96B\xad\a\x0e\xa7@=\xa4y\xcfY\x15/i\xad\x8dP\xa2\x9a\xed\xb8=\x8b\x10jHR\xd1\x0e\x93\x1e\x8f\x88(X^;\xeeo\xa5\x13]\xe7\xb4', 0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='schedstat\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d6664147266646e6f3d", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000340)=@usbdevfs_driver={0x2, 0x10001, &(0x7f00000002c0)="83a8b0b28405800f9d9725c2e7fbb254e1fa50fa486e615b6955c0602b738a9cda262af1e2d903f3260dede3acc47c2ea1df9c0e0204d805cd3a53ac7baf8787795df72762de88c986242c9f98674f919c8a4747954c9f6764ba64280228801b7321dc07ccfffdb9b62b3f59f0"}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r3) ptrace(0x10, r5) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x18) r10 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r10, 0x66a8, 0x4000, 0xf, 0x0, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r5) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r12, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r12, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r12, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) tkill(r5, 0x3c) ptrace$peeksig(0x4209, r5, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 328.374384ms ago: executing program 0 (id=5416): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x3]}, 0x8) read$msr(r0, &(0x7f0000001bc0)=""/4080, 0xff0) 320.823464ms ago: executing program 7 (id=5417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfc, 0x0, 0x9, 0x0, 0x0, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x10498a, 0xc8, 0x3, 0x0, 0x1}, 0x0, 0x8000000000, 0xffffffffffffffff, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033200fefd000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 264.121775ms ago: executing program 8 (id=5418): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(0x0, 0x43) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r0, 0x3) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(0x0, 0x92) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) accept$inet6(r0, 0x0, 0x0) 263.505305ms ago: executing program 7 (id=5419): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="620af8ff0c011021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e4000000000d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f2d5d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c51000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) stat(0x0, 0x0) 214.544226ms ago: executing program 4 (id=5420): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005000000030024"], 0xd0}}, 0x0) 214.298406ms ago: executing program 7 (id=5421): r0 = epoll_create1(0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x40) socket$kcm(0x10, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="f899ae8392e6aaaaaaaaaa3581004c000806000186dd06100c00000000000000000000007d829a9668ddc1e200000001aaaaaaaaaa44fc000000800000000000000000000001"], 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xa0000007}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x14, 0x30, 0x100}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='module_load\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r8, 0x0, 0x10d00, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x8808, 0x80, 0x2, 0x1f9}, &(0x7f0000000480)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r10, 0x0, 0x0, 0x64, 0x183000, 0x23456}) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r12, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x60, 0x0, @fd=r2, 0xfffffffffffffffd, 0x0, 0xd, 0x2, 0x1, {0x0, r13}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) 108.529878ms ago: executing program 4 (id=5422): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) munlockall() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', r2, 0x2f, 0xe, 0x3, 0x4, 0x51, @loopback, @mcast2, 0x20, 0x1, 0x10, 0x7}}) 34.31952ms ago: executing program 4 (id=5423): syz_clone3(&(0x7f0000001880)={0x1008c0600, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r0}, 0x10) r2 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000180)) (async, rerun: 64) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x2, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r5, 0x10c, 0x7, &(0x7f0000000000)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r6}, 0x18) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x10) (async, rerun: 32) r8 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="540100001000010000ec02ff4d5efd1212880000000000000000000000000101ac1414bb88706866da92fab0df08b8d1de7e135f00000000ff0000000000000000000000000000000a000c0064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14143500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000002abd700028bd700000000000"], 0x154}}, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES16, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095", @ANYRESOCT=r1, @ANYRES64=r2, @ANYBLOB="849279eb6c2bd0cb06"], &(0x7f0000000780)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) (async, rerun: 64) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 64) mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x2}, 0x18) 0s ago: executing program 4 (id=5424): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x40, &(0x7f0000000300)='trans=rdma,') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000"], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4804}, 0x18) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000959800001801000020207025000004000020203675c293a11be23e00bfa100000000000007010000f07ea3fe84080eba669c0376ffffd4f001327277938faaa41900"/86], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r4, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) write$UHID_DESTROY(r4, &(0x7f0000000080), 0x4) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): pute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.125082][T16660] Call Trace: [ 289.125090][T16660] [ 289.125116][T16660] __dump_stack+0x1d/0x30 [ 289.125137][T16660] dump_stack_lvl+0xe8/0x140 [ 289.125163][T16660] dump_stack+0x15/0x1b [ 289.125226][T16660] should_fail_ex+0x265/0x280 [ 289.125256][T16660] should_failslab+0x8c/0xb0 [ 289.125282][T16660] kmem_cache_alloc_node_noprof+0x57/0x320 [ 289.125381][T16660] ? __alloc_skb+0x101/0x320 [ 289.125414][T16660] __alloc_skb+0x101/0x320 [ 289.125455][T16660] tipc_msg_build+0xbe/0x840 [ 289.125487][T16660] ? skb_free_head+0x87/0x150 [ 289.125518][T16660] __tipc_sendstream+0x668/0xb30 [ 289.125576][T16660] ? __pfx_woken_wake_function+0x10/0x10 [ 289.125610][T16660] tipc_accept+0x97c/0xaa0 [ 289.125643][T16660] ? __pfx_woken_wake_function+0x10/0x10 [ 289.125742][T16660] do_accept+0x2c9/0x3a0 [ 289.125773][T16660] __sys_accept4+0xbf/0x140 [ 289.125801][T16660] __x64_sys_accept4+0x51/0x60 [ 289.125829][T16660] x64_sys_call+0x2ed3/0x2ff0 [ 289.125858][T16660] do_syscall_64+0xd2/0x200 [ 289.125952][T16660] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 289.125978][T16660] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 289.126021][T16660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.126047][T16660] RIP: 0033:0x7f200d5beba9 [ 289.126063][T16660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.126081][T16660] RSP: 002b:00007f200c01f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 289.126186][T16660] RAX: ffffffffffffffda RBX: 00007f200d805fa0 RCX: 00007f200d5beba9 [ 289.126202][T16660] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 289.126216][T16660] RBP: 00007f200c01f090 R08: 0000000000000000 R09: 0000000000000000 [ 289.126228][T16660] R10: 0400000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.126240][T16660] R13: 00007f200d806038 R14: 00007f200d805fa0 R15: 00007fff75756498 [ 289.126265][T16660] [ 289.130515][T16654] bridge0: entered promiscuous mode [ 289.353614][T16654] bridge0: port 4(macvlan2) entered blocking state [ 289.360172][T16654] bridge0: port 4(macvlan2) entered disabled state [ 289.367011][T16654] macvlan2: entered allmulticast mode [ 289.372496][T16654] bridge0: entered allmulticast mode [ 289.380583][T16654] macvlan2: left allmulticast mode [ 289.385749][T16654] bridge0: left allmulticast mode [ 289.393722][T16654] bridge0: left promiscuous mode [ 289.515724][T16668] lo speed is unknown, defaulting to 1000 [ 289.526183][T16668] lo speed is unknown, defaulting to 1000 [ 289.544894][T16675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16675 comm=syz.8.4625 [ 289.776219][T16682] netlink: 'syz.8.4629': attribute type 13 has an invalid length. [ 289.859897][T16690] netlink: 'syz.8.4633': attribute type 3 has an invalid length. [ 289.867731][T16690] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4633'. [ 289.905016][T16690] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 290.090430][T16699] lo speed is unknown, defaulting to 1000 [ 290.097290][T16699] lo speed is unknown, defaulting to 1000 [ 290.129696][T16703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16703 comm=syz.6.4637 [ 290.190159][T16710] netlink: 'syz.7.4641': attribute type 13 has an invalid length. [ 290.206323][T16708] lo speed is unknown, defaulting to 1000 [ 290.213104][T16708] lo speed is unknown, defaulting to 1000 [ 290.229449][T16715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16715 comm=syz.0.4640 [ 290.386510][T11505] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 290.408186][T11505] hid-generic 0000:0000:0000.0057: hidraw0: HID v0.00 Device [syz1] on syz0 [ 290.573877][T16740] netlink: 'syz.4.4653': attribute type 13 has an invalid length. [ 290.616769][T16747] FAULT_INJECTION: forcing a failure. [ 290.616769][T16747] name failslab, interval 1, probability 0, space 0, times 0 [ 290.629589][T16747] CPU: 0 UID: 0 PID: 16747 Comm: syz.4.4656 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 290.629652][T16747] Tainted: [W]=WARN [ 290.629660][T16747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.629677][T16747] Call Trace: [ 290.629685][T16747] [ 290.629694][T16747] __dump_stack+0x1d/0x30 [ 290.629723][T16747] dump_stack_lvl+0xe8/0x140 [ 290.629811][T16747] dump_stack+0x15/0x1b [ 290.629832][T16747] should_fail_ex+0x265/0x280 [ 290.629863][T16747] ? nfnetlink_rcv+0x53d/0x1690 [ 290.629888][T16747] should_failslab+0x8c/0xb0 [ 290.630015][T16747] __kmalloc_cache_noprof+0x4c/0x320 [ 290.630058][T16747] nfnetlink_rcv+0x53d/0x1690 [ 290.630085][T16747] ? nlmon_xmit+0x4f/0x60 [ 290.630127][T16747] ? __dev_queue_xmit+0x1200/0x2000 [ 290.630243][T16747] ? __dev_queue_xmit+0x182/0x2000 [ 290.630275][T16747] ? ref_tracker_free+0x37d/0x3e0 [ 290.630318][T16747] netlink_unicast+0x5c0/0x690 [ 290.630351][T16747] netlink_sendmsg+0x58b/0x6b0 [ 290.630443][T16747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.630514][T16747] __sock_sendmsg+0x142/0x180 [ 290.630552][T16747] ____sys_sendmsg+0x31e/0x4e0 [ 290.630588][T16747] ___sys_sendmsg+0x17b/0x1d0 [ 290.630693][T16747] __x64_sys_sendmsg+0xd4/0x160 [ 290.630735][T16747] x64_sys_call+0x191e/0x2ff0 [ 290.630760][T16747] do_syscall_64+0xd2/0x200 [ 290.630803][T16747] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 290.630832][T16747] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 290.630925][T16747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.630951][T16747] RIP: 0033:0x7f7ada3ceba9 [ 290.630970][T16747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.631057][T16747] RSP: 002b:00007f7ad8e37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.631081][T16747] RAX: ffffffffffffffda RBX: 00007f7ada615fa0 RCX: 00007f7ada3ceba9 [ 290.631153][T16747] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 290.631168][T16747] RBP: 00007f7ad8e37090 R08: 0000000000000000 R09: 0000000000000000 [ 290.631182][T16747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.631197][T16747] R13: 00007f7ada616038 R14: 00007f7ada615fa0 R15: 00007fff67bfc228 [ 290.631227][T16747] [ 290.869648][T16748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16748 comm=syz.0.4655 [ 291.007513][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 291.007528][ T29] audit: type=1400 audit(1757927251.201:19048): avc: denied { write } for pid=16758 comm="syz.0.4661" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 291.037251][ T29] audit: type=1400 audit(1757927251.201:19049): avc: denied { map } for pid=16758 comm="syz.0.4661" path="socket:[57755]" dev="sockfs" ino=57755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 291.060689][ T29] audit: type=1400 audit(1757927251.201:19050): avc: denied { read accept } for pid=16758 comm="syz.0.4661" path="socket:[57755]" dev="sockfs" ino=57755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 291.181026][ T29] audit: type=1326 audit(1757927251.390:19051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16775 comm="syz.0.4667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5979eba9 code=0x7ffc0000 [ 291.204801][ T29] audit: type=1326 audit(1757927251.390:19052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16775 comm="syz.0.4667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5979eba9 code=0x7ffc0000 [ 291.240040][T16773] SELinux: failed to load policy [ 291.279692][ T29] audit: type=1326 audit(1757927251.390:19053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16775 comm="syz.0.4667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0c5979eba9 code=0x7ffc0000 [ 291.303359][ T29] audit: type=1326 audit(1757927251.390:19054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16775 comm="syz.0.4667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5979eba9 code=0x7ffc0000 [ 291.327145][ T29] audit: type=1326 audit(1757927251.390:19055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16775 comm="syz.0.4667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5979eba9 code=0x7ffc0000 [ 291.350758][ T29] audit: type=1326 audit(1757927251.390:19056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16775 comm="syz.0.4667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f0c5979eba9 code=0x7ffc0000 [ 291.374403][ T29] audit: type=1326 audit(1757927251.390:19057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16775 comm="syz.0.4667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5979eba9 code=0x7ffc0000 [ 291.434716][T16784] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4670'. [ 291.446578][T16784] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 291.453642][T16784] batman_adv: batadv0: Removing interface: veth1_vlan [ 291.487071][T16788] loop8: detected capacity change from 0 to 512 [ 291.501234][T16788] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 291.510551][T16788] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 291.530332][T16788] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 291.539915][T16788] System zones: 0-2, 18-18, 34-35 [ 291.546555][T16788] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 291.566064][T16788] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4672'. [ 291.579845][T16791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16791 comm=syz.7.4673 [ 291.601343][T12425] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.675231][T16794] SELinux: failed to load policy [ 291.766252][T16813] FAULT_INJECTION: forcing a failure. [ 291.766252][T16813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.775748][T16815] loop8: detected capacity change from 0 to 512 [ 291.779464][T16813] CPU: 1 UID: 0 PID: 16813 Comm: syz.6.4681 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 291.779513][T16813] Tainted: [W]=WARN [ 291.779523][T16813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.779553][T16813] Call Trace: [ 291.779563][T16813] [ 291.779575][T16813] __dump_stack+0x1d/0x30 [ 291.779613][T16813] dump_stack_lvl+0xe8/0x140 [ 291.779673][T16813] dump_stack+0x15/0x1b [ 291.779698][T16813] should_fail_ex+0x265/0x280 [ 291.779757][T16813] should_fail+0xb/0x20 [ 291.779788][T16813] should_fail_usercopy+0x1a/0x20 [ 291.779848][T16813] _copy_from_iter+0xd2/0xe80 [ 291.779889][T16813] ? mntput_no_expire+0x6f/0x460 [ 291.779941][T16813] ? mntput+0x4b/0x80 [ 291.779999][T16813] tun_get_user+0x14d/0x2680 [ 291.780027][T16813] ? path_openat+0x1bf8/0x2170 [ 291.780073][T16813] ? _parse_integer_limit+0x170/0x190 [ 291.780166][T16813] ? ref_tracker_alloc+0x1f2/0x2f0 [ 291.780207][T16813] ? selinux_file_permission+0x1e4/0x320 [ 291.780240][T16813] tun_chr_write_iter+0x15e/0x210 [ 291.780318][T16813] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 291.780344][T16813] vfs_write+0x52a/0x960 [ 291.780434][T16813] ksys_write+0xda/0x1a0 [ 291.780470][T16813] __x64_sys_write+0x40/0x50 [ 291.780504][T16813] x64_sys_call+0x27fe/0x2ff0 [ 291.780535][T16813] do_syscall_64+0xd2/0x200 [ 291.780609][T16813] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 291.780645][T16813] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 291.780721][T16813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.780753][T16813] RIP: 0033:0x7feae9aaeba9 [ 291.780775][T16813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.780809][T16813] RSP: 002b:00007feae8517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 291.780836][T16813] RAX: ffffffffffffffda RBX: 00007feae9cf5fa0 RCX: 00007feae9aaeba9 [ 291.780855][T16813] RDX: 000000000000004a RSI: 0000200000000680 RDI: 0000000000000003 [ 291.780873][T16813] RBP: 00007feae8517090 R08: 0000000000000000 R09: 0000000000000000 [ 291.780893][T16813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.780912][T16813] R13: 00007feae9cf6038 R14: 00007feae9cf5fa0 R15: 00007ffd4e450e88 [ 291.781004][T16813] [ 292.013983][T16815] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 292.028064][T16815] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.4683: iget: bad i_size value: 360287970189639680 [ 292.043321][T16815] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.4683: couldn't read orphan inode 15 (err -117) [ 292.056827][T16815] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.102328][T12425] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.130540][T16822] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4685'. [ 292.441993][ T9209] bridge0: port 1(syz_tun) entered disabled state [ 292.472110][ T9209] syz_tun (unregistering): left allmulticast mode [ 292.478712][ T9209] syz_tun (unregistering): left promiscuous mode [ 292.485136][ T9209] bridge0: port 1(syz_tun) entered disabled state [ 292.578189][T16863] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4699'. [ 292.604984][T16853] lo speed is unknown, defaulting to 1000 [ 292.631775][T16853] lo speed is unknown, defaulting to 1000 [ 292.768805][T16874] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4701'. [ 292.897049][T11490] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 292.922304][T11490] hid-generic 0000:0000:0000.0058: hidraw0: HID v0.00 Device [syz1] on syz0 [ 292.972964][ T6844] bond0 (unregistering): Released all slaves [ 293.053539][T16892] loop8: detected capacity change from 0 to 512 [ 293.075526][ T6844] tipc: Disabling bearer [ 293.080823][ T6844] tipc: Disabling bearer [ 293.086214][ T6844] tipc: Left network mode [ 293.092323][T16892] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 293.101507][T16892] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 293.114684][T16853] chnl_net:caif_netlink_parms(): no params data found [ 293.160039][T16892] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 293.189654][T16892] System zones: 0-2, 18-18, 34-35 [ 293.195425][T16892] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 293.215475][ T6844] hsr_slave_0: left promiscuous mode [ 293.222743][T16892] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4709'. [ 293.232290][ T6844] hsr_slave_1: left promiscuous mode [ 293.251460][ T6844] pimreg (unregistering): left allmulticast mode [ 293.275641][T12425] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.291664][T16898] SELinux: failed to load policy [ 293.357753][T16902] FAULT_INJECTION: forcing a failure. [ 293.357753][T16902] name failslab, interval 1, probability 0, space 0, times 0 [ 293.370508][T16902] CPU: 0 UID: 0 PID: 16902 Comm: syz.7.4712 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 293.370549][T16902] Tainted: [W]=WARN [ 293.370557][T16902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 293.370622][T16902] Call Trace: [ 293.370630][T16902] [ 293.370640][T16902] __dump_stack+0x1d/0x30 [ 293.370708][T16902] dump_stack_lvl+0xe8/0x140 [ 293.370731][T16902] dump_stack+0x15/0x1b [ 293.370749][T16902] should_fail_ex+0x265/0x280 [ 293.370777][T16902] should_failslab+0x8c/0xb0 [ 293.370806][T16902] __kmalloc_noprof+0xa5/0x3e0 [ 293.370866][T16902] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 293.370908][T16902] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 293.371001][T16902] genl_family_rcv_msg_doit+0x48/0x1b0 [ 293.371133][T16902] ? selinux_capable+0x31/0x40 [ 293.371166][T16902] ? security_capable+0x83/0x90 [ 293.371194][T16902] ? ns_capable+0x7d/0xb0 [ 293.371218][T16902] genl_rcv_msg+0x422/0x460 [ 293.371371][T16902] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 293.371406][T16902] netlink_rcv_skb+0x120/0x220 [ 293.371460][T16902] ? __pfx_genl_rcv_msg+0x10/0x10 [ 293.371569][T16902] genl_rcv+0x28/0x40 [ 293.371603][T16902] netlink_unicast+0x5c0/0x690 [ 293.371628][T16902] netlink_sendmsg+0x58b/0x6b0 [ 293.371657][T16902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.371759][T16902] __sock_sendmsg+0x142/0x180 [ 293.371795][T16902] ____sys_sendmsg+0x31e/0x4e0 [ 293.371907][T16902] ___sys_sendmsg+0x17b/0x1d0 [ 293.371955][T16902] __x64_sys_sendmsg+0xd4/0x160 [ 293.371996][T16902] x64_sys_call+0x191e/0x2ff0 [ 293.372037][T16902] do_syscall_64+0xd2/0x200 [ 293.372125][T16902] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 293.372150][T16902] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 293.372208][T16902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.372311][T16902] RIP: 0033:0x7f43959ceba9 [ 293.372332][T16902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.372356][T16902] RSP: 002b:00007f439442f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.372380][T16902] RAX: ffffffffffffffda RBX: 00007f4395c15fa0 RCX: 00007f43959ceba9 [ 293.372395][T16902] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 293.372408][T16902] RBP: 00007f439442f090 R08: 0000000000000000 R09: 0000000000000000 [ 293.372420][T16902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.372483][T16902] R13: 00007f4395c16038 R14: 00007f4395c15fa0 R15: 00007ffdfdb36678 [ 293.372503][T16902] [ 293.741886][T16853] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.749057][T16853] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.763624][T16915] SELinux: failed to load policy [ 293.780091][T16853] bridge_slave_0: entered allmulticast mode [ 293.786649][T16853] bridge_slave_0: entered promiscuous mode [ 293.801222][T16853] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.808306][T16853] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.819522][T16853] bridge_slave_1: entered allmulticast mode [ 293.827321][T16853] bridge_slave_1: entered promiscuous mode [ 293.853062][T16922] netlink: 'syz.0.4719': attribute type 13 has an invalid length. [ 293.870579][T16853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.881833][T16922] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4719'. [ 293.895239][T16853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.916185][T11506] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 293.965088][T11506] hid-generic 0000:0000:0000.0059: hidraw0: HID v0.00 Device [syz1] on syz0 [ 293.984331][T16853] team0: Port device team_slave_0 added [ 293.991304][T16853] team0: Port device team_slave_1 added [ 294.045387][T16853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.052492][T16853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.078589][T16853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.121753][T16938] netlink: 26 bytes leftover after parsing attributes in process `syz.0.4725'. [ 294.134352][T16853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.141318][T16853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.167346][T16853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.212848][T16853] hsr_slave_0: entered promiscuous mode [ 294.219444][T16853] hsr_slave_1: entered promiscuous mode [ 294.225416][T16853] debugfs: 'hsr0' already exists in 'hsr' [ 294.231238][T16853] Cannot create hsr debugfs directory [ 294.240164][T16945] FAULT_INJECTION: forcing a failure. [ 294.240164][T16945] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 294.253514][T16945] CPU: 0 UID: 0 PID: 16945 Comm: syz.4.4727 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 294.253587][T16945] Tainted: [W]=WARN [ 294.253595][T16945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.253609][T16945] Call Trace: [ 294.253616][T16945] [ 294.253623][T16945] __dump_stack+0x1d/0x30 [ 294.253647][T16945] dump_stack_lvl+0xe8/0x140 [ 294.253703][T16945] dump_stack+0x15/0x1b [ 294.253725][T16945] should_fail_ex+0x265/0x280 [ 294.253757][T16945] should_fail_alloc_page+0xf2/0x100 [ 294.253789][T16945] __alloc_frozen_pages_noprof+0xff/0x360 [ 294.253911][T16945] alloc_pages_mpol+0xb3/0x250 [ 294.253960][T16945] alloc_pages_noprof+0x90/0x130 [ 294.253999][T16945] __pmd_alloc+0x47/0x470 [ 294.254025][T16945] handle_mm_fault+0x19d4/0x2c20 [ 294.254091][T16945] ? check_vma_flags+0x26e/0x340 [ 294.254127][T16945] __get_user_pages+0x102e/0x1fa0 [ 294.254168][T16945] ? vma_link+0x1d4/0x220 [ 294.254201][T16945] get_user_pages_remote+0x1d5/0x6d0 [ 294.254308][T16945] ? down_read+0x77/0xe0 [ 294.254348][T16945] get_arg_page+0x8e/0x1e0 [ 294.254374][T16945] copy_string_kernel+0x12c/0x1f0 [ 294.254403][T16945] do_execveat_common+0x5ad/0x750 [ 294.254509][T16945] __x64_sys_execve+0x5c/0x70 [ 294.254535][T16945] x64_sys_call+0x2716/0x2ff0 [ 294.254563][T16945] do_syscall_64+0xd2/0x200 [ 294.254605][T16945] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 294.254675][T16945] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 294.254716][T16945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.254741][T16945] RIP: 0033:0x7f7ada3ceba9 [ 294.254756][T16945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.254774][T16945] RSP: 002b:00007f7ad8e37038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 294.254815][T16945] RAX: ffffffffffffffda RBX: 00007f7ada615fa0 RCX: 00007f7ada3ceba9 [ 294.254832][T16945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 294.254848][T16945] RBP: 00007f7ad8e37090 R08: 0000000000000000 R09: 0000000000000000 [ 294.254861][T16945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 294.254887][T16945] R13: 00007f7ada616038 R14: 00007f7ada615fa0 R15: 00007fff67bfc228 [ 294.254909][T16945] [ 294.516760][T16950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4729'. [ 294.538711][T16950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4729'. [ 294.558409][T16953] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4730'. [ 294.591960][T16953] FAULT_INJECTION: forcing a failure. [ 294.591960][T16953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.605174][T16953] CPU: 1 UID: 0 PID: 16953 Comm: syz.7.4730 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 294.605261][T16953] Tainted: [W]=WARN [ 294.605271][T16953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.605365][T16953] Call Trace: [ 294.605371][T16953] [ 294.605381][T16953] __dump_stack+0x1d/0x30 [ 294.605408][T16953] dump_stack_lvl+0xe8/0x140 [ 294.605433][T16953] dump_stack+0x15/0x1b [ 294.605452][T16953] should_fail_ex+0x265/0x280 [ 294.605544][T16953] should_fail+0xb/0x20 [ 294.605572][T16953] should_fail_usercopy+0x1a/0x20 [ 294.605660][T16953] _copy_from_user+0x1c/0xb0 [ 294.605743][T16953] ___sys_sendmsg+0xc1/0x1d0 [ 294.605785][T16953] __x64_sys_sendmsg+0xd4/0x160 [ 294.605824][T16953] x64_sys_call+0x191e/0x2ff0 [ 294.605906][T16953] do_syscall_64+0xd2/0x200 [ 294.605939][T16953] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 294.605992][T16953] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 294.606084][T16953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.606112][T16953] RIP: 0033:0x7f43959ceba9 [ 294.606129][T16953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.606157][T16953] RSP: 002b:00007f439442f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.606180][T16953] RAX: ffffffffffffffda RBX: 00007f4395c15fa0 RCX: 00007f43959ceba9 [ 294.606192][T16953] RDX: 0000000004000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 294.606205][T16953] RBP: 00007f439442f090 R08: 0000000000000000 R09: 0000000000000000 [ 294.606266][T16953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.606277][T16953] R13: 00007f4395c16038 R14: 00007f4395c15fa0 R15: 00007ffdfdb36678 [ 294.606378][T16953] [ 294.801157][T16956] pimreg: left allmulticast mode [ 294.947979][T16968] SELinux: failed to load policy [ 295.035265][T11506] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 295.043444][T11506] hid-generic 0000:0000:0000.005A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 295.093739][T16853] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 295.116036][T16853] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 295.135212][T16853] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 295.154159][T16853] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 295.242363][T16853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.270642][T16853] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.294682][T16984] lo speed is unknown, defaulting to 1000 [ 295.302276][ T6844] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.309422][ T6844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.318610][T16985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16985 comm=syz.8.4740 [ 295.337340][T16984] lo speed is unknown, defaulting to 1000 [ 295.338675][ T6844] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.350289][ T6844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.400752][T16853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.518496][T16853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.775795][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 295.775894][ T29] audit: type=1326 audit(1757927256.209:19410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.7.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43959ceba9 code=0x7ffc0000 [ 295.836443][ T29] audit: type=1326 audit(1757927256.209:19411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.7.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43959ceba9 code=0x7ffc0000 [ 295.860144][ T29] audit: type=1326 audit(1757927256.240:19412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.7.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f43959ceba9 code=0x7ffc0000 [ 295.883821][ T29] audit: type=1326 audit(1757927256.240:19413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.7.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43959ceba9 code=0x7ffc0000 [ 295.907472][ T29] audit: type=1326 audit(1757927256.240:19414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.7.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43959ceba9 code=0x7ffc0000 [ 295.931126][ T29] audit: type=1326 audit(1757927256.251:19415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.7.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43959ceba9 code=0x7ffc0000 [ 295.944818][T16853] veth0_vlan: entered promiscuous mode [ 295.954746][ T29] audit: type=1326 audit(1757927256.251:19416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.7.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43959ceba9 code=0x7ffc0000 [ 295.983734][ T29] audit: type=1326 audit(1757927256.251:19417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.7.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43959ceba9 code=0x7ffc0000 [ 296.007570][ T29] audit: type=1326 audit(1757927256.251:19418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.7.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43959ceba9 code=0x7ffc0000 [ 296.031311][ T29] audit: type=1326 audit(1757927256.251:19419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.7.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43959ceba9 code=0x7ffc0000 [ 296.069524][T16853] veth1_vlan: entered promiscuous mode [ 296.122205][T11506] hid-generic 0000:0000:0000.005B: unknown main item tag 0x0 [ 296.130738][T11506] hid-generic 0000:0000:0000.005B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 296.145121][T16853] veth0_macvtap: entered promiscuous mode [ 296.166708][T16853] veth1_macvtap: entered promiscuous mode [ 296.195169][T17031] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4752'. [ 296.238864][T16853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.283850][T16853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.297970][ T2617] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.298022][ T2617] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.298074][ T2617] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.298110][ T2617] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.299659][T17040] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4756'. [ 296.759726][T17076] lo speed is unknown, defaulting to 1000 [ 296.760194][T17076] lo speed is unknown, defaulting to 1000 [ 296.791320][T17083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17083 comm=syz.8.4770 [ 296.992850][T17088] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4773'. [ 297.050564][T11506] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 297.058026][T11506] hid-generic 0000:0000:0000.005C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 297.488936][T17114] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4783'. [ 297.634206][T17114] infiniband syz!: set down [ 297.638833][T17114] infiniband syz!: added team_slave_0 [ 297.671226][T17114] RDS/IB: syz!: added [ 297.682152][T17114] smc: adding ib device syz! with port count 1 [ 297.698156][T17114] smc: ib device syz! port 1 has pnetid [ 297.731537][T17107] SELinux: policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c [ 297.772892][T17107] SELinux: failed to load policy [ 297.778089][T17137] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 297.789916][T17131] loop8: detected capacity change from 0 to 512 [ 297.826641][T17131] EXT4-fs: Ignoring removed oldalloc option [ 297.838821][T11506] hid-generic 0000:0000:0000.005D: unknown main item tag 0x0 [ 297.857437][T11506] hid-generic 0000:0000:0000.005D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 297.862822][T17140] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 297.885458][T17131] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.4780: Parent and EA inode have the same ino 15 [ 297.927901][T17131] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.4780: Parent and EA inode have the same ino 15 [ 297.988253][T17131] EXT4-fs (loop8): 1 orphan inode deleted [ 298.019339][T17131] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.081348][T17107] EXT4-fs error (device loop8): ext4_rename:3812: inode #15: comm syz.8.4780: target of rename is already freed [ 298.285045][T17163] lo speed is unknown, defaulting to 1000 [ 298.297445][T17163] lo speed is unknown, defaulting to 1000 [ 298.298968][T12425] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.343533][T17169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17169 comm=syz.7.4803 [ 298.704376][T17205] FAULT_INJECTION: forcing a failure. [ 298.704376][T17205] name failslab, interval 1, probability 0, space 0, times 0 [ 298.718442][T17205] CPU: 1 UID: 0 PID: 17205 Comm: syz.7.4821 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 298.718530][T17205] Tainted: [W]=WARN [ 298.718538][T17205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.718551][T17205] Call Trace: [ 298.718558][T17205] [ 298.718614][T17205] __dump_stack+0x1d/0x30 [ 298.718701][T17205] dump_stack_lvl+0xe8/0x140 [ 298.718729][T17205] dump_stack+0x15/0x1b [ 298.718801][T17205] should_fail_ex+0x265/0x280 [ 298.718872][T17205] should_failslab+0x8c/0xb0 [ 298.718907][T17205] kmem_cache_alloc_node_noprof+0x57/0x320 [ 298.719013][T17205] ? __alloc_skb+0x101/0x320 [ 298.719041][T17205] __alloc_skb+0x101/0x320 [ 298.719072][T17205] netlink_alloc_large_skb+0xba/0xf0 [ 298.719106][T17205] netlink_sendmsg+0x3cf/0x6b0 [ 298.719144][T17205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.719187][T17205] __sock_sendmsg+0x142/0x180 [ 298.719271][T17205] ____sys_sendmsg+0x31e/0x4e0 [ 298.719301][T17205] ___sys_sendmsg+0x17b/0x1d0 [ 298.719345][T17205] __x64_sys_sendmsg+0xd4/0x160 [ 298.719376][T17205] x64_sys_call+0x191e/0x2ff0 [ 298.719464][T17205] do_syscall_64+0xd2/0x200 [ 298.719581][T17205] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 298.719606][T17205] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 298.719690][T17205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.719753][T17205] RIP: 0033:0x7f43959ceba9 [ 298.719774][T17205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.719796][T17205] RSP: 002b:00007f439442f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.719886][T17205] RAX: ffffffffffffffda RBX: 00007f4395c15fa0 RCX: 00007f43959ceba9 [ 298.719899][T17205] RDX: 00000000000000c4 RSI: 0000200000000100 RDI: 000000000000000d [ 298.719982][T17205] RBP: 00007f439442f090 R08: 0000000000000000 R09: 0000000000000000 [ 298.719998][T17205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.720014][T17205] R13: 00007f4395c16038 R14: 00007f4395c15fa0 R15: 00007ffdfdb36678 [ 298.720040][T17205] [ 298.956234][T17192] netlink: 'syz.0.4816': attribute type 10 has an invalid length. [ 298.964295][T17192] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4816'. [ 299.159047][T17192] batman_adv: batadv0: Adding interface: macvlan0 [ 299.165688][T17192] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.230646][T17192] batman_adv: batadv0: Interface activated: macvlan0 [ 299.245502][T17224] pimreg: entered allmulticast mode [ 299.351243][T17234] lo speed is unknown, defaulting to 1000 [ 299.362129][T17234] lo speed is unknown, defaulting to 1000 [ 299.826622][T17260] lo speed is unknown, defaulting to 1000 [ 299.833457][T17260] lo speed is unknown, defaulting to 1000 [ 299.945126][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a84d400: rx timeout, send abort [ 299.953386][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881232d5200: rx timeout, send abort [ 299.961924][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a84d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 299.976353][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881232d5200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 300.470826][T17270] pimreg: left allmulticast mode [ 300.638469][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 300.638535][ T29] audit: type=1400 audit(1757927261.300:19625): avc: denied { accept } for pid=17275 comm="syz.6.4844" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 300.665327][ T29] audit: type=1400 audit(1757927261.300:19626): avc: denied { getopt } for pid=17275 comm="syz.6.4844" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 300.686021][ T29] audit: type=1400 audit(1757927261.300:19627): avc: denied { create } for pid=17275 comm="syz.6.4844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 300.897897][ T29] audit: type=1326 audit(1757927261.437:19628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17267 comm="syz.8.4841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200d5beba9 code=0x7ffc0000 [ 300.922278][ T29] audit: type=1326 audit(1757927261.437:19629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17267 comm="syz.8.4841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200d5beba9 code=0x7ffc0000 [ 300.946298][ T29] audit: type=1326 audit(1757927261.437:19630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17267 comm="syz.8.4841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f200d5beba9 code=0x7ffc0000 [ 300.970133][ T29] audit: type=1326 audit(1757927261.437:19631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17267 comm="syz.8.4841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200d5beba9 code=0x7ffc0000 [ 300.994160][ T29] audit: type=1326 audit(1757927261.437:19632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17267 comm="syz.8.4841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200d5beba9 code=0x7ffc0000 [ 301.018367][ T29] audit: type=1400 audit(1757927261.584:19633): avc: denied { ioctl } for pid=17289 comm="syz.4.4850" path="socket:[61032]" dev="sockfs" ino=61032 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 301.043514][ T29] audit: type=1400 audit(1757927261.584:19634): avc: denied { setopt } for pid=17289 comm="syz.4.4850" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 301.151214][ T8558] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 301.164008][ T8558] hid-generic 0000:0000:0000.005E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 301.457479][T17312] syzkaller0: entered allmulticast mode [ 301.471340][T17312] syzkaller0 (unregistering): left allmulticast mode [ 301.793322][T17337] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4869'. [ 301.921552][T17356] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 301.928241][T17356] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 301.935827][T17356] vhci_hcd vhci_hcd.0: Device attached [ 302.047161][T17361] FAULT_INJECTION: forcing a failure. [ 302.047161][T17361] name failslab, interval 1, probability 0, space 0, times 0 [ 302.059882][T17361] CPU: 0 UID: 0 PID: 17361 Comm: syz.4.4875 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 302.059926][T17361] Tainted: [W]=WARN [ 302.059935][T17361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.059949][T17361] Call Trace: [ 302.059955][T17361] [ 302.059962][T17361] __dump_stack+0x1d/0x30 [ 302.059985][T17361] dump_stack_lvl+0xe8/0x140 [ 302.060007][T17361] dump_stack+0x15/0x1b [ 302.060029][T17361] should_fail_ex+0x265/0x280 [ 302.060106][T17361] should_failslab+0x8c/0xb0 [ 302.060154][T17361] kmem_cache_alloc_node_noprof+0x57/0x320 [ 302.060249][T17361] ? __alloc_skb+0x101/0x320 [ 302.060277][T17361] ? __alloc_skb+0x3c/0x320 [ 302.060304][T17361] __alloc_skb+0x101/0x320 [ 302.060330][T17361] netlink_alloc_large_skb+0xba/0xf0 [ 302.060443][T17361] netlink_sendmsg+0x3cf/0x6b0 [ 302.060482][T17361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.060592][T17361] __sock_sendmsg+0x142/0x180 [ 302.060638][T17361] ____sys_sendmsg+0x31e/0x4e0 [ 302.060678][T17361] ___sys_sendmsg+0x17b/0x1d0 [ 302.060728][T17361] __x64_sys_sendmsg+0xd4/0x160 [ 302.060779][T17361] x64_sys_call+0x191e/0x2ff0 [ 302.060804][T17361] do_syscall_64+0xd2/0x200 [ 302.060840][T17361] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 302.060912][T17361] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 302.060948][T17361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.060969][T17361] RIP: 0033:0x7f7ada3ceba9 [ 302.060989][T17361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.061018][T17361] RSP: 002b:00007f7ad8e16038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.061042][T17361] RAX: ffffffffffffffda RBX: 00007f7ada616090 RCX: 00007f7ada3ceba9 [ 302.061059][T17361] RDX: 00000000040400d0 RSI: 0000200000001200 RDI: 0000000000000009 [ 302.061075][T17361] RBP: 00007f7ad8e16090 R08: 0000000000000000 R09: 0000000000000000 [ 302.061091][T17361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.061157][T17361] R13: 00007f7ada616128 R14: 00007f7ada616090 R15: 00007fff67bfc228 [ 302.061190][T17361] [ 302.171900][ T23] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 302.528259][T17380] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4886'. [ 302.570124][T17384] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4888'. [ 302.723157][T17357] vhci_hcd: connection reset by peer [ 302.733031][ T2617] vhci_hcd: stop threads [ 302.737439][ T2617] vhci_hcd: release socket [ 302.741952][ T2617] vhci_hcd: disconnect device [ 302.764585][T17406] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4900'. [ 302.793321][T17411] pimreg: entered allmulticast mode [ 302.801636][T17411] pimreg: left allmulticast mode [ 302.937866][T17426] netlink: 'syz.8.4906': attribute type 1 has an invalid length. [ 302.958400][T17426] bond1: entered promiscuous mode [ 302.968032][T17426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 302.990311][T17426] 8021q: adding VLAN 0 to HW filter on device bond2 [ 303.000399][T17426] bond1: (slave bond2): making interface the new active one [ 303.007766][T17426] bond2: entered promiscuous mode [ 303.014952][T17426] bond1: (slave bond2): Enslaving as an active interface with an up link [ 303.215961][T17435] dvmrp8: entered allmulticast mode [ 303.614882][T17453] pimreg: entered allmulticast mode [ 303.639439][T17455] pimreg: left allmulticast mode [ 304.045378][T17490] pimreg: entered allmulticast mode [ 304.067195][T17495] new mount options do not match the existing superblock, will be ignored [ 304.126168][T17496] pimreg: left allmulticast mode [ 304.131298][T17496] dvmrp8: left allmulticast mode [ 304.423033][T17518] netlink: 'syz.4.4942': attribute type 13 has an invalid length. [ 304.438864][T17518] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4942'. [ 304.476418][T17506] loop8: detected capacity change from 0 to 8192 [ 304.488911][T11490] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 304.519194][T11490] hid-generic 0000:0000:0000.005F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 304.536015][T17506] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 304.611570][T17528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17528 comm=syz.0.4946 [ 304.642505][T17525] lo speed is unknown, defaulting to 1000 [ 304.662280][T17525] lo speed is unknown, defaulting to 1000 [ 304.837709][T17532] lo speed is unknown, defaulting to 1000 [ 304.863866][T17533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17533 comm=syz.7.4947 [ 304.916893][T17532] lo speed is unknown, defaulting to 1000 [ 305.178085][T17552] FAULT_INJECTION: forcing a failure. [ 305.178085][T17552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.191367][T17552] CPU: 1 UID: 0 PID: 17552 Comm: syz.6.4953 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 305.191434][T17552] Tainted: [W]=WARN [ 305.191443][T17552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 305.191459][T17552] Call Trace: [ 305.191468][T17552] [ 305.191478][T17552] __dump_stack+0x1d/0x30 [ 305.191554][T17552] dump_stack_lvl+0xe8/0x140 [ 305.191579][T17552] dump_stack+0x15/0x1b [ 305.191600][T17552] should_fail_ex+0x265/0x280 [ 305.191633][T17552] should_fail+0xb/0x20 [ 305.191677][T17552] should_fail_usercopy+0x1a/0x20 [ 305.191703][T17552] _copy_from_user+0x1c/0xb0 [ 305.191734][T17552] __sys_bpf+0x178/0x7b0 [ 305.191778][T17552] __x64_sys_bpf+0x41/0x50 [ 305.191823][T17552] x64_sys_call+0x2aea/0x2ff0 [ 305.191850][T17552] do_syscall_64+0xd2/0x200 [ 305.191945][T17552] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 305.191978][T17552] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 305.192058][T17552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.192080][T17552] RIP: 0033:0x7f9634a9eba9 [ 305.192100][T17552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.192124][T17552] RSP: 002b:00007f9633507038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.192147][T17552] RAX: ffffffffffffffda RBX: 00007f9634ce5fa0 RCX: 00007f9634a9eba9 [ 305.192163][T17552] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 305.192184][T17552] RBP: 00007f9633507090 R08: 0000000000000000 R09: 0000000000000000 [ 305.192244][T17552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.192256][T17552] R13: 00007f9634ce6038 R14: 00007f9634ce5fa0 R15: 00007fff24b6a4e8 [ 305.192278][T17552] [ 305.408083][T17558] rtc_cmos 00:00: Alarms can be up to one day in the future [ 305.416040][ T29] kauditd_printk_skb: 398 callbacks suppressed [ 305.416079][ T29] audit: type=1400 audit(1757927266.329:20033): avc: denied { unmount } for pid=12425 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 305.416226][T17561] netlink: 'syz.4.4955': attribute type 13 has an invalid length. [ 305.731012][T17586] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 305.789376][ T29] audit: type=1326 audit(1757927266.717:20034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17590 comm="syz.8.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200d5beba9 code=0x7ffc0000 [ 305.844189][ T29] audit: type=1326 audit(1757927266.717:20035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17590 comm="syz.8.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200d5beba9 code=0x7ffc0000 [ 305.867959][ T29] audit: type=1326 audit(1757927266.717:20036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17590 comm="syz.8.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f200d5beba9 code=0x7ffc0000 [ 305.891696][ T29] audit: type=1326 audit(1757927266.717:20037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17590 comm="syz.8.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200d5beba9 code=0x7ffc0000 [ 305.915455][ T29] audit: type=1326 audit(1757927266.717:20038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17590 comm="syz.8.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200d5beba9 code=0x7ffc0000 [ 305.917819][T17591] loop8: detected capacity change from 0 to 512 [ 305.939097][ T29] audit: type=1326 audit(1757927266.717:20039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17590 comm="syz.8.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f200d5beba9 code=0x7ffc0000 [ 305.969116][ T29] audit: type=1326 audit(1757927266.749:20040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17590 comm="syz.8.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200d5beba9 code=0x7ffc0000 [ 305.970888][T17591] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 305.992984][ T29] audit: type=1326 audit(1757927266.780:20041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17590 comm="syz.8.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f200d5beba9 code=0x7ffc0000 [ 305.993023][ T29] audit: type=1326 audit(1757927266.780:20042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17590 comm="syz.8.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200d5beba9 code=0x7ffc0000 [ 306.050506][T17591] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.4968: iget: bad i_size value: 360287970189639680 [ 306.067673][T17591] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.4968: couldn't read orphan inode 15 (err -117) [ 306.081333][T17591] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.161238][T12425] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.218384][T17610] netlink: 'syz.8.4971': attribute type 13 has an invalid length. [ 306.228079][T17586] rtc_cmos 00:00: Alarms can be up to one day in the future [ 306.282808][T17616] FAULT_INJECTION: forcing a failure. [ 306.282808][T17616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.296008][T17616] CPU: 1 UID: 0 PID: 17616 Comm: syz.8.4976 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 306.296126][T17616] Tainted: [W]=WARN [ 306.296135][T17616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.296152][T17616] Call Trace: [ 306.296159][T17616] [ 306.296166][T17616] __dump_stack+0x1d/0x30 [ 306.296205][T17616] dump_stack_lvl+0xe8/0x140 [ 306.296267][T17616] dump_stack+0x15/0x1b [ 306.296287][T17616] should_fail_ex+0x265/0x280 [ 306.296319][T17616] should_fail+0xb/0x20 [ 306.296359][T17616] should_fail_usercopy+0x1a/0x20 [ 306.296396][T17616] _copy_to_user+0x20/0xa0 [ 306.296436][T17616] simple_read_from_buffer+0xb5/0x130 [ 306.296501][T17616] proc_fail_nth_read+0x10e/0x150 [ 306.296538][T17616] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.296572][T17616] vfs_read+0x1a8/0x770 [ 306.296599][T17616] ? __rcu_read_unlock+0x4f/0x70 [ 306.296624][T17616] ? __fget_files+0x184/0x1c0 [ 306.296712][T17616] ksys_read+0xda/0x1a0 [ 306.296792][T17616] __x64_sys_read+0x40/0x50 [ 306.296817][T17616] x64_sys_call+0x27bc/0x2ff0 [ 306.296841][T17616] do_syscall_64+0xd2/0x200 [ 306.296877][T17616] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 306.296925][T17616] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 306.296979][T17616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.297007][T17616] RIP: 0033:0x7f200d5bd5bc [ 306.297026][T17616] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 306.297125][T17616] RSP: 002b:00007f200c01f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 306.297151][T17616] RAX: ffffffffffffffda RBX: 00007f200d805fa0 RCX: 00007f200d5bd5bc [ 306.297168][T17616] RDX: 000000000000000f RSI: 00007f200c01f0a0 RDI: 0000000000000004 [ 306.297184][T17616] RBP: 00007f200c01f090 R08: 0000000000000000 R09: 0000000000000000 [ 306.297200][T17616] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.297233][T17616] R13: 00007f200d806038 R14: 00007f200d805fa0 R15: 00007fff75756498 [ 306.297259][T17616] [ 306.574496][T17629] loop8: detected capacity change from 0 to 512 [ 306.578093][T17630] netlink: 340 bytes leftover after parsing attributes in process `syz.4.4982'. [ 306.590301][T17629] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 306.599459][T17629] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 306.616502][T17629] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 306.630083][T17629] System zones: 0-2, 18-18, 34-35 [ 306.643106][T17629] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 306.668037][T17637] netlink: 'syz.7.4986': attribute type 13 has an invalid length. [ 306.678456][T17629] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4981'. [ 306.741856][T12425] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.780700][T11490] rtc_cmos 00:00: Alarms can be up to one day in the future [ 306.788612][T11490] rtc_cmos 00:00: Alarms can be up to one day in the future [ 306.796304][T11490] rtc_cmos 00:00: Alarms can be up to one day in the future [ 306.803965][T11490] rtc_cmos 00:00: Alarms can be up to one day in the future [ 306.811346][T11490] rtc rtc0: __rtc_set_alarm: err=-22 [ 306.881104][T17651] pimreg: entered allmulticast mode [ 306.910234][T17651] pimreg: left allmulticast mode [ 306.911456][T17655] hub 9-0:1.0: USB hub found [ 306.922014][T17655] hub 9-0:1.0: 8 ports detected [ 306.934919][T17657] FAULT_INJECTION: forcing a failure. [ 306.934919][T17657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.948077][T17657] CPU: 0 UID: 0 PID: 17657 Comm: syz.4.4995 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 306.948111][T17657] Tainted: [W]=WARN [ 306.948150][T17657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.948166][T17657] Call Trace: [ 306.948173][T17657] [ 306.948183][T17657] __dump_stack+0x1d/0x30 [ 306.948206][T17657] dump_stack_lvl+0xe8/0x140 [ 306.948229][T17657] dump_stack+0x15/0x1b [ 306.948251][T17657] should_fail_ex+0x265/0x280 [ 306.948357][T17657] should_fail+0xb/0x20 [ 306.948379][T17657] should_fail_usercopy+0x1a/0x20 [ 306.948412][T17657] _copy_from_user+0x1c/0xb0 [ 306.948478][T17657] get_nodes+0x104/0x290 [ 306.948506][T17657] __se_sys_migrate_pages+0x75/0x320 [ 306.948586][T17657] __x64_sys_migrate_pages+0x55/0x70 [ 306.948618][T17657] x64_sys_call+0x24d2/0x2ff0 [ 306.948640][T17657] do_syscall_64+0xd2/0x200 [ 306.948685][T17657] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 306.948747][T17657] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 306.948787][T17657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.948810][T17657] RIP: 0033:0x7f7ada3ceba9 [ 306.948826][T17657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.948866][T17657] RSP: 002b:00007f7ad8e37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 306.948889][T17657] RAX: ffffffffffffffda RBX: 00007f7ada615fa0 RCX: 00007f7ada3ceba9 [ 306.948912][T17657] RDX: 0000000000000000 RSI: 00000000000000fc RDI: 0000000000000000 [ 306.948928][T17657] RBP: 00007f7ad8e37090 R08: 0000000000000000 R09: 0000000000000000 [ 306.948941][T17657] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 306.948988][T17657] R13: 00007f7ada616038 R14: 00007f7ada615fa0 R15: 00007fff67bfc228 [ 306.949014][T17657] [ 307.134504][ T23] usb 13-1: enqueue for inactive port 0 [ 307.140194][ T23] usb 13-1: enqueue for inactive port 0 [ 307.203293][T11506] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 307.210916][ T23] vhci_hcd: vhci_device speed not set [ 307.218188][T11506] hid-generic 0000:0000:0000.0060: hidraw0: HID v0.00 Device [syz1] on syz0 [ 307.284175][T17673] netlink: 'syz.4.5001': attribute type 13 has an invalid length. [ 307.322154][T17673] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5001'. [ 307.520546][T17695] FAULT_INJECTION: forcing a failure. [ 307.520546][T17695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.533757][T17695] CPU: 0 UID: 0 PID: 17695 Comm: syz.8.5012 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 307.533796][T17695] Tainted: [W]=WARN [ 307.533805][T17695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 307.533844][T17695] Call Trace: [ 307.533852][T17695] [ 307.533861][T17695] __dump_stack+0x1d/0x30 [ 307.533888][T17695] dump_stack_lvl+0xe8/0x140 [ 307.533911][T17695] dump_stack+0x15/0x1b [ 307.533933][T17695] should_fail_ex+0x265/0x280 [ 307.533996][T17695] should_fail+0xb/0x20 [ 307.534059][T17695] should_fail_usercopy+0x1a/0x20 [ 307.534094][T17695] _copy_to_user+0x20/0xa0 [ 307.534137][T17695] simple_read_from_buffer+0xb5/0x130 [ 307.534171][T17695] proc_fail_nth_read+0x10e/0x150 [ 307.534200][T17695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.534231][T17695] vfs_read+0x1a8/0x770 [ 307.534258][T17695] ? __fput+0x555/0x650 [ 307.534374][T17695] ? __rcu_read_unlock+0x4f/0x70 [ 307.534401][T17695] ? __fget_files+0x184/0x1c0 [ 307.534508][T17695] ksys_read+0xda/0x1a0 [ 307.534538][T17695] __x64_sys_read+0x40/0x50 [ 307.534611][T17695] x64_sys_call+0x27bc/0x2ff0 [ 307.534642][T17695] do_syscall_64+0xd2/0x200 [ 307.534677][T17695] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 307.534701][T17695] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 307.534740][T17695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.534773][T17695] RIP: 0033:0x7f200d5bd5bc [ 307.534788][T17695] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 307.534809][T17695] RSP: 002b:00007f200c01f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 307.534827][T17695] RAX: ffffffffffffffda RBX: 00007f200d805fa0 RCX: 00007f200d5bd5bc [ 307.534901][T17695] RDX: 000000000000000f RSI: 00007f200c01f0a0 RDI: 0000000000000006 [ 307.534918][T17695] RBP: 00007f200c01f090 R08: 0000000000000000 R09: 0000000000000000 [ 307.534934][T17695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.534950][T17695] R13: 00007f200d806038 R14: 00007f200d805fa0 R15: 00007fff75756498 [ 307.535025][T17695] [ 307.781180][T17700] lo speed is unknown, defaulting to 1000 [ 307.788202][T17700] lo speed is unknown, defaulting to 1000 [ 307.794347][T17689] lo speed is unknown, defaulting to 1000 [ 307.822726][T17710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17710 comm=syz.6.5013 [ 307.872442][T17689] lo speed is unknown, defaulting to 1000 [ 307.876156][T17715] bridge0: port 3(syz_tun) entered blocking state [ 307.884839][T17715] bridge0: port 3(syz_tun) entered disabled state [ 307.911905][T17715] syz_tun: entered allmulticast mode [ 307.923993][T17715] syz_tun: entered promiscuous mode [ 307.942754][T17715] bridge0: port 3(syz_tun) entered blocking state [ 307.949368][T17715] bridge0: port 3(syz_tun) entered forwarding state [ 307.964432][T17716] netlink: 'syz.4.5018': attribute type 13 has an invalid length. [ 307.982956][T17716] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5018'. [ 308.069960][T11505] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 308.089431][T11505] hid-generic 0000:0000:0000.0061: hidraw0: HID v0.00 Device [syz1] on syz0 [ 308.271293][T17740] loop8: detected capacity change from 0 to 512 [ 308.280092][T17740] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 308.308058][T17740] EXT4-fs (loop8): 1 truncate cleaned up [ 308.314935][T17740] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.413491][T12425] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.450945][T17749] ref_ctr_offset mismatch. inode: 0x85d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 308.640043][T17756] loop8: detected capacity change from 0 to 512 [ 308.647504][T17756] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 308.659400][T17756] EXT4-fs (loop8): 1 truncate cleaned up [ 308.665522][T17756] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.707589][T12425] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.887998][T17781] can0: slcan on ttyS3. [ 308.896623][ T23] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 308.924804][ T23] hid-generic 0000:0000:0000.0062: hidraw0: HID v0.00 Device [syz1] on syz0 [ 308.936594][T17781] can0 (unregistered): slcan off ttyS3. [ 309.052769][T17797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.085914][T17797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.240485][ T4896] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.279302][T17801] loop8: detected capacity change from 0 to 32768 [ 309.919813][T17838] netlink: 'syz.8.5066': attribute type 10 has an invalid length. [ 309.927785][T17838] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5066'. [ 309.993148][T17838] dummy0: entered promiscuous mode [ 310.067365][T17847] loop8: detected capacity change from 0 to 164 [ 310.168950][T17845] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 310.214223][T17845] syzkaller0: entered promiscuous mode [ 310.219733][T17845] syzkaller0: entered allmulticast mode [ 310.476546][T11312] bridge0: port 3(syz_tun) entered disabled state [ 310.496987][T11312] syz_tun (unregistering): left allmulticast mode [ 310.503503][T11312] syz_tun (unregistering): left promiscuous mode [ 310.509891][T11312] bridge0: port 3(syz_tun) entered disabled state [ 310.568312][T17874] loop8: detected capacity change from 0 to 512 [ 310.578532][T17842] lo speed is unknown, defaulting to 1000 [ 310.596557][T17874] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 310.605740][T17874] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 310.615615][T17842] lo speed is unknown, defaulting to 1000 [ 310.623766][ T4896] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.636674][T17874] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 310.655208][T17874] System zones: 0-2, 18-18, 34-35 [ 310.681844][ T4896] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.704892][T17874] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 310.739023][T17874] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5076'. [ 310.753800][T17879] lo speed is unknown, defaulting to 1000 [ 310.769150][ T4896] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.797033][T12425] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.811873][T17879] lo speed is unknown, defaulting to 1000 [ 310.859041][ T4896] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.912633][T17888] vhci_hcd: default hub control req: 0014 v1000 i0002 l0 [ 311.039467][T17891] netlink: 256 bytes leftover after parsing attributes in process `syz.8.5082'. [ 311.074637][T17842] chnl_net:caif_netlink_parms(): no params data found [ 311.119829][ T4896] bridge_slave_1: left allmulticast mode [ 311.125600][ T4896] bridge_slave_1: left promiscuous mode [ 311.131381][ T4896] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.149327][ T4896] bridge_slave_0: left allmulticast mode [ 311.155280][ T4896] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.262398][ T29] kauditd_printk_skb: 372 callbacks suppressed [ 311.262418][ T29] audit: type=1400 audit(1757927272.470:20415): avc: denied { rmdir } for pid=11713 comm="syz-executor" name="file0" dev="tmpfs" ino=1987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 311.350067][T17911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17911 comm=syz.8.5085 [ 311.356171][T17909] netlink: 'syz.0.5088': attribute type 6 has an invalid length. [ 311.370367][T17909] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5088'. [ 311.461468][ T4896] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.472687][ T4896] bond_slave_0: left promiscuous mode [ 311.479628][ T4896] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.488493][ T4896] bond_slave_1: left promiscuous mode [ 311.494635][ T4896] $Hÿ (unregistering): Released all slaves [ 311.503288][ T4896] bond1 (unregistering): Released all slaves [ 311.512213][ T4896] bond2 (unregistering): Released all slaves [ 311.520974][ T4896] bond3 (unregistering): Released all slaves [ 311.544563][T17904] lo speed is unknown, defaulting to 1000 [ 311.552101][T17904] lo speed is unknown, defaulting to 1000 [ 311.626126][ T4896] tipc: Disabling bearer [ 311.631213][ T4896] tipc: Left network mode [ 311.651450][ T29] audit: type=1326 audit(1757927272.879:20416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17921 comm="syz.4.5090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ada3ceba9 code=0x7ffc0000 [ 311.652189][T17923] audit: audit_lost=18 audit_rate_limit=0 audit_backlog_limit=64 [ 311.682873][T17923] audit: out of memory in audit_log_start [ 311.685543][ T29] audit: type=1326 audit(1757927272.879:20417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17921 comm="syz.4.5090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ada3ceba9 code=0x7ffc0000 [ 311.712345][ T29] audit: type=1326 audit(1757927272.879:20418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17921 comm="syz.4.5090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ada3cd510 code=0x7ffc0000 [ 311.736096][ T29] audit: type=1326 audit(1757927272.879:20419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17921 comm="syz.4.5090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7ada3cd65f code=0x7ffc0000 [ 311.759767][ T29] audit: type=1326 audit(1757927272.879:20420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17921 comm="syz.4.5090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f7ada3ceba9 code=0x7ffc0000 [ 311.785790][ T29] audit: type=1326 audit(1757927272.995:20421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17921 comm="syz.4.5090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7ada3cd65f code=0x7ffc0000 [ 311.809469][ T29] audit: type=1326 audit(1757927272.995:20422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17921 comm="syz.4.5090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7ada3cd80a code=0x7ffc0000 [ 311.913006][ T4896] hsr_slave_0: left promiscuous mode [ 311.933769][ T4896] hsr_slave_1: left promiscuous mode [ 311.940219][ T4896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.947672][ T4896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.955226][ T4896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.962711][ T4896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.973464][ T4896] veth1_macvtap: left promiscuous mode [ 311.979256][ T4896] veth0_macvtap: left promiscuous mode [ 311.984972][ T4896] veth1_vlan: left promiscuous mode [ 311.990617][ T4896] veth0_vlan: left promiscuous mode [ 312.062398][ T6845] smc: removing ib device syz! [ 312.128219][T17842] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.135389][T17842] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.145690][T17842] bridge_slave_0: entered allmulticast mode [ 312.152349][T17842] bridge_slave_0: entered promiscuous mode [ 312.164085][T17842] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.171268][T17842] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.178746][T17842] bridge_slave_1: entered allmulticast mode [ 312.185529][T17842] bridge_slave_1: entered promiscuous mode [ 312.192302][ T1036] infiniband syz1: ib_query_port failed (-19) [ 312.255213][T17950] netlink: 128 bytes leftover after parsing attributes in process `+}[@'. [ 312.296305][T17842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.351642][T17842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.440656][T17960] FAULT_INJECTION: forcing a failure. [ 312.440656][T17960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.453924][T17960] CPU: 1 UID: 0 PID: 17960 Comm: syz.0.5104 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 312.453962][T17960] Tainted: [W]=WARN [ 312.453971][T17960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.453987][T17960] Call Trace: [ 312.453994][T17960] [ 312.454004][T17960] __dump_stack+0x1d/0x30 [ 312.454032][T17960] dump_stack_lvl+0xe8/0x140 [ 312.454111][T17960] dump_stack+0x15/0x1b [ 312.454127][T17960] should_fail_ex+0x265/0x280 [ 312.454168][T17960] should_fail+0xb/0x20 [ 312.454195][T17960] should_fail_usercopy+0x1a/0x20 [ 312.454261][T17960] _copy_from_user+0x1c/0xb0 [ 312.454306][T17960] ___sys_sendmsg+0xc1/0x1d0 [ 312.454442][T17960] __x64_sys_sendmsg+0xd4/0x160 [ 312.454513][T17960] x64_sys_call+0x191e/0x2ff0 [ 312.454538][T17960] do_syscall_64+0xd2/0x200 [ 312.454585][T17960] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 312.454657][T17960] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 312.454704][T17960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.454781][T17960] RIP: 0033:0x7f0c5979eba9 [ 312.454800][T17960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.454823][T17960] RSP: 002b:00007f0c58207038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.454857][T17960] RAX: ffffffffffffffda RBX: 00007f0c599e5fa0 RCX: 00007f0c5979eba9 [ 312.454869][T17960] RDX: 0000000000008800 RSI: 00002000000003c0 RDI: 0000000000000003 [ 312.454882][T17960] RBP: 00007f0c58207090 R08: 0000000000000000 R09: 0000000000000000 [ 312.454894][T17960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.454906][T17960] R13: 00007f0c599e6038 R14: 00007f0c599e5fa0 R15: 00007ffcbcd2ecc8 [ 312.454935][T17960] [ 312.456314][T17842] team0: Port device team_slave_0 added [ 312.626883][T17967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17967 comm=syz.0.5105 [ 312.632424][T17842] team0: Port device team_slave_1 added [ 312.700243][T17966] lo speed is unknown, defaulting to 1000 [ 312.708395][T17842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.715376][T17842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.741466][T17842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.754463][T17966] lo speed is unknown, defaulting to 1000 [ 312.755455][T17842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.767348][T17842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.793340][T17842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.833853][T17842] hsr_slave_0: entered promiscuous mode [ 312.840117][T17842] hsr_slave_1: entered promiscuous mode [ 312.846769][T17842] debugfs: 'hsr0' already exists in 'hsr' [ 312.852622][T17842] Cannot create hsr debugfs directory [ 312.881036][T17978] pimreg: entered allmulticast mode [ 312.919308][T17978] pimreg: left allmulticast mode [ 312.942984][T17982] loop8: detected capacity change from 0 to 1024 [ 312.943257][T17982] ext3: Unknown parameter 'audit' [ 313.052065][T17992] loop8: detected capacity change from 0 to 164 [ 313.070402][T17992] Unable to read rock-ridge attributes [ 313.090231][T17992] Unable to read rock-ridge attributes [ 313.090751][T17992] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 313.092685][T17992] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5116'. [ 313.133175][T18000] loop8: detected capacity change from 0 to 1024 [ 313.133913][T18000] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 313.133939][T18000] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 313.135380][T18000] JBD2: no valid journal superblock found [ 313.135394][T18000] EXT4-fs (loop8): Could not load journal inode [ 313.174626][T17999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5119'. [ 313.192017][T18004] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 313.192140][T18004] EXT4-fs (loop8): unable to read superblock [ 313.286630][T18008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.286816][T18008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.343095][T17842] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 313.384289][T18017] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.393600][T17842] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 313.406534][T17842] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 313.409608][T17842] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 313.413339][T18018] loop8: detected capacity change from 0 to 512 [ 313.418182][T18018] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 313.464762][T18017] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.513885][T18017] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.543301][T17842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.558061][T18017] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.562375][T17842] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.579723][ T6842] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.579756][ T6842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.582384][ T6842] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.582511][ T6842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.606679][T17842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 313.657505][T17842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.728338][ T4898] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.756699][T18030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5127'. [ 313.766172][ T4898] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.778440][T18030] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5127'. [ 313.778590][ T4898] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.802749][ T6845] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.819962][T17842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.358327][T18049] lo speed is unknown, defaulting to 1000 [ 314.364800][T18049] lo speed is unknown, defaulting to 1000 [ 314.585181][T18060] loop8: detected capacity change from 0 to 512 [ 314.592189][T18060] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 314.622677][T18060] EXT4-fs (loop8): 1 truncate cleaned up [ 314.634644][T18060] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.671529][T18068] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5137'. [ 314.697473][T17842] veth0_vlan: entered promiscuous mode [ 314.766833][T17842] veth1_vlan: entered promiscuous mode [ 314.784093][T18072] netlink: 92 bytes leftover after parsing attributes in process `syz.6.5138'. [ 314.804756][T12425] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.818621][T17842] veth0_macvtap: entered promiscuous mode [ 314.847690][T17842] veth1_macvtap: entered promiscuous mode [ 314.881058][T18079] netlink: 264 bytes leftover after parsing attributes in process `syz.4.5141'. [ 314.892407][T18081] FAULT_INJECTION: forcing a failure. [ 314.892407][T18081] name failslab, interval 1, probability 0, space 0, times 0 [ 314.896737][T17842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.905150][T18081] CPU: 1 UID: 0 PID: 18081 Comm: syz.6.5142 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 314.905194][T18081] Tainted: [W]=WARN [ 314.905204][T18081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 314.905275][T18081] Call Trace: [ 314.905283][T18081] [ 314.905290][T18081] __dump_stack+0x1d/0x30 [ 314.905311][T18081] dump_stack_lvl+0xe8/0x140 [ 314.905432][T18081] dump_stack+0x15/0x1b [ 314.905456][T18081] should_fail_ex+0x265/0x280 [ 314.905491][T18081] should_failslab+0x8c/0xb0 [ 314.905554][T18081] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 314.905599][T18081] ? p9_client_create+0x59/0xbc0 [ 314.905652][T18081] ? p9_client_create+0x207/0xbc0 [ 314.905757][T18081] ? should_failslab+0x8c/0xb0 [ 314.905794][T18081] kstrdup+0x3e/0xd0 [ 314.905866][T18081] p9_client_create+0x207/0xbc0 [ 314.905900][T18081] v9fs_session_init+0xf7/0xde0 [ 314.905932][T18081] ? avc_has_perm_noaudit+0x1b1/0x200 [ 314.905971][T18081] ? should_fail_ex+0xdb/0x280 [ 314.906004][T18081] ? v9fs_mount+0x51/0x5c0 [ 314.906050][T18081] ? should_failslab+0x8c/0xb0 [ 314.906086][T18081] ? __kmalloc_cache_noprof+0x189/0x320 [ 314.906216][T18081] v9fs_mount+0x67/0x5c0 [ 314.906253][T18081] ? selinux_capable+0x31/0x40 [ 314.906345][T18081] ? __pfx_v9fs_mount+0x10/0x10 [ 314.906459][T18081] legacy_get_tree+0x75/0xd0 [ 314.906493][T18081] vfs_get_tree+0x54/0x1d0 [ 314.906528][T18081] do_new_mount+0x207/0x5e0 [ 314.906592][T18081] ? security_capable+0x83/0x90 [ 314.906632][T18081] path_mount+0x4a4/0xb20 [ 314.906670][T18081] ? user_path_at+0x109/0x130 [ 314.906795][T18081] __se_sys_mount+0x28f/0x2e0 [ 314.906890][T18081] __x64_sys_mount+0x67/0x80 [ 314.906954][T18081] x64_sys_call+0x2b4d/0x2ff0 [ 314.906986][T18081] do_syscall_64+0xd2/0x200 [ 314.907073][T18081] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 314.907110][T18081] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 314.907189][T18081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.907210][T18081] RIP: 0033:0x7f9634a9eba9 [ 314.907248][T18081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.907275][T18081] RSP: 002b:00007f9633507038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 314.907302][T18081] RAX: ffffffffffffffda RBX: 00007f9634ce5fa0 RCX: 00007f9634a9eba9 [ 314.907320][T18081] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 314.907338][T18081] RBP: 00007f9633507090 R08: 0000200000000240 R09: 0000000000000000 [ 314.907356][T18081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 314.907373][T18081] R13: 00007f9634ce6038 R14: 00007f9634ce5fa0 R15: 00007fff24b6a4e8 [ 314.907478][T18081] [ 315.185610][T17842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.193261][T18090] openvswitch: netlink: Message has 6 unknown bytes. [ 315.200771][T18090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14610 sclass=netlink_route_socket pid=18090 comm=syz.8.5145 [ 315.218888][ T6842] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.237509][ T6842] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.268325][ T6842] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.277867][ T6842] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.319311][T11506] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 315.339447][T11506] hid-generic 0000:0000:0000.0063: hidraw0: HID v0.00 Device [syz1] on syz0 [ 315.379211][T18112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18112 comm=syz.6.5149 [ 315.424235][T18109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.443059][T18107] lo speed is unknown, defaulting to 1000 [ 315.454496][T18107] lo speed is unknown, defaulting to 1000 [ 315.705179][T18120] lo speed is unknown, defaulting to 1000 [ 315.720122][T18118] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5154'. [ 315.730468][T18120] lo speed is unknown, defaulting to 1000 [ 315.744503][T18131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18131 comm=syz.0.5155 [ 315.775796][T18118] team0 (unregistering): Port device team_slave_0 removed [ 315.789570][T18137] netlink: 'syz.4.5157': attribute type 4 has an invalid length. [ 315.795243][T18130] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5158'. [ 315.809103][T18118] team0 (unregistering): Port device team_slave_1 removed [ 315.832785][T18128] netlink: 'syz.4.5157': attribute type 4 has an invalid length. [ 315.853733][T11506] lo speed is unknown, defaulting to 1000 [ 315.859504][T11506] sz1: Port: 1 Link ACTIVE [ 315.895058][T11509] lo speed is unknown, defaulting to 1000 [ 315.921497][T18143] syzkaller1: entered promiscuous mode [ 315.927009][T18143] syzkaller1: entered allmulticast mode [ 315.971358][T11505] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 315.986754][T11505] hid-generic 0000:0000:0000.0064: hidraw0: HID v0.00 Device [syz1] on syz0 [ 315.988365][T18143] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(14) [ 316.003066][T18143] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 316.010773][T18143] vhci_hcd vhci_hcd.0: Device attached [ 316.028712][T18156] vhci_hcd: connection closed [ 316.028985][ T2617] vhci_hcd: stop threads [ 316.038012][ T2617] vhci_hcd: release socket [ 316.042489][ T2617] vhci_hcd: disconnect device [ 316.107587][T18163] netlink: 'syz.0.5170': attribute type 4 has an invalid length. [ 316.124972][T18165] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5169'. [ 316.176624][T18166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5170'. [ 316.229970][T18169] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5171'. [ 316.312142][T18178] 9pnet_fd: Insufficient options for proto=fd [ 316.396560][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 316.396638][ T29] audit: type=1326 audit(1757927277.856:20477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18192 comm="syz.6.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9634a9eba9 code=0x7ffc0000 [ 316.427916][ T29] audit: type=1326 audit(1757927277.887:20478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18192 comm="syz.6.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f9634a9eba9 code=0x7ffc0000 [ 316.451809][ T29] audit: type=1326 audit(1757927277.887:20479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18192 comm="syz.6.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9634a9eba9 code=0x7ffc0000 [ 316.475513][ T29] audit: type=1326 audit(1757927277.887:20480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18192 comm="syz.6.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9634a9eba9 code=0x7ffc0000 [ 316.499187][ T29] audit: type=1326 audit(1757927277.887:20481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18192 comm="syz.6.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9634a9eba9 code=0x7ffc0000 [ 316.522862][ T29] audit: type=1326 audit(1757927277.887:20482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18192 comm="syz.6.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9634a9eba9 code=0x7ffc0000 [ 316.546724][ T29] audit: type=1326 audit(1757927277.887:20483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18192 comm="syz.6.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9634a9eba9 code=0x7ffc0000 [ 316.570814][ T29] audit: type=1326 audit(1757927277.971:20484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18192 comm="syz.6.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9634a9eba9 code=0x7ffc0000 [ 316.594453][ T29] audit: type=1326 audit(1757927277.971:20485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18192 comm="syz.6.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9634a9eba9 code=0x7ffc0000 [ 316.618115][ T29] audit: type=1326 audit(1757927277.971:20486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18192 comm="syz.6.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9634a9eba9 code=0x7ffc0000 [ 316.644480][T18188] netlink: 'syz.4.5180': attribute type 1 has an invalid length. [ 316.713977][ T1036] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 316.721831][ T1036] hid-generic 0000:0000:0000.0065: hidraw0: HID v0.00 Device [syz1] on syz0 [ 316.885870][T18216] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 316.988331][T18222] netlink: 'syz.4.5191': attribute type 3 has an invalid length. [ 317.222968][T18236] lo speed is unknown, defaulting to 1000 [ 317.229368][T18236] lo speed is unknown, defaulting to 1000 [ 317.263424][T18237] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18237 comm=syz.7.5197 [ 317.648054][T18236] bridge0: port 3(syz_tun) entered blocking state [ 317.654769][T18236] bridge0: port 3(syz_tun) entered disabled state [ 317.700463][T18236] syz_tun: entered allmulticast mode [ 317.707035][T18236] syz_tun: entered promiscuous mode [ 317.713862][T18236] bridge0: port 3(syz_tun) entered blocking state [ 317.720512][T18236] bridge0: port 3(syz_tun) entered forwarding state [ 317.729208][T18238] block device autoloading is deprecated and will be removed. [ 317.830523][T18248] lo speed is unknown, defaulting to 1000 [ 317.837049][T18248] lo speed is unknown, defaulting to 1000 [ 317.871569][T18249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18249 comm=syz.7.5200 [ 317.963432][ T1036] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 317.981327][ T1036] hid-generic 0000:0000:0000.0066: hidraw0: HID v0.00 Device [syz1] on syz0 [ 318.201150][T18261] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5205'. [ 318.290156][T18263] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 318.432016][T18287] lo speed is unknown, defaulting to 1000 [ 318.439328][T18287] lo speed is unknown, defaulting to 1000 [ 318.471003][T18293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18293 comm=syz.7.5215 [ 318.498585][ T1036] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 318.516441][ T1036] hid-generic 0000:0000:0000.0067: hidraw0: HID v0.00 Device [syz1] on syz0 [ 318.883696][T18318] FAULT_INJECTION: forcing a failure. [ 318.883696][T18318] name failslab, interval 1, probability 0, space 0, times 0 [ 318.896479][T18318] CPU: 1 UID: 0 PID: 18318 Comm: syz.4.5229 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 318.896556][T18318] Tainted: [W]=WARN [ 318.896564][T18318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 318.896648][T18318] Call Trace: [ 318.896655][T18318] [ 318.896662][T18318] __dump_stack+0x1d/0x30 [ 318.896694][T18318] dump_stack_lvl+0xe8/0x140 [ 318.896766][T18318] dump_stack+0x15/0x1b [ 318.896786][T18318] should_fail_ex+0x265/0x280 [ 318.896817][T18318] should_failslab+0x8c/0xb0 [ 318.896929][T18318] kmem_cache_alloc_node_noprof+0x57/0x320 [ 318.896965][T18318] ? __alloc_skb+0x101/0x320 [ 318.897003][T18318] __alloc_skb+0x101/0x320 [ 318.897026][T18318] netlink_alloc_large_skb+0xba/0xf0 [ 318.897067][T18318] netlink_sendmsg+0x3cf/0x6b0 [ 318.897140][T18318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.897173][T18318] __sock_sendmsg+0x142/0x180 [ 318.897216][T18318] ____sys_sendmsg+0x31e/0x4e0 [ 318.897324][T18318] ___sys_sendmsg+0x17b/0x1d0 [ 318.897378][T18318] __x64_sys_sendmsg+0xd4/0x160 [ 318.897417][T18318] x64_sys_call+0x191e/0x2ff0 [ 318.897515][T18318] do_syscall_64+0xd2/0x200 [ 318.897556][T18318] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 318.897602][T18318] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 318.897642][T18318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.897679][T18318] RIP: 0033:0x7f7ada3ceba9 [ 318.897699][T18318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.897722][T18318] RSP: 002b:00007f7ad8e37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.897746][T18318] RAX: ffffffffffffffda RBX: 00007f7ada615fa0 RCX: 00007f7ada3ceba9 [ 318.897825][T18318] RDX: 0000000000000004 RSI: 00002000000003c0 RDI: 0000000000000003 [ 318.897840][T18318] RBP: 00007f7ad8e37090 R08: 0000000000000000 R09: 0000000000000000 [ 318.897852][T18318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.897866][T18318] R13: 00007f7ada616038 R14: 00007f7ada615fa0 R15: 00007fff67bfc228 [ 318.897891][T18318] [ 318.912410][T18316] netlink: 'syz.8.5228': attribute type 21 has an invalid length. [ 318.912499][T18316] netlink: 156 bytes leftover after parsing attributes in process `syz.8.5228'. [ 319.053937][T11506] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 319.056336][T11506] hid-generic 0000:0000:0000.0068: hidraw0: HID v0.00 Device [syz1] on syz0 [ 319.444799][T18344] pimreg: entered allmulticast mode [ 319.446863][T18344] pimreg: left allmulticast mode [ 319.449969][T18346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.450102][T18346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.587862][T18353] lo speed is unknown, defaulting to 1000 [ 319.588181][T18353] lo speed is unknown, defaulting to 1000 [ 319.612464][T18356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18356 comm=syz.7.5242 [ 319.711647][T11506] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 319.740337][T11506] hid-generic 0000:0000:0000.0069: hidraw0: HID v0.00 Device [syz1] on syz0 [ 319.759193][T18367] netlink: 128 bytes leftover after parsing attributes in process `+}[@'. [ 319.979741][T18374] FAULT_INJECTION: forcing a failure. [ 319.979741][T18374] name failslab, interval 1, probability 0, space 0, times 0 [ 319.992632][T18374] CPU: 0 UID: 0 PID: 18374 Comm: syz.7.5251 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 319.992725][T18374] Tainted: [W]=WARN [ 319.992733][T18374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 319.992749][T18374] Call Trace: [ 319.992756][T18374] [ 319.992765][T18374] __dump_stack+0x1d/0x30 [ 319.992789][T18374] dump_stack_lvl+0xe8/0x140 [ 319.992815][T18374] dump_stack+0x15/0x1b [ 319.992870][T18374] should_fail_ex+0x265/0x280 [ 319.992963][T18374] ? io_ring_ctx_alloc+0x38/0x6a0 [ 319.992995][T18374] should_failslab+0x8c/0xb0 [ 319.993028][T18374] __kmalloc_cache_noprof+0x4c/0x320 [ 319.993112][T18374] ? avc_has_perm_noaudit+0x1b1/0x200 [ 319.993145][T18374] io_ring_ctx_alloc+0x38/0x6a0 [ 319.993173][T18374] ? avc_has_perm+0xf7/0x180 [ 319.993280][T18374] ? io_uring_fill_params+0x270/0x300 [ 319.993315][T18374] io_uring_create+0x10f/0x610 [ 319.993350][T18374] __se_sys_io_uring_setup+0x1f7/0x210 [ 319.993464][T18374] __x64_sys_io_uring_setup+0x31/0x40 [ 319.993497][T18374] x64_sys_call+0x2b21/0x2ff0 [ 319.993600][T18374] do_syscall_64+0xd2/0x200 [ 319.993642][T18374] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 319.993669][T18374] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 319.993771][T18374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.993799][T18374] RIP: 0033:0x7faba367eba9 [ 319.993818][T18374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.993842][T18374] RSP: 002b:00007faba20e6fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 319.993899][T18374] RAX: ffffffffffffffda RBX: 00007faba38c5fa0 RCX: 00007faba367eba9 [ 319.993912][T18374] RDX: 0000200000000080 RSI: 0000200000000480 RDI: 0000000000000882 [ 319.993977][T18374] RBP: 0000200000000480 R08: 0000000000000000 R09: 0000200000000080 [ 319.994041][T18374] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 319.994057][T18374] R13: 00002000000000c0 R14: 0000000000000882 R15: 0000200000000080 [ 319.994081][T18374] [ 320.236716][T18379] 9pnet_fd: Insufficient options for proto=fd [ 320.447918][T18382] FAULT_INJECTION: forcing a failure. [ 320.447918][T18382] name failslab, interval 1, probability 0, space 0, times 0 [ 320.460809][T18382] CPU: 1 UID: 0 PID: 18382 Comm: syz.0.5253 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 320.460849][T18382] Tainted: [W]=WARN [ 320.460857][T18382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.460874][T18382] Call Trace: [ 320.460881][T18382] [ 320.460891][T18382] __dump_stack+0x1d/0x30 [ 320.460917][T18382] dump_stack_lvl+0xe8/0x140 [ 320.461010][T18382] dump_stack+0x15/0x1b [ 320.461100][T18382] should_fail_ex+0x265/0x280 [ 320.461193][T18382] should_failslab+0x8c/0xb0 [ 320.461240][T18382] kmem_cache_alloc_node_noprof+0x57/0x320 [ 320.461279][T18382] ? __alloc_skb+0x101/0x320 [ 320.461310][T18382] __alloc_skb+0x101/0x320 [ 320.461340][T18382] alloc_uevent_skb+0x5c/0x120 [ 320.461381][T18382] kobject_uevent_net_broadcast+0xfb/0x410 [ 320.461435][T18382] kobject_uevent_env+0x43d/0x570 [ 320.461472][T18382] kobject_uevent+0x1d/0x30 [ 320.461569][T18382] __kobject_del+0x88/0x190 [ 320.461599][T18382] kobject_put+0x127/0x190 [ 320.461678][T18382] netdev_queue_update_kobjects+0x45f/0x4d0 [ 320.461705][T18382] netdev_unregister_kobject+0xcc/0x270 [ 320.461729][T18382] unregister_netdevice_many_notify+0x11cc/0x15d0 [ 320.461768][T18382] unregister_netdevice_queue+0x1f5/0x220 [ 320.461830][T18382] unregister_netdev+0xb3/0xe0 [ 320.461864][T18382] slip_close+0xe4/0x100 [ 320.461888][T18382] ? __pfx_slip_close+0x10/0x10 [ 320.461914][T18382] tty_ldisc_close+0x71/0xa0 [ 320.462010][T18382] tty_set_ldisc+0x1b9/0x380 [ 320.462047][T18382] tiocsetd+0x51/0x60 [ 320.462072][T18382] tty_ioctl+0xa7f/0xb80 [ 320.462095][T18382] ? __pfx_tty_ioctl+0x10/0x10 [ 320.462157][T18382] __se_sys_ioctl+0xce/0x140 [ 320.462177][T18382] __x64_sys_ioctl+0x43/0x50 [ 320.462196][T18382] x64_sys_call+0x1816/0x2ff0 [ 320.462226][T18382] do_syscall_64+0xd2/0x200 [ 320.462423][T18382] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 320.462456][T18382] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 320.462503][T18382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.462526][T18382] RIP: 0033:0x7f0c5979eba9 [ 320.462546][T18382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.462570][T18382] RSP: 002b:00007f0c581e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.462590][T18382] RAX: ffffffffffffffda RBX: 00007f0c599e6090 RCX: 00007f0c5979eba9 [ 320.462606][T18382] RDX: 0000200000000100 RSI: 0000000000005423 RDI: 0000000000000006 [ 320.462711][T18382] RBP: 00007f0c581e6090 R08: 0000000000000000 R09: 0000000000000000 [ 320.462724][T18382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 320.462739][T18382] R13: 00007f0c599e6128 R14: 00007f0c599e6090 R15: 00007ffcbcd2ecc8 [ 320.462765][T18382] [ 320.787900][T18392] FAULT_INJECTION: forcing a failure. [ 320.787900][T18392] name failslab, interval 1, probability 0, space 0, times 0 [ 320.801033][T18392] CPU: 0 UID: 0 PID: 18392 Comm: syz.4.5258 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 320.801100][T18392] Tainted: [W]=WARN [ 320.801108][T18392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.801124][T18392] Call Trace: [ 320.801130][T18392] [ 320.801137][T18392] __dump_stack+0x1d/0x30 [ 320.801182][T18392] dump_stack_lvl+0xe8/0x140 [ 320.801209][T18392] dump_stack+0x15/0x1b [ 320.801276][T18392] should_fail_ex+0x265/0x280 [ 320.801301][T18392] should_failslab+0x8c/0xb0 [ 320.801327][T18392] kmem_cache_alloc_noprof+0x50/0x310 [ 320.801485][T18392] ? skb_clone+0x151/0x1f0 [ 320.801523][T18392] skb_clone+0x151/0x1f0 [ 320.801577][T18392] pfkey_sendmsg+0x2cc/0x900 [ 320.801636][T18392] ? avc_has_perm+0xf7/0x180 [ 320.801682][T18392] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 320.801791][T18392] __sock_sendmsg+0x142/0x180 [ 320.801835][T18392] ____sys_sendmsg+0x31e/0x4e0 [ 320.801937][T18392] ___sys_sendmsg+0x17b/0x1d0 [ 320.801993][T18392] __x64_sys_sendmsg+0xd4/0x160 [ 320.802084][T18392] x64_sys_call+0x191e/0x2ff0 [ 320.802169][T18392] do_syscall_64+0xd2/0x200 [ 320.802233][T18392] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 320.802266][T18392] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 320.802301][T18392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.802403][T18392] RIP: 0033:0x7f7ada3ceba9 [ 320.802422][T18392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.802441][T18392] RSP: 002b:00007f7ad8e37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.802464][T18392] RAX: ffffffffffffffda RBX: 00007f7ada615fa0 RCX: 00007f7ada3ceba9 [ 320.802476][T18392] RDX: 0000000000000000 RSI: 00002000005f5000 RDI: 0000000000000003 [ 320.802489][T18392] RBP: 00007f7ad8e37090 R08: 0000000000000000 R09: 0000000000000000 [ 320.802501][T18392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.802574][T18392] R13: 00007f7ada616038 R14: 00007f7ada615fa0 R15: 00007fff67bfc228 [ 320.802599][T18392] [ 321.037288][T18396] netlink: 128 bytes leftover after parsing attributes in process `+}[@'. [ 321.077074][T18399] FAULT_INJECTION: forcing a failure. [ 321.077074][T18399] name failslab, interval 1, probability 0, space 0, times 0 [ 321.089836][T18399] CPU: 0 UID: 0 PID: 18399 Comm: syz.4.5261 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 321.089875][T18399] Tainted: [W]=WARN [ 321.089953][T18399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.090047][T18399] Call Trace: [ 321.090053][T18399] [ 321.090061][T18399] __dump_stack+0x1d/0x30 [ 321.090083][T18399] dump_stack_lvl+0xe8/0x140 [ 321.090104][T18399] dump_stack+0x15/0x1b [ 321.090122][T18399] should_fail_ex+0x265/0x280 [ 321.090206][T18399] should_failslab+0x8c/0xb0 [ 321.090233][T18399] kmem_cache_alloc_node_noprof+0x57/0x320 [ 321.090266][T18399] ? __alloc_skb+0x101/0x320 [ 321.090292][T18399] __alloc_skb+0x101/0x320 [ 321.090317][T18399] netlink_alloc_large_skb+0xba/0xf0 [ 321.090358][T18399] netlink_sendmsg+0x3cf/0x6b0 [ 321.090389][T18399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.090417][T18399] __sock_sendmsg+0x142/0x180 [ 321.090507][T18399] ____sys_sendmsg+0x31e/0x4e0 [ 321.090539][T18399] ___sys_sendmsg+0x17b/0x1d0 [ 321.090584][T18399] __x64_sys_sendmsg+0xd4/0x160 [ 321.090677][T18399] x64_sys_call+0x191e/0x2ff0 [ 321.090700][T18399] do_syscall_64+0xd2/0x200 [ 321.090790][T18399] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 321.090817][T18399] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 321.090921][T18399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.091005][T18399] RIP: 0033:0x7f7ada3ceba9 [ 321.091021][T18399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.091041][T18399] RSP: 002b:00007f7ad8e37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.091065][T18399] RAX: ffffffffffffffda RBX: 00007f7ada615fa0 RCX: 00007f7ada3ceba9 [ 321.091078][T18399] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 321.091092][T18399] RBP: 00007f7ad8e37090 R08: 0000000000000000 R09: 0000000000000000 [ 321.091105][T18399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.091119][T18399] R13: 00007f7ada616038 R14: 00007f7ada615fa0 R15: 00007fff67bfc228 [ 321.091197][T18399] [ 321.311625][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 321.311643][ T29] audit: type=1326 audit(1757927283.021:20569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18400 comm="syz.8.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200d5beba9 code=0x7ffc0000 [ 321.317219][T18407] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5257'. [ 321.317790][ T29] audit: type=1326 audit(1757927283.021:20570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18400 comm="syz.8.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200d5beba9 code=0x7ffc0000 [ 321.374094][ T29] audit: type=1326 audit(1757927283.021:20571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18400 comm="syz.8.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f200d5beba9 code=0x7ffc0000 [ 321.397800][ T29] audit: type=1326 audit(1757927283.021:20572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18400 comm="syz.8.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200d5beba9 code=0x7ffc0000 [ 321.421428][ T29] audit: type=1326 audit(1757927283.021:20573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18400 comm="syz.8.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200d5beba9 code=0x7ffc0000 [ 321.445143][ T29] audit: type=1326 audit(1757927283.021:20574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18400 comm="syz.8.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f200d5beba9 code=0x7ffc0000 [ 321.468650][ T29] audit: type=1326 audit(1757927283.021:20575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18400 comm="syz.8.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200d5beba9 code=0x7ffc0000 [ 321.492298][ T29] audit: type=1326 audit(1757927283.021:20576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18400 comm="syz.8.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200d5beba9 code=0x7ffc0000 [ 321.553402][T18411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5265'. [ 321.624694][T18409] netlink: 'syz.6.5264': attribute type 1 has an invalid length. [ 321.628796][ T29] audit: type=1326 audit(1757927283.021:20577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18400 comm="syz.8.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f200d5beba9 code=0x7ffc0000 [ 321.656094][ T29] audit: type=1326 audit(1757927283.021:20578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18400 comm="syz.8.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f200d5bebe3 code=0x7ffc0000 [ 321.680276][T18409] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 321.732937][T18416] FAULT_INJECTION: forcing a failure. [ 321.732937][T18416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.754500][T18416] CPU: 1 UID: 0 PID: 18416 Comm: syz.8.5266 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 321.754534][T18416] Tainted: [W]=WARN [ 321.754578][T18416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.754593][T18416] Call Trace: [ 321.754599][T18416] [ 321.754606][T18416] __dump_stack+0x1d/0x30 [ 321.754712][T18416] dump_stack_lvl+0xe8/0x140 [ 321.754744][T18416] dump_stack+0x15/0x1b [ 321.754764][T18416] should_fail_ex+0x265/0x280 [ 321.754838][T18416] should_fail+0xb/0x20 [ 321.754864][T18416] should_fail_usercopy+0x1a/0x20 [ 321.754897][T18416] _copy_to_user+0x20/0xa0 [ 321.754947][T18416] simple_read_from_buffer+0xb5/0x130 [ 321.754970][T18416] proc_fail_nth_read+0x10e/0x150 [ 321.755002][T18416] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 321.755107][T18416] vfs_read+0x1a8/0x770 [ 321.755130][T18416] ? __rcu_read_unlock+0x4f/0x70 [ 321.755155][T18416] ? __fget_files+0x184/0x1c0 [ 321.755185][T18416] ksys_read+0xda/0x1a0 [ 321.755239][T18416] __x64_sys_read+0x40/0x50 [ 321.755263][T18416] x64_sys_call+0x27bc/0x2ff0 [ 321.755284][T18416] do_syscall_64+0xd2/0x200 [ 321.755346][T18416] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 321.755377][T18416] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 321.755416][T18416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.755460][T18416] RIP: 0033:0x7f200d5bd5bc [ 321.755477][T18416] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 321.755498][T18416] RSP: 002b:00007f200c01f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 321.755521][T18416] RAX: ffffffffffffffda RBX: 00007f200d805fa0 RCX: 00007f200d5bd5bc [ 321.755537][T18416] RDX: 000000000000000f RSI: 00007f200c01f0a0 RDI: 0000000000000008 [ 321.755551][T18416] RBP: 00007f200c01f090 R08: 0000000000000000 R09: 0000000000000000 [ 321.755624][T18416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.755638][T18416] R13: 00007f200d806038 R14: 00007f200d805fa0 R15: 00007fff75756498 [ 321.755659][T18416] [ 322.146072][T11506] IPVS: starting estimator thread 0... [ 322.201268][T18442] netlink: 128 bytes leftover after parsing attributes in process `+}[@'. [ 322.242497][T18437] IPVS: using max 2208 ests per chain, 110400 per kthread [ 322.348027][T18461] netlink: 'syz.4.5286': attribute type 21 has an invalid length. [ 322.400933][T18463] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 322.457259][T18472] loop8: detected capacity change from 0 to 512 [ 322.465457][T18472] ext4: Unknown parameter 'smackfsdef' [ 322.559902][T18479] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5292'. [ 322.608413][T18483] netlink: 'syz.8.5294': attribute type 10 has an invalid length. [ 322.616450][T18483] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5294'. [ 322.639456][T18483] geneve1: entered promiscuous mode [ 322.653309][T18483] team0: Port device geneve1 added [ 322.682395][T18491] syzkaller0: entered promiscuous mode [ 322.687996][T18491] syzkaller0: entered allmulticast mode [ 322.787538][T18492] SELinux: policydb magic number 0x4 does not match expected magic number 0xf97cff8c [ 322.801634][T18492] SELinux: failed to load policy [ 323.150145][T18506] netlink: 128 bytes leftover after parsing attributes in process `+}[@'. [ 323.208167][T18514] lo speed is unknown, defaulting to 1000 [ 323.220516][T18514] lo speed is unknown, defaulting to 1000 [ 323.345930][T18520] loop8: detected capacity change from 0 to 8192 [ 323.373653][T18520] vfat: Unknown parameter '' [ 323.392355][T18534] netlink: 'syz.6.5313': attribute type 12 has an invalid length. [ 323.400254][T18534] netlink: 'syz.6.5313': attribute type 29 has an invalid length. [ 323.408139][T18534] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5313'. [ 323.417234][T18534] netlink: 59 bytes leftover after parsing attributes in process `syz.6.5313'. [ 323.585046][T18555] FAULT_INJECTION: forcing a failure. [ 323.585046][T18555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.598279][T18555] CPU: 0 UID: 0 PID: 18555 Comm: syz.8.5318 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 323.598314][T18555] Tainted: [W]=WARN [ 323.598323][T18555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 323.598338][T18555] Call Trace: [ 323.598347][T18555] [ 323.598357][T18555] __dump_stack+0x1d/0x30 [ 323.598383][T18555] dump_stack_lvl+0xe8/0x140 [ 323.598481][T18555] dump_stack+0x15/0x1b [ 323.598498][T18555] should_fail_ex+0x265/0x280 [ 323.598533][T18555] should_fail+0xb/0x20 [ 323.598628][T18555] should_fail_usercopy+0x1a/0x20 [ 323.598659][T18555] _copy_from_user+0x1c/0xb0 [ 323.598695][T18555] __ia32_sys_rt_sigreturn+0x128/0x350 [ 323.598740][T18555] x64_sys_call+0x2d3c/0x2ff0 [ 323.598827][T18555] do_syscall_64+0xd2/0x200 [ 323.598864][T18555] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 323.598960][T18555] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 323.598998][T18555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.599020][T18555] RIP: 0033:0x7f200d55ada9 [ 323.599036][T18555] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 323.599056][T18555] RSP: 002b:00007f200bffda80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 323.599086][T18555] RAX: ffffffffffffffda RBX: 00007f200d806090 RCX: 00007f200d55ada9 [ 323.599102][T18555] RDX: 00007f200bffda80 RSI: 00007f200bffdbb0 RDI: 0000000000000011 [ 323.599162][T18555] RBP: 00007f200bffe090 R08: 0000000000000000 R09: 0000000000000000 [ 323.599178][T18555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.599195][T18555] R13: 00007f200d806128 R14: 00007f200d806090 R15: 00007fff75756498 [ 323.599219][T18555] [ 323.793627][T18555] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 323.901448][T18563] lo speed is unknown, defaulting to 1000 [ 323.908915][T18568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18568 comm=syz.6.5326 [ 323.928794][T18563] lo speed is unknown, defaulting to 1000 [ 323.959833][T18567] syzkaller0: entered promiscuous mode [ 323.965501][T18567] syzkaller0: entered allmulticast mode [ 324.286578][ T23] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 324.319626][ T23] hid-generic 0000:0000:0000.006A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 324.336315][ T6842] tipc: Subscription rejected, illegal request [ 324.768224][T18595] __nla_validate_parse: 4 callbacks suppressed [ 324.768245][T18595] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5337'. [ 324.837551][T18601] FAULT_INJECTION: forcing a failure. [ 324.837551][T18601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.850659][T18601] CPU: 1 UID: 0 PID: 18601 Comm: syz.7.5340 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 324.850716][T18601] Tainted: [W]=WARN [ 324.850725][T18601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 324.850742][T18601] Call Trace: [ 324.850750][T18601] [ 324.850760][T18601] __dump_stack+0x1d/0x30 [ 324.850788][T18601] dump_stack_lvl+0xe8/0x140 [ 324.850808][T18601] dump_stack+0x15/0x1b [ 324.850825][T18601] should_fail_ex+0x265/0x280 [ 324.850865][T18601] should_fail+0xb/0x20 [ 324.850886][T18601] should_fail_usercopy+0x1a/0x20 [ 324.850912][T18601] _copy_from_iter+0xd2/0xe80 [ 324.850992][T18601] ? __build_skb_around+0x1a0/0x200 [ 324.851017][T18601] ? __alloc_skb+0x223/0x320 [ 324.851044][T18601] netlink_sendmsg+0x471/0x6b0 [ 324.851142][T18601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.851186][T18601] __sock_sendmsg+0x142/0x180 [ 324.851303][T18601] ____sys_sendmsg+0x31e/0x4e0 [ 324.851393][T18601] ___sys_sendmsg+0x17b/0x1d0 [ 324.851452][T18601] __x64_sys_sendmsg+0xd4/0x160 [ 324.851490][T18601] x64_sys_call+0x191e/0x2ff0 [ 324.851572][T18601] do_syscall_64+0xd2/0x200 [ 324.851616][T18601] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 324.851649][T18601] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 324.851738][T18601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.851760][T18601] RIP: 0033:0x7faba367eba9 [ 324.851791][T18601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.851816][T18601] RSP: 002b:00007faba20e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.851840][T18601] RAX: ffffffffffffffda RBX: 00007faba38c5fa0 RCX: 00007faba367eba9 [ 324.851857][T18601] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 324.851887][T18601] RBP: 00007faba20e7090 R08: 0000000000000000 R09: 0000000000000000 [ 324.851904][T18601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.851962][T18601] R13: 00007faba38c6038 R14: 00007faba38c5fa0 R15: 00007ffd8b656c28 [ 324.851988][T18601] [ 325.121702][T11491] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 325.152748][T11491] hid-generic 0000:0000:0000.006B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 325.256682][T18614] netlink: 128 bytes leftover after parsing attributes in process `+}[@'. [ 325.287881][T18612] SELinux: failed to load policy [ 325.362590][T18616] lo speed is unknown, defaulting to 1000 [ 325.373701][T18616] lo speed is unknown, defaulting to 1000 [ 325.389129][T18620] FAULT_INJECTION: forcing a failure. [ 325.389129][T18620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.402297][T18620] CPU: 1 UID: 0 PID: 18620 Comm: syz.7.5349 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 325.402354][T18620] Tainted: [W]=WARN [ 325.402363][T18620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 325.402379][T18620] Call Trace: [ 325.402387][T18620] [ 325.402397][T18620] __dump_stack+0x1d/0x30 [ 325.402426][T18620] dump_stack_lvl+0xe8/0x140 [ 325.402452][T18620] dump_stack+0x15/0x1b [ 325.402470][T18620] should_fail_ex+0x265/0x280 [ 325.402525][T18620] should_fail+0xb/0x20 [ 325.402582][T18620] should_fail_usercopy+0x1a/0x20 [ 325.402608][T18620] _copy_from_user+0x1c/0xb0 [ 325.402647][T18620] __copy_msghdr+0x244/0x300 [ 325.402683][T18620] ___sys_sendmsg+0x109/0x1d0 [ 325.402773][T18620] __sys_sendmmsg+0x178/0x300 [ 325.402815][T18620] __x64_sys_sendmmsg+0x57/0x70 [ 325.402851][T18620] x64_sys_call+0x1c4a/0x2ff0 [ 325.402877][T18620] do_syscall_64+0xd2/0x200 [ 325.402925][T18620] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 325.402958][T18620] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 325.403012][T18620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.403090][T18620] RIP: 0033:0x7faba367eba9 [ 325.403117][T18620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.403141][T18620] RSP: 002b:00007faba20e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 325.403165][T18620] RAX: ffffffffffffffda RBX: 00007faba38c5fa0 RCX: 00007faba367eba9 [ 325.403182][T18620] RDX: 0000000000000001 RSI: 0000200000001f00 RDI: 0000000000000005 [ 325.403199][T18620] RBP: 00007faba20e7090 R08: 0000000000000000 R09: 0000000000000000 [ 325.403272][T18620] R10: 0000000004004082 R11: 0000000000000246 R12: 0000000000000001 [ 325.403288][T18620] R13: 00007faba38c6038 R14: 00007faba38c5fa0 R15: 00007ffd8b656c28 [ 325.403309][T18620] [ 325.626054][T18616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18616 comm=syz.8.5347 [ 325.737143][T18637] pimreg: entered allmulticast mode [ 325.753341][T18637] pimreg: left allmulticast mode [ 325.970339][T18649] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5361'. [ 326.081297][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 326.081319][ T29] audit: type=1326 audit(1757927288.028:20817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18646 comm="syz.4.5360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ada3ceba9 code=0x7ffc0000 [ 326.117799][ T29] audit: type=1326 audit(1757927288.060:20818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18646 comm="syz.4.5360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ada3ceba9 code=0x7ffc0000 [ 326.141709][ T29] audit: type=1326 audit(1757927288.060:20819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18646 comm="syz.4.5360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ada3ceba9 code=0x7ffc0000 [ 326.152076][T18660] lo speed is unknown, defaulting to 1000 [ 326.165476][ T29] audit: type=1326 audit(1757927288.060:20820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18646 comm="syz.4.5360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ada3ceba9 code=0x7ffc0000 [ 326.185730][T18660] lo speed is unknown, defaulting to 1000 [ 326.194875][ T29] audit: type=1326 audit(1757927288.060:20821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18646 comm="syz.4.5360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7ada3ceba9 code=0x7ffc0000 [ 326.224051][ T29] audit: type=1326 audit(1757927288.060:20822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18646 comm="syz.4.5360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ada3ceba9 code=0x7ffc0000 [ 326.247651][ T29] audit: type=1326 audit(1757927288.060:20823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18646 comm="syz.4.5360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7ada3ceba9 code=0x7ffc0000 [ 326.271646][ T29] audit: type=1326 audit(1757927288.060:20824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18646 comm="syz.4.5360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ada3ceba9 code=0x7ffc0000 [ 326.295596][ T29] audit: type=1326 audit(1757927288.060:20825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18646 comm="syz.4.5360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f7ada3ceba9 code=0x7ffc0000 [ 326.319260][ T29] audit: type=1326 audit(1757927288.060:20826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18646 comm="syz.4.5360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ada3ceba9 code=0x7ffc0000 [ 326.351887][T18663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18663 comm=syz.7.5365 [ 326.580646][T18672] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5369'. [ 326.734754][T18686] FAULT_INJECTION: forcing a failure. [ 326.734754][T18686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.748045][T18686] CPU: 1 UID: 0 PID: 18686 Comm: syz.7.5374 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 326.748198][T18686] Tainted: [W]=WARN [ 326.748208][T18686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.748301][T18686] Call Trace: [ 326.748310][T18686] [ 326.748319][T18686] __dump_stack+0x1d/0x30 [ 326.748347][T18686] dump_stack_lvl+0xe8/0x140 [ 326.748369][T18686] dump_stack+0x15/0x1b [ 326.748386][T18686] should_fail_ex+0x265/0x280 [ 326.748425][T18686] should_fail+0xb/0x20 [ 326.748462][T18686] should_fail_usercopy+0x1a/0x20 [ 326.748500][T18686] _copy_to_user+0x20/0xa0 [ 326.748541][T18686] simple_read_from_buffer+0xb5/0x130 [ 326.748578][T18686] proc_fail_nth_read+0x10e/0x150 [ 326.748615][T18686] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 326.748653][T18686] vfs_read+0x1a8/0x770 [ 326.748763][T18686] ? __rcu_read_unlock+0x4f/0x70 [ 326.748788][T18686] ? __fget_files+0x184/0x1c0 [ 326.748818][T18686] ksys_read+0xda/0x1a0 [ 326.748866][T18686] __x64_sys_read+0x40/0x50 [ 326.748910][T18686] x64_sys_call+0x27bc/0x2ff0 [ 326.748935][T18686] do_syscall_64+0xd2/0x200 [ 326.748975][T18686] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 326.749063][T18686] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 326.749096][T18686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.749137][T18686] RIP: 0033:0x7faba367d5bc [ 326.749156][T18686] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 326.749180][T18686] RSP: 002b:00007faba20e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 326.749275][T18686] RAX: ffffffffffffffda RBX: 00007faba38c5fa0 RCX: 00007faba367d5bc [ 326.749290][T18686] RDX: 000000000000000f RSI: 00007faba20e70a0 RDI: 0000000000000004 [ 326.749307][T18686] RBP: 00007faba20e7090 R08: 0000000000000000 R09: 0000000000000000 [ 326.749323][T18686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.749340][T18686] R13: 00007faba38c6038 R14: 00007faba38c5fa0 R15: 00007ffd8b656c28 [ 326.749366][T18686] [ 327.347380][T11506] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 327.355208][T11506] hid-generic 0000:0000:0000.006C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 327.588425][T18734] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5393'. [ 327.597655][T18734] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5393'. [ 327.632664][T18734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42604 sclass=netlink_route_socket pid=18734 comm=syz.0.5393 [ 327.764309][T11506] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 327.780545][T11506] hid-generic 0000:0000:0000.006D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 327.848797][T18763] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5405'. [ 328.037338][T18777] loop8: detected capacity change from 0 to 512 [ 328.067237][T18777] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 328.080595][T18777] EXT4-fs (loop8): orphan cleanup on readonly fs [ 328.102483][T18777] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.5408: corrupted inode contents [ 328.115096][T18777] EXT4-fs (loop8): Remounting filesystem read-only [ 328.121848][T18777] EXT4-fs (loop8): 1 truncate cleaned up [ 328.127678][ T4898] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 328.138317][ T4898] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 328.169713][ T4898] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 328.180997][T18777] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 328.214073][T12425] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.249144][T18789] 9pnet: Could not find request transport: fdrfdno=0x0000000000000008 [ 328.282198][T18804] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5420'. [ 328.436027][T18812] 9pnet_fd: Insufficient options for proto=fd [ 328.492347][T12261] ================================================================== [ 328.500578][T12261] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 328.508110][T12261] [ 328.510466][T12261] read-write to 0xffff88811aafee90 of 8 bytes by task 18813 on cpu 0: [ 328.518802][T12261] shmem_recalc_inode+0x3b/0x200 [ 328.523783][T12261] shmem_get_folio_gfp+0x7a3/0xd60 [ 328.528949][T12261] shmem_write_begin+0xa8/0x190 [ 328.533835][T12261] generic_perform_write+0x181/0x490 [ 328.539412][T12261] shmem_file_write_iter+0xc5/0xf0 [ 328.544553][T12261] __kernel_write_iter+0x2d3/0x540 [ 328.549694][T12261] dump_user_range+0x61e/0x8f0 [ 328.554490][T12261] elf_core_dump+0x1e00/0x1f90 [ 328.559300][T12261] coredump_write+0xb0d/0xe30 [ 328.564008][T12261] vfs_coredump+0x142f/0x20c0 [ 328.568756][T12261] get_signal+0xd85/0xf70 [ 328.573103][T12261] arch_do_signal_or_restart+0x96/0x480 [ 328.578667][T12261] irqentry_exit_to_user_mode+0x5e/0xa0 [ 328.584242][T12261] irqentry_exit+0x12/0x50 [ 328.588697][T12261] asm_exc_page_fault+0x26/0x30 [ 328.593570][T12261] [ 328.595911][T12261] read to 0xffff88811aafee90 of 8 bytes by task 12261 on cpu 1: [ 328.603557][T12261] shmem_getattr+0x41/0x200 [ 328.608101][T12261] vfs_getattr_nosec+0x143/0x1e0 [ 328.613092][T12261] vfs_statx+0x113/0x390 [ 328.617375][T12261] vfs_fstatat+0x115/0x170 [ 328.621913][T12261] __se_sys_newfstatat+0x55/0x260 [ 328.626969][T12261] __x64_sys_newfstatat+0x55/0x70 [ 328.632047][T12261] x64_sys_call+0x135a/0x2ff0 [ 328.636746][T12261] do_syscall_64+0xd2/0x200 [ 328.641293][T12261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.647213][T12261] [ 328.649558][T12261] value changed: 0x000000000000050a -> 0x000000000000050c [ 328.656685][T12261] [ 328.659019][T12261] Reported by Kernel Concurrency Sanitizer on: [ 328.665194][T12261] CPU: 1 UID: 0 PID: 12261 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 328.676771][T12261] Tainted: [W]=WARN [ 328.680598][T12261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 328.690670][T12261] ================================================================== [ 328.820927][ T1036] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 328.832711][ T1036] hid-generic 0000:0000:0000.006E: hidraw0: HID v0.00 Device [syz1] on syz0