last executing test programs: 1m25.132128461s ago: executing program 1 (id=2737): r0 = socket$netlink(0x10, 0x3, 0x13) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(0x0, 0x0, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000480)='.\x00', 0x48800, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 1m24.560881064s ago: executing program 1 (id=2742): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff74, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) shutdown(0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) 1m24.515218888s ago: executing program 1 (id=2744): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='rxrpc_peer\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 1m24.469814512s ago: executing program 1 (id=2746): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10) r1 = fcntl$dupfd(r0, 0x0, r0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000140), 0x0, 0x0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) stat(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) io_setup(0x1, &(0x7f00000000c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000140)='-3', 0x2}]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) syz_clone3(&(0x7f00000009c0)={0x2000, &(0x7f0000000740), &(0x7f0000000780)=0x0, &(0x7f00000007c0), {0x2f}, &(0x7f0000001180)=""/249, 0x3d, &(0x7f0000000900)=""/111, &(0x7f0000000980)=[0xffffffffffffffff], 0x1, {r5}}, 0x58) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r9, 0x0, 0x0) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0), 0x4) recvfrom$inet(r9, 0x0, 0x0, 0xc9100120, 0x0, 0x0) r10 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f00000005c0)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)=[{&(0x7f0000000d40)=ANY=[@ANYBLOB="000100001d00867728bd7000fcdbdf25ee006c8004003b800400280094001600fc02000000008ac92d109e9615000000000000000000000400f4800400238019410d88dd9443274b40e3ab4ccd189248b3216d57802902b829d57600bee119692ec177cda36fe144848f20a169845f9fd15fca4a680100c489cca7f491758e5ce2a2007bf6d1715fe81fb37e56adb8e2244b942443eba66fee7b63f009e80ea2226fbba1b03d3936cc6ba1ed50481ef7cad87faabdfff5228a7dbca19abbebb1c20965e4ab3b995d523a9badcc7a546725c24e88c10232de7d405e7562516b25d8a52918e7761d2c46de00802150afbb8316ba510a6b126fea01e115585de6eeaba537369c74527bc4365141"], 0x100}], 0x1, &(0x7f0000000600)=ANY=[@ANYRES64, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r6, @ANYRESDEC=r1, @ANYRES32, @ANYRES16=r2, @ANYRES32=r8, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r9, @ANYRES16=r1, @ANYRES32=r10], 0x60, 0x8001}, 0x4024) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000200)={[{@resuid={'resuid', 0x3d, r7}}, {@nolazytime}, {@noquota}, {}, {@nombcache}]}, 0x9, 0x537, &(0x7f0000000fc0)="$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") mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', &(0x7f00000006c0), 0x18041, &(0x7f0000000e80)=ANY=[@ANYBLOB="7472616e733d76697274696f2c616669643d3078303030303030303030303030303030362c6c6f6f73652c63616368653d667363616368652c6163636573733d636c69656e742c63616368653d6c6f6f73652c63616368653d6d6d61702c6163636573733d757365722c666f776e65723dc1893ead14090090", @ANYRESDEC=r7, @ANYBLOB=',\x00']) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xeb, &(0x7f0000000b00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv6={0x86dd, @generic={0xb, 0x6, "cce699", 0xb5, 0x77, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, {[@fragment={0x8, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x66}], "02651dfbd1ad5a096baede5cc082299015622e9262b1a13b05268f3d261165b44910d63246ae8880624d99361975679a9ef1af813cde46d24d5046454b0b8d094613c330e630811a741f0ce08ca922f515f34894dad0720cc7f7139f44f221156469e74e1b15f3f32baf7adb26522f8750a0368539ed147b3a0fac664dfbdcb4b57459da093a3a55f87d86acd69ba46156ac4741d9c4e6bea1d7b1cbb0ce21367b1efceafd7f9cae397d9fd765"}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9, 0x12, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) 1m24.375644211s ago: executing program 1 (id=2749): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) 1m24.012349375s ago: executing program 1 (id=2755): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600010000004300000038000000c0010000030000000100200002"], 0x78) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1m23.961193239s ago: executing program 32 (id=2755): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600010000004300000038000000c0010000030000000100200002"], 0x78) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 58.993745949s ago: executing program 0 (id=3101): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f00000002c0)}, 0x10) 58.886833139s ago: executing program 0 (id=3103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r0 = socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, 0x0, 0x400d4) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, 0x0, 0x400d4) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000070601020065ff00000000000200000505000100070000000900020073797a310000000008000640000001ff"], 0x30}}, 0x44000) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e65766500001400028005000d0002000000050004000100000008000a00", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 58.815714975s ago: executing program 0 (id=3106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x20000810) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f00000002c0)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 58.762223131s ago: executing program 0 (id=3108): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006111d0000000000000000000020100009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x30, 0xbc, &(0x7f00000005c0)="5738e79210463ff433d8fefbad54f8caef8b7de79a32587ad95de00512bb7f9b9202a311961a179a3b1247b853846711", &(0x7f0000000900)=""/188, 0xff, 0x0, 0x75, 0x1000, &(0x7f00000006c0)="eaca1e7226c6745f6946cb69cdd046806a2ed99486e46f691fb2fcdc446b1e9ef2768593e00c93652dbbf2a15f65a970569c18dde535e63780f39048a4c83025fb163db351dc8913a25d3bacfcb1c7b535358b1c8eae563bfcf1348cc72a89ba250522dcacde6af0449e4877c49632224e791d932b", &(0x7f0000001040)="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", 0x2, 0x0, 0x8}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000b40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000020c0)={0x84, 0xb, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xb, 0x1a, 'noquota'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4ba5}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'team_slave_0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000080}, 0x885) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)={'b', ' *:* ', 'rw\x00'}, 0x9) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x18) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r8, &(0x7f0000000500)=0x0, &(0x7f0000000580)) sendfile(r5, r5, 0x0, 0x800000009) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000006000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000000c0)='sys_enter\x00', r10}, 0x18) getpriority(0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0xd9, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x2c, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000fddbdf25020000006800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000014000200626f6e6430000000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="140002007665746831000000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="1414680002006c6f0000110000000000000000000008070000010000"], 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x48804) 58.589449967s ago: executing program 0 (id=3112): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x8, 0x24000) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000040)={0x8000002, 0x1, 0x708d, 0x2000007, 0x10000003, 0x8002}) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x162) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)=ANY=[], 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 58.333135371s ago: executing program 0 (id=3115): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000002000000000000000400000d0200000009000000030000000b000000020000000a0000000300000000ff0700050000000000000000000005fa0d00000000"], &(0x7f0000000f40)=""/4089, 0x52, 0xff9, 0xa, 0x1}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32=r2, @ANYRESDEC=0x0], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xdc, 0x6e, 0x3a, 0x24, 0x0, 0x6, 0x1021, 0xb, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x7}, 0x44, 0x4, 0x0, 0x6, 0x7, 0x8, 0x40, 0x0, 0xfffffffe}, 0x0, 0xc, r1, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0x2e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='inode_switch_wbs\x00', r0, 0x0, 0x80000000000}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x887) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/238, 0xee}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r8 = socket(0x18, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r8, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x2, 0x2, 0x2, 0x4, {0xa, 0x4e23, 0x7fff, @mcast1, 0x101}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000780)="757dac4788e0fbb5dc9963dbd052a9c6eab7b1ad5a4aedfb4a64d4c1124fdf08792c63ba7c7c47d1295bd2ed056a156c9da69ab51c16ab431695221fc27a62fa28e39a6fa70261abbfd223ba65337af2c248084911ab6572a0fd08a4f5442b9e7e75c8be44e5ec3346a42e0d9ffd844beb79730679f2c54df15d298ec04a93c7d921facba9addb2e00aaff189f7e8a09a54252cc52bd9d8d49540e47cdb4ed77", 0xa0}], 0x1, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], 0x3b8}, 0x0, 0x20008001, 0x1}) creat(0x0, 0x83) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x28, 0x81, 0x0, 0x0, 0x0, 0x3, 0x1d611d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x26d}, 0x6025, 0x40000004005, 0x4, 0x2, 0x1, 0x1000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 58.33266102s ago: executing program 33 (id=3115): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000002000000000000000400000d0200000009000000030000000b000000020000000a0000000300000000ff0700050000000000000000000005fa0d00000000"], &(0x7f0000000f40)=""/4089, 0x52, 0xff9, 0xa, 0x1}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32=r2, @ANYRESDEC=0x0], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xdc, 0x6e, 0x3a, 0x24, 0x0, 0x6, 0x1021, 0xb, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x7}, 0x44, 0x4, 0x0, 0x6, 0x7, 0x8, 0x40, 0x0, 0xfffffffe}, 0x0, 0xc, r1, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0x2e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='inode_switch_wbs\x00', r0, 0x0, 0x80000000000}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x887) readv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/238, 0xee}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r8 = socket(0x18, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r8, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x2, 0x2, 0x2, 0x4, {0xa, 0x4e23, 0x7fff, @mcast1, 0x101}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000780)="757dac4788e0fbb5dc9963dbd052a9c6eab7b1ad5a4aedfb4a64d4c1124fdf08792c63ba7c7c47d1295bd2ed056a156c9da69ab51c16ab431695221fc27a62fa28e39a6fa70261abbfd223ba65337af2c248084911ab6572a0fd08a4f5442b9e7e75c8be44e5ec3346a42e0d9ffd844beb79730679f2c54df15d298ec04a93c7d921facba9addb2e00aaff189f7e8a09a54252cc52bd9d8d49540e47cdb4ed77", 0xa0}], 0x1, &(0x7f0000002300)=ANY=[@ANYBLOB="80000000000000000801000006000000aeb7d9aceb08448f1d5d88cba7276ba88dc5aa541f7c21bd9dfa255d24a99ad1e31ae87b8072f36e06b8b4a28c84affeef501f840ae4cfdbb13a22745b36e4caa849571a70b6f8a4c8cf670f76fe6f86615d7eb98a1deb5aae277032d3d43f60c52091726935914a2882f9511a0000003800000000000000100100000100000093837f7d4b134832608289a4c40ff648022875d6699cd9a5573718b84b848cecde2fe40000000000e00000000000000008000000fffeffffca85edd02b07806874b23e38c18781e5b92eb80254f84f81ef82aade6839e1acfb83a87f74e38c0c822020624e613d8b6541c46d1d132742f8e0f931639ab6dc0a100b94891158fb46e514b861fd6edd8a664ee05c9a5adf937ca41fcaf8504881cce91ac67dd39a30c0a42faa36f61dbb09a58c95a6385ef63df2d3c1c5064154a79f5d2ef9162721085b298718a52cfbc5889572a26663dc1e136043a669a5079aff5e23d53efa685aab4ef70a9673cb2b965195aa765218f34d1cb1d5dc7aeb751a573f948873a2fe64a1b0244e0dd800000000000000160100000700000094d01cd48c28a20ce853db47f8aaa93820c4cd222f38335bbd331b624481c665ee66de84510144a891d9a6c851d4f1f89cbbf211a1611ab8803734ffc892b853bab7642442fd620100e15d26e554eb05ee488503effec3a6c7be1596034e87e51b4845e9d0e58ec6ed844041cd8d7673d2bb7a6be4c7887083ab9291b54e3f7683932d29bcb2c3769995848ba7ebdc18c78f983dfeca39471ada77ef0b94e4c3887e50a5019fca9738a53794bfd7dc81469715139259fff234e8b23d41e3dc0e7fdb8928df68000060000000000000000101000046dd0000eaf9c26522cb054a41e6872e05006e732c5410c551f4763f44473532dbc99d24c84a80a42abce4c4438663f31de9ac94f42abe809b58e1afcbebb5911eae40d2cd30f17174f7cad9b67f0c0000000000e80000000000000001010000010000f661d014159b29c6a2e3f49c7e7ba812145454830f510e2bb31b3ed6e99b50a135e59935cc4b7d31011441f87fc75b6d4526d8d7697e37cc3d8b04bd3acd11efce2da8babee651440c000000f352be11441ee1777c0f217a7fe0860ee95d7bf944e01c634792813cae4c7541afb212fa2a007daa441bae0f76e17b5fee8ed30c976d87f630c97aeaf94ee1c68ebe04fc8eb40426d6df8d3067e18e0455b95e8cdf2577a3c09225536479d7b7b7d5b3aa32cbf09d690a86bdfe0a38871fd9b755ade4e65edac9f100000000"], 0x3b8}, 0x0, 0x20008001, 0x1}) creat(0x0, 0x83) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x28, 0x81, 0x0, 0x0, 0x0, 0x3, 0x1d611d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x26d}, 0x6025, 0x40000004005, 0x4, 0x2, 0x1, 0x1000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 57.868444554s ago: executing program 3 (id=3120): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8201, 0x4) socket(0x2, 0x3, 0xff) 57.867660734s ago: executing program 3 (id=3121): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) msgrcv(0x0, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) getrandom(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000280)={0xb647, 0xf, 0x0, 0x8, 0x3ff, 0x5}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x7, 0x8000, 0x8, 0x1, {{0xe, 0x4, 0x0, 0x7, 0x38, 0x64, 0x0, 0x0, 0x29, 0x0, @broadcast, @multicast1, {[@noop, @timestamp_addr={0x44, 0x14, 0x3c, 0x1, 0x5, [{@multicast1, 0x6}, {@rand_addr=0x64010100, 0x5}]}, @end, @lsrr={0x83, 0x7, 0x58, [@dev={0xac, 0x14, 0x14, 0x28}]}, @generic={0x94, 0x4, "92ff"}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', r5, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f0000000000)="3df7dab2742a1a61f6c362232d1ca21713228ebba21c414bd429d05f93b3b6cd1fcb7f9bbfbb1bc905d11583e1b93b5cd88a4c7d371f222aa269619b660c7d4f6187", 0x0, 0xd, 0x0, 0xa1, 0x0, &(0x7f0000000080)="6cda76a0cb69aa9286472dff66c8ffbd0b0cb7a6d5e68e91e0d6ed6a60fabc09fcb4dd1383593edef59da099eacb822a2749d7f0dc2c487e30da87d739e82a08e123f9b53e1e4b3a4eb01a1f659b8de567c570b02c918227d7e87a25870af1719286c055ad197c32b7104373fe5ea1c91bb58e20bbf4359770e5905ed5a8b4a48138db5835e1ea1b40218c71f5d3a2dccbf596e61e54e0ab32d242d24c15c4f342", 0x0, 0x2, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) 57.832675497s ago: executing program 3 (id=3122): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES8, @ANYRES8=r0], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000bc0)={r1, &(0x7f0000000cc0), 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf7, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000500)=""/149, 0x1016000, 0x0, 0x200, 0x3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xf, &(0x7f0000000b00)=ANY=[@ANYRESOCT, @ANYRESHEX=r2, @ANYRES32=r4], &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10) time(0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@gettclass={0x24, 0x2a, 0xa00, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {0x7, 0xd}, {0x9, 0x8}}, ["", "", "", "", "", "", "", ""]}, 0x24}}, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet_sctp(0x2, 0x5, 0x84) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r12}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='inet_sock_set_state\x00', r13}, 0x18) listen(r11, 0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000980)=0x84) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000280)={'nicvf0\x00', &(0x7f0000000300)=@ethtool_eeprom={0xc, 0x4, 0x4, 0x0, "e967fd3d59a8413c1a988c45f7398e22d46e36f9a0ee46822be1dbb7d11eb50664f8d27215a4127cdb917d44062c35b5d1641513ab7276588c71c6644707ace63aaf29df123a05b424f0e9b68fb6f18cdf46acae638381ed9fdf562d7a8797338b209312237702ca0e8614f0c0518ef7698beef1e5faa95a2a7a382a2feb4364ce263a8aebf4bd04c88c"}}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f00000000c0)={r14, 0x9, 0xc}, 0x8) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 57.560138082s ago: executing program 3 (id=3123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006111d0000000000000000000020100009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x30, 0xbc, &(0x7f00000005c0)="5738e79210463ff433d8fefbad54f8caef8b7de79a32587ad95de00512bb7f9b9202a311961a179a3b1247b853846711", &(0x7f0000000900)=""/188, 0xff, 0x0, 0x75, 0x1000, &(0x7f00000006c0)="eaca1e7226c6745f6946cb69cdd046806a2ed99486e46f691fb2fcdc446b1e9ef2768593e00c93652dbbf2a15f65a970569c18dde535e63780f39048a4c83025fb163db351dc8913a25d3bacfcb1c7b535358b1c8eae563bfcf1348cc72a89ba250522dcacde6af0449e4877c49632224e791d932b", &(0x7f0000001040)="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", 0x2, 0x0, 0x8}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000b40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000020c0)={0x84, 0xb, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xb, 0x1a, 'noquota'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4ba5}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'team_slave_0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000080}, 0x885) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)={'b', ' *:* ', 'rw\x00'}, 0x9) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x18) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r7, &(0x7f0000000500)=0x0, &(0x7f0000000580)) sendfile(r4, r4, 0x0, 0x800000009) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000002040)}, 0x10) 57.47931779s ago: executing program 3 (id=3124): bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="1400000010000100e4ffffffffffffff0000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000020a01"], 0x13a8}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 57.26351421s ago: executing program 3 (id=3127): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r3, 0x0, 0x4}, 0x18) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000306010200040000000000000200000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x804) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x8fd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) unshare(0x22020600) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r9 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000000000001400000008000300", @ANYRES32=r8, @ANYBLOB="08001c00", @ANYRES32=r9, @ANYBLOB="b1b58955993967f81589ff7155938981407488335feb88adfc83f7415c608572b01df0015f3e1e1b12a274b9552cf730f584d680403df1e1f9e2366668cd0bff8352ce16d655822bbe755286a95dae6b7dbc6483ebbbe113204b81cf3aa66c88c15b0cebf0dfd47d757e04d08f34eb3d549ba71f5d909a99c763a8be77191d784c9400c7f09491941a5ce34d6ac681666417b5f6d8040800000000000000e9512d545f08b8522712db0c07b9606a9bd03f96223a03b62dcddb42993327e0ad7080038eced9b4c5ffa36d1806dd99c6444c20e63af9bfc7"], 0x24}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0d0028bd7000fbdbdf251500000008000300", @ANYRES32=r12, @ANYBLOB="30002b8008000400ff7f0000080001"], 0x4c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r11, 0x400, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8008}, 0x44004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200"], 0x80}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 57.196788206s ago: executing program 34 (id=3127): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r3, 0x0, 0x4}, 0x18) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000306010200040000000000000200000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x804) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x8fd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) unshare(0x22020600) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r9 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000000000001400000008000300", @ANYRES32=r8, @ANYBLOB="08001c00", @ANYRES32=r9, @ANYBLOB="b1b58955993967f81589ff7155938981407488335feb88adfc83f7415c608572b01df0015f3e1e1b12a274b9552cf730f584d680403df1e1f9e2366668cd0bff8352ce16d655822bbe755286a95dae6b7dbc6483ebbbe113204b81cf3aa66c88c15b0cebf0dfd47d757e04d08f34eb3d549ba71f5d909a99c763a8be77191d784c9400c7f09491941a5ce34d6ac681666417b5f6d8040800000000000000e9512d545f08b8522712db0c07b9606a9bd03f96223a03b62dcddb42993327e0ad7080038eced9b4c5ffa36d1806dd99c6444c20e63af9bfc7"], 0x24}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0d0028bd7000fbdbdf251500000008000300", @ANYRES32=r12, @ANYBLOB="30002b8008000400ff7f0000080001"], 0x4c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r11, 0x400, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8008}, 0x44004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200"], 0x80}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 6.152876818s ago: executing program 2 (id=4526): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x41, &(0x7f0000000e00)={[{@lazytime}, {@noload}, {@resgid}, {@noquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@discard}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~', @ANYRES32=0x0, @ANYBLOB="8b9faa0c513d06e532a6efb36c91d4ae3576c7125ac066619fbef045c38d8f31a8e13475e68ac2ee9dabf3bb29daec3677f8dd0d5a21fcdeaf3cde9b668219e81d8e2cedd4214f9b723394c208dd6b31e64d71016037b3ea8f432435f24a5175df8e5576c6c9c9231124a4d7248af14834b0c0473a7541a223d219ecb3cf1022e6fe2c884adb33149353c05f787ac4ee76c00646c21359216870bb1388f5fc"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xffffffff}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x6}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x8, 0x9, 0x6, 0x3}]}) 6.090343264s ago: executing program 2 (id=4530): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRES8, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10) rmdir(&(0x7f0000001cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) (async) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000005c0)={'filter\x00', 0x0, 0x0, 0x0, [0xffffffff, 0x3, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xa43, 0x8000000000000001], 0x1, 0x0, 0x0, [{}]}, 0x88) (async, rerun: 32) r5 = socket$inet6(0xa, 0x2, 0x3a) (rerun: 32) sendmmsg$inet6(r5, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000000300000000140000000000000029000000430000005755"], 0x58}}], 0x1, 0x40000000) (async, rerun: 32) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x200000000000010a, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_io_uring_setup(0x10e, &(0x7f0000000280)={0x0, 0x334e, 0x10, 0x2004, 0x1000030e}, &(0x7f0000000200)=0x0, &(0x7f0000000400)=0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) (async) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) (async, rerun: 64) io_uring_enter(r7, 0x7277, 0x0, 0x28, 0x0, 0x0) (rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000680)) (async) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYRES8=r5], &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) syz_open_dev$loop(&(0x7f00000002c0), 0xa23, 0x21a082) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 64) io_uring_setup(0x1b7b, &(0x7f00000004c0)={0x0, 0x975, 0x1c080, 0x0, 0x28b}) 6.065304386s ago: executing program 2 (id=4532): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000740)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) close_range(r2, 0xffffffffffffffff, 0x200000000000000) r4 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000001180)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000002540)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) ioctl$int_in(r5, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r5, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r6, 0x5063}], 0x1, 0xffffffffffbffff8) dup2(r5, r6) fcntl$setown(r5, 0x8, r4) tkill(r4, 0x13) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000100)={&(0x7f0000000000)=""/235, 0xeb}) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r4, &(0x7f0000000140), 0x4003) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x1, 0x2, 0x30, 0x64, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@cipso={0x86, 0x8, 0x3, [{0x2, 0x2}]}]}}, {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x7, 0x0, 0x100}}}}}}, 0x0) 3.019751609s ago: executing program 2 (id=4592): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = syz_open_procfs(0x0, 0x0) getdents64(r1, &(0x7f00000008c0)=""/4096, 0x1000) getdents64(r1, 0x0, 0x500) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={@local, 0x0, 0x0, 0x20, 0x0, [{@dev}, {@empty}]}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) 2.388575678s ago: executing program 5 (id=4595): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0ab32f16355897fb5b0000003e00000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000101000080000000bbf1ecd6c79c26d87f4d81a5c59e98ac85e4164dffc9cbef1088210ed1c7af60c1ac7ec055a939bc9232a7ce3378", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x6c}, 0x94) add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000002c0)="905fb7510ae8949481ae77cc523eae92a0b8ee03120ea8dde016249225f17e1d8ab77442fa6c130e85d0b80a2e8d8ddcebfdda814dd1ba2bb8d36029f7f33e045deab3ced42bf7dbb599ccb90fb5c8fd287b0649b1950471c1dfa19b91841d3655af4b3c9c193bb4c7a5909c73c09489042f6ee10a79ef51fd42d27d453e8083a839fe294af63578190cbd6fee5e376376fe5c0e4651121dd4433c8f77acfe2b73e8cc21dc75070db42a056a38482b2e08f2df1efa8739f77e08", 0xba, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe74}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) unshare(0x2040400) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001cc0)={&(0x7f0000001d00)='kfree\x00', r7}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000000000000000000000000180100fa1f20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000002d00000095f0b3ff75fa7caddc9be8c9bff71fa5051c4c00f32e0fb817ed7f84afe10e672804fae05cac3a97ca4ba0314bc33386f6356ceb719ff4e3388cc5747edfeb41ac22fe35ab6a9e0adb0b52d5c34f1d04625a1fd5831c7e3f229fe860262cd369"], &(0x7f0000000200)='GPL\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0001}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet6(r8, &(0x7f0000002980)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x8848, @empty, 0x7}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000000c0)="f0", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[], 0x58}}], 0x2, 0x200880c0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0182b6957500fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800344abec77ab2d1af94204d468fa78ea417a9b88e7e18f70fa6f670f166ef8b5037f4ecce25b4679c86a2a9b8c945a2500532f8ac6c660814a829cfa4622e5851", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) chroot(&(0x7f0000000180)='./file0\x00') 2.330568023s ago: executing program 5 (id=4596): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x630a, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) recvmmsg(r0, 0x0, 0x0, 0x40012020, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000800)=ANY=[@ANYBLOB="6e6f646f74732c616ccbeab9aab65c4fd7653d306b00babb3030303030303030303030303030303030372c6e66733d7374616c655f72772c7569643d", @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,time_offset=0x00000000000003cc,dots,nodots,dots,nodots,nodots,usefree,check=relaxed,nodots,nfs,nodots,showexec,nodots,umask=00000000000000000000007,nodots,nodots,dont_hash,seclabel,func=FILE_MMAP,subj_user=-+]^(-%*@@k+,:@{^[^@,uid>', @ANYRESDEC=0x0, @ANYBLOB=',audit,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) accept(r0, &(0x7f00000000c0)=@ax25={{0x3, @null}, [@default, @null, @bcast, @default, @bcast, @remote, @null, @default]}, &(0x7f0000000140)=0x80) 2.269392779s ago: executing program 5 (id=4597): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1ab0000000000000e0005"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x1, 0x0) fcntl$setpipe(r7, 0x408, 0x7) socket$nl_generic(0x10, 0x3, 0x10) 1.808700152s ago: executing program 6 (id=4604): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100ffef0000000000001b00000a5c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d10300000c000440000000002df31ab30c0000800800034000000002"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.792406294s ago: executing program 6 (id=4605): setsockopt(0xffffffffffffffff, 0x7, 0x81, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x34e}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r1, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x2003}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x8146000000000000}, 0x0, &(0x7f0000000240)={0x1b, 0x3, 0x8000, 0x800, 0x1000000002, 0x2, 0x0, 0x6}, 0x0, 0x0) 1.772422615s ago: executing program 6 (id=4606): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x53f, &(0x7f0000000440)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000200000000950000000000000080673e4b23598158bbf8672ce8aaf4549744a2fa59f5651b089ff01b4027f237ca4a4436af98aa7bb3e8beca2e8c2079ef2cba2d1a740a485272ce7169939ae7f8f06617866d9b385e63d10a00000024f01a"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x25dfdbff, {0x7a, 0x0, 0x0, 0x0, 0x14200, 0x7661c}}, 0x20}, 0x1, 0x0, 0x0, 0x40002}, 0x4004040) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x5}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r5 = getpid() setrlimit(0xc, &(0x7f0000000280)={0x9, 0x1}) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f00000012c0)=[&(0x7f0000ffe000/0x1000)=nil], &(0x7f0000001300)=[0x2], 0x0, 0x2) unshare(0x6a040000) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000080)={0xff, 0x5, 0x3}) 1.417313168s ago: executing program 5 (id=4607): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@acl}, {@i_version}]}, 0x1, 0x444, &(0x7f0000000480)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="6d1445cf9fb1a75943ed7ed29208595e4488566fc3e822d7dd3a770034f3d722ae2725092b8f868ed80ee2b544e1e8a649f69faba4d85cb8e63f681f50ca8606545c4c534c71e9b23d1ed990259ac1c72a554cc5e925618ae0856b1c7aba739a8f038ed1b3acee9c93d16d67ef3832c7dd85d9e02500b705738a43a1af5853aa9da30a6170c0c5d1e9f981e5a98dd3f4c8eb65045fd25eaae9643de053203f7669be45f071f8a5726801ee6f96aa85e64fa79cd7bcdf7d64e3920ae541a5c2504a65d949d943d2c68f"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES16=r3, @ANYRES8=r1, @ANYRES32, @ANYRESOCT=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) ustat(0x8000000000000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000940)='kfree\x00', r4}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kmem_cache_free\x00'}, 0x18) syz_emit_ethernet(0x1f, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b001142"], 0x0) keyctl$chown(0x4, r5, 0xee01, 0xee00) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023892) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') keyctl$chown(0x4, r5, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") 1.262096173s ago: executing program 4 (id=4612): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYBLOB="ffeb3e455281a9fcc678579679b8025fa759d311741196"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='balance_dirty_pages\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@grpid}, {@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x446, &(0x7f0000000d40)="$eJzs28tvG0UYAPBv7SSlLxKq8ugDCJRHxSNp0lJ64AICiQNISHAox5CkVanboCZItIogRagcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO7brJE5c8O8nbTuzO+58n3fHnt2pA+hbo+kfScSeiPg9Ioar1foGo9W/bi8vTv+9vDidRLn89l9Jpd2t5cXpvGn+ut15ZSCi8FkSh5r0O3/5yvmpUmn2UlYfX7jwwfj85SvPn7swdXb27OzFyVOnThyfePHk5AtdyTPN69bBj+cOH3j93etvTp++/t7P3yZ5/g15dMlou4NPlstd7q639taUk4EeBsK6FKvDNAYr4384irF68objtU97GhywpcrlcvmB1oeXysD/WBK9jgDojfyLPr3/zbdtmnrcFW6+XL0BSvO+nW3VIwNRyNoMNtzfdtNoRJxe+uerdIuteQ4BAFDn+3T+81yz+V8hap8L3ZutoYxExH0RsS8iTkbE/oi4P6LS9sGrEQ816yRp3X/jIsna+U/hxoaT60A6/3spW9uqn//ls78YKWa1vZX8B5Mz50qzx7L35GgM7kjrE236+OHV375odax2/pduaf/5XDCL48bAjvrXzEwtTG0m51o3r0YcHGiWf7KyEpCevgMRcXCDfZx75pvDrY7dOf82urDOVP464unq+V+KhvxzSfv1yfF7ojR7bDy/Ktb65ddrb7Xqf1P5d0F6/nc1vf5X8h9Jatdr59ffx7U/Pm95T7PR638oeadu30dTCwuXJiKGkjeqQdfun2xoN7naPs3/6JHm439frL4ThyIivYgfjohHIuLRLPbHIuLxiDjSJv+fXnni/Y3lv6PNv9odaf4z6zr/q4WhaNzTvFA8/+N3dZ2OdJp/ZOf/RKV0NNvTyedfJ3Ft7GoGAACA/55CROyJpDC2Ui4Uxsaq/4d/f+wqlObmF549M/fhxZnqbwRGYrCQP+karnkeOpHd1uf1yYb68ey58ZfFnZX62PRcaabXyUOf291i/Kf+LPY6OmDLdbyOtmtr4wC2X2fjf2jL4wC2n99rQ/8y/qF/NRn/O3sRB7D9mn3/f9KDOIDt1zD+LftBH3H/D/3L+If+ZfxDX5rfGXf+kbyCwppCFO6KMBQ2W3iq+aFefzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x78BAAD//+MK5xs=") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bind$unix(r2, &(0x7f0000000b40)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 1.238288715s ago: executing program 4 (id=4613): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {0xb, 0xb}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r2, 0xffffffffffffffff, 0x0, 0x578410eb) 1.218974006s ago: executing program 4 (id=4614): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x8}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000000206050000000000000000000000000014000780080011400000000005001500020000000500010006000000050005000200000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x4, 0x0, 0x4b, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x10, 0x7, 0x40000004, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 1.097567498s ago: executing program 4 (id=4615): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100ffef0000000000001b00000a5c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d10300000c000440000000002df31ab30c0000800800034000000002"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.096954578s ago: executing program 4 (id=4616): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x543117df}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000000800"/28], 0x50) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae25625c64f82ecc0a7bb7b", 0x40}, {&(0x7f0000000cc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d", 0x85}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="d0f28c036a8b6293adbae6a1f4a98928a2efe08e665dac369f8749c5c15e9819ef3627a4cf2264401c991774440846e7", 0x30}, {&(0x7f0000000300)="e11b12d8e463a0b8dd59326154501ecf0819f23ca714d4a23e3be62be279e7e5959106799deb35c7f7fd59d5f8dc617c2a8fbccb4792bf67e3723aaf17", 0x3d}], 0x2}}], 0x2, 0x54004) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000d80)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='wake_reaper\x00', r3}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "db748d6b120426ad", "4fe429faa1e90c473725b5e429ac42fa", "917e060b", "92816af8b4efb2ad"}, 0x28) 952.743361ms ago: executing program 5 (id=4617): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1ab0000000000000e0005"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="6115a100000000006113500000000000bfa000000000000007000000ee0016055e03010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000007000000150600001be60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x1, 0x0) fcntl$setpipe(r7, 0x408, 0x7) socket$nl_generic(0x10, 0x3, 0x10) 873.328469ms ago: executing program 6 (id=4618): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001840)={&(0x7f0000000040)='f2fs_shutdown\x00', r0, 0x0, 0x7}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffffffffffff00"/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000001480)=ANY=[@ANYBLOB="c8af00000000000000000000000000009500000000000000a49bc7cee657"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x1, @remote, 'ip6gretap0\x00'}}, 0x1e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x9, 0xad, 0x8, @local, @private1, 0x40, 0x7800, 0x7cbe, 0x8663}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r6, 0x400, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sched_process_fork\x00', r7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r6, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001780)={{r1, 0xffffffffffffffff}, &(0x7f0000001700), &(0x7f0000001740)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0xf, &(0x7f00000017c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x98b2}]}, &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x1e00, 0x8, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001580)=[r10, r1, r1, r1, r1, r10], &(0x7f00000015c0)=[{0x4, 0x3, 0x3, 0xc}, {0x4, 0x1, 0xc, 0xc}, {0x1, 0x5, 0x6}, {0x0, 0x3, 0xd, 0xc}, {0x1, 0x3, 0xf, 0x8}, {0x0, 0x1, 0xc, 0x7}, {0x4, 0x4}], 0x10, 0x9}, 0x94) close(r4) fsync(0xffffffffffffffff) 665.282888ms ago: executing program 6 (id=4619): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYRES32=r0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000300)}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x44880, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010329bd7000f1dbdf2524"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000380)={@ipv4={""/10, ""/2, @dev}, 0x0}, &(0x7f00000003c0)=0x14) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x9c, 0x24, 0xd0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x200, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000a00)={0x18c, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@ifindex=r10, r1, 0x11, 0x18, r1, @void, @value=r1}, 0x20) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) 664.195988ms ago: executing program 6 (id=4620): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x36, &(0x7f00000004c0)=ANY=[], 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat(r4, 0x0, 0x2100, 0x0) sendmsg$unix(r6, 0x0, 0x40000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) splice(r7, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r5, &(0x7f0000000100)=ANY=[], 0xe) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r12, {0x4, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000010) 467.909546ms ago: executing program 7 (id=4624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="ffeb3e455281a9fcc678579679b8025fa759d311741196"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='balance_dirty_pages\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@grpid}, {@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bind$unix(r2, &(0x7f0000000b40)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 467.064436ms ago: executing program 7 (id=4625): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='ext4_es_lookup_extent_enter\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a0011"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x0, 0xc04}}, 0x120) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000740), 0x4) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000426bd166b318ddfd56a65144dbb4565bc", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x48c4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) 463.296257ms ago: executing program 7 (id=4626): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x8, 0x24000) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000040)={0x8000002, 0x1, 0x708d, 0x2000007, 0x10000003, 0x8002}) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x162) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)=ANY=[], 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 448.280368ms ago: executing program 7 (id=4627): r0 = socket(0x840000000002, 0x3, 0xff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000100)="a90d040000746400009e150451160200000000c6ce2b163f762887a461d8e857b2e564d72be62b301789e0a1427513187d003f896bfc5120288ab1d1c4a05c20b368af9082ce86532cefc79b8f1b0d11bbdb414d3f", 0x55}, {&(0x7f0000000000)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be57aff9352b356b", 0xa}], 0x1}}], 0x2, 0x4004040) 385.326594ms ago: executing program 7 (id=4628): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x34091}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048c00}, 0x10) (fail_nth: 8) 65.479213ms ago: executing program 2 (id=4629): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x20000009}, 0xc880) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000006080)=@delchain={0x34, 0x64, 0xf31, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 58.689374ms ago: executing program 4 (id=4630): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x3, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0xb0, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x4001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r9) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r5, @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x0) 1.04129ms ago: executing program 5 (id=4631): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x961}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff2a, 0x0, 0x0, 0x0}, 0xfffffffffffffe9e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r10, 0x0, 0x5}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r9}}) splice(r8, 0x0, r7, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r7, &(0x7f0000000100)={0xe, 0x7, 0x1, {{0x1, '-'}, 0x207}}, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 466.94µs ago: executing program 7 (id=4632): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100c40e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@lazytime}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4000010) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x288000, 0x8c) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x55, 0x9, 0x8, 0x5, 0x0, 0x7, 0x50004, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x900, 0xf7, 0x8, 0x6, 0x100000001, 0x5, 0x98e1, 0x0, 0x2, 0x0, 0x6}, 0x0, 0xd, r5, 0x0) write$cgroup_int(r5, 0x0, 0x0) 0s ago: executing program 2 (id=4633): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800951aa2a21c7a4291000000368b0095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xb}, 0x94) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) ptrace$getregset(0x4204, 0x0, 0x200, 0x0) (async) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x5, 0x4f, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000003}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) syz_mount_image$ext4(&(0x7f00000005c0)='ext2\x00', &(0x7f0000000500)='./file2\x00', 0x0, &(0x7f0000000680), 0x1, 0x5c8, &(0x7f00000021c0)="$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") (async) io_uring_enter(0xffffffffffffffff, 0x50, 0x795f, 0x14, &(0x7f0000000200)={[0x400]}, 0x8) chdir(&(0x7f0000000080)='./file0\x00') (async) r2 = open(&(0x7f0000000540)='./file0\x00', 0x68042, 0x2) pwritev2(r2, &(0x7f0000000580)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0xd79d, 0x100010, 0x13) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x8) r4 = dup(r3) sendfile(r4, r2, 0x0, 0x8000fffffffc) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='fsi_master_write\x00', r1, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffa9) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, &(0x7f0000000240), 0x10) socket$igmp6(0xa, 0x3, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000000000ff00000000bfa200000000000007020000f8ffffffb703000008f40000b70400000000000085000000010000009500000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000480)='sched_process_hang\x00', r6, 0x0, 0x8}, 0x18) (async) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000080)='./file2\x00', 0x38cc084, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRESDEC], 0x4, 0x7ea, &(0x7f0000001140)="$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") (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bff57002c1097f92e91002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8096d5742db41bd61080dcbe40e0f802fc12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1531497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db39de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b0bc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000002558e0a2db3b207ef44560820814729717ba952825b2f09f115f7248b295f790ef8fce7af7ed792ca25c03ae3ed6473c093be648d5476b3a15f2eb2badaef4a7b58b6f5fc01e9083b900d635fadbd1c867280682eb2093a614dc2b3d5da9f14d3b1d24822d09ad223983e6b9"], &(0x7f0000000100)='GPL\x00', 0x14, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000380)={0x3, 0x6, 0x301, 0x2, 0x0, 0x101, 0x0}) (async) gettid() kernel console output (not intermixed with test programs): 07f97182f6038 R14: 00007f97182f5fa0 R15: 00007ffd681293d8 [ 223.028150][T14244] [ 223.274152][T14257] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3606'. [ 223.300012][T14259] lo speed is unknown, defaulting to 1000 [ 223.379543][T14263] FAULT_INJECTION: forcing a failure. [ 223.379543][T14263] name failslab, interval 1, probability 0, space 0, times 0 [ 223.392330][T14263] CPU: 1 UID: 0 PID: 14263 Comm: syz.6.3608 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 223.392434][T14263] Tainted: [W]=WARN [ 223.392441][T14263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.392454][T14263] Call Trace: [ 223.392460][T14263] [ 223.392469][T14263] __dump_stack+0x1d/0x30 [ 223.392547][T14263] dump_stack_lvl+0x95/0xd0 [ 223.392567][T14263] dump_stack+0x15/0x1b [ 223.392645][T14263] should_fail_ex+0x265/0x280 [ 223.392666][T14263] should_failslab+0x8c/0xb0 [ 223.392686][T14263] kmem_cache_alloc_noprof+0x69/0x4b0 [ 223.392709][T14263] ? alloc_empty_file+0x76/0x200 [ 223.392734][T14263] alloc_empty_file+0x76/0x200 [ 223.392759][T14263] path_openat+0x63/0x23b0 [ 223.392846][T14263] ? __rcu_read_unlock+0x4f/0x70 [ 223.392964][T14263] ? terminate_walk+0x1e6/0x210 [ 223.393008][T14263] ? path_openat+0x1d88/0x23b0 [ 223.393047][T14263] ? path_openat+0x1e82/0x23b0 [ 223.393118][T14263] ? _parse_integer_limit+0x170/0x190 [ 223.393202][T14263] do_filp_open+0x109/0x230 [ 223.393257][T14263] do_open_execat+0xd8/0x260 [ 223.393355][T14263] alloc_bprm+0x25/0x350 [ 223.393408][T14263] do_execveat_common+0x12e/0x750 [ 223.393468][T14263] __x64_sys_execve+0x5c/0x70 [ 223.393500][T14263] x64_sys_call+0x271d/0x3000 [ 223.393525][T14263] do_syscall_64+0xca/0x2b0 [ 223.393636][T14263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.393658][T14263] RIP: 0033:0x7f22f29bf749 [ 223.393672][T14263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.393689][T14263] RSP: 002b:00007f22f1427038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 223.393759][T14263] RAX: ffffffffffffffda RBX: 00007f22f2c15fa0 RCX: 00007f22f29bf749 [ 223.393771][T14263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 223.393807][T14263] RBP: 00007f22f1427090 R08: 0000000000000000 R09: 0000000000000000 [ 223.393819][T14263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.393830][T14263] R13: 00007f22f2c16038 R14: 00007f22f2c15fa0 R15: 00007ffd533587c8 [ 223.393847][T14263] [ 223.808489][T14294] Falling back ldisc for ttyS3. [ 223.823124][T14299] netdevsim netdevsim5: Direct firmware load for ./file1 failed with error -2 [ 224.092243][T14333] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3635'. [ 224.102201][T14331] sctp: [Deprecated]: syz.4.3636 (pid 14331) Use of int in max_burst socket option. [ 224.102201][T14331] Use struct sctp_assoc_value instead [ 224.126876][T14333] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3635'. [ 224.150778][T14333] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3635'. [ 224.175948][T14333] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3635'. [ 224.203003][T14333] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3635'. [ 224.226388][T14333] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3635'. [ 224.256808][T14333] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3635'. [ 224.421580][T14340] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 224.595081][T14362] FAULT_INJECTION: forcing a failure. [ 224.595081][T14362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.608429][T14362] CPU: 0 UID: 0 PID: 14362 Comm: syz.7.3647 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 224.608462][T14362] Tainted: [W]=WARN [ 224.608497][T14362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.608514][T14362] Call Trace: [ 224.608521][T14362] [ 224.608530][T14362] __dump_stack+0x1d/0x30 [ 224.608611][T14362] dump_stack_lvl+0x95/0xd0 [ 224.608639][T14362] dump_stack+0x15/0x1b [ 224.608727][T14362] should_fail_ex+0x265/0x280 [ 224.608748][T14362] should_fail+0xb/0x20 [ 224.608769][T14362] should_fail_usercopy+0x1a/0x20 [ 224.608790][T14362] strncpy_from_user+0x27/0x260 [ 224.608839][T14362] getname_flags+0xae/0x3b0 [ 224.608864][T14362] path_setxattrat+0x223/0x310 [ 224.608902][T14362] __x64_sys_lsetxattr+0x71/0x90 [ 224.608941][T14362] x64_sys_call+0x2ef0/0x3000 [ 224.608964][T14362] do_syscall_64+0xca/0x2b0 [ 224.608996][T14362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.609016][T14362] RIP: 0033:0x7f971809f749 [ 224.609152][T14362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.609169][T14362] RSP: 002b:00007f9716aff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 224.609186][T14362] RAX: ffffffffffffffda RBX: 00007f97182f5fa0 RCX: 00007f971809f749 [ 224.609197][T14362] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000200000000080 [ 224.609208][T14362] RBP: 00007f9716aff090 R08: 0000000000000000 R09: 0000000000000000 [ 224.609261][T14362] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 224.609272][T14362] R13: 00007f97182f6038 R14: 00007f97182f5fa0 R15: 00007ffd681293d8 [ 224.609289][T14362] [ 224.869764][T14377] FAULT_INJECTION: forcing a failure. [ 224.869764][T14377] name failslab, interval 1, probability 0, space 0, times 0 [ 224.882523][T14377] CPU: 1 UID: 0 PID: 14377 Comm: syz.2.3655 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 224.882565][T14377] Tainted: [W]=WARN [ 224.882605][T14377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 224.882622][T14377] Call Trace: [ 224.882631][T14377] [ 224.882702][T14377] __dump_stack+0x1d/0x30 [ 224.882734][T14377] dump_stack_lvl+0x95/0xd0 [ 224.882764][T14377] dump_stack+0x15/0x1b [ 224.882790][T14377] should_fail_ex+0x265/0x280 [ 224.882897][T14377] should_failslab+0x8c/0xb0 [ 224.882926][T14377] kmem_cache_alloc_noprof+0x69/0x4b0 [ 224.882957][T14377] ? alloc_empty_file+0x76/0x200 [ 224.883032][T14377] alloc_empty_file+0x76/0x200 [ 224.883061][T14377] path_openat+0x63/0x23b0 [ 224.883205][T14377] ? __rcu_read_unlock+0x4f/0x70 [ 224.883268][T14377] ? terminate_walk+0x1e6/0x210 [ 224.883299][T14377] ? path_openat+0x1d88/0x23b0 [ 224.883337][T14377] ? path_openat+0x1e82/0x23b0 [ 224.883455][T14377] ? _parse_integer_limit+0x170/0x190 [ 224.883484][T14377] do_filp_open+0x109/0x230 [ 224.883592][T14377] do_open_execat+0xd8/0x260 [ 224.883633][T14377] alloc_bprm+0x25/0x350 [ 224.883666][T14377] do_execveat_common+0x12e/0x750 [ 224.883695][T14377] __x64_sys_execve+0x5c/0x70 [ 224.883796][T14377] x64_sys_call+0x271d/0x3000 [ 224.883841][T14377] do_syscall_64+0xca/0x2b0 [ 224.883879][T14377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.883906][T14377] RIP: 0033:0x7f9e24f4f749 [ 224.883961][T14377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.883979][T14377] RSP: 002b:00007f9e239af038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 224.883998][T14377] RAX: ffffffffffffffda RBX: 00007f9e251a5fa0 RCX: 00007f9e24f4f749 [ 224.884081][T14377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 224.884136][T14377] RBP: 00007f9e239af090 R08: 0000000000000000 R09: 0000000000000000 [ 224.884199][T14377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.884230][T14377] R13: 00007f9e251a6038 R14: 00007f9e251a5fa0 R15: 00007ffc4f0b7608 [ 224.884332][T14377] [ 225.216570][T14395] FAULT_INJECTION: forcing a failure. [ 225.216570][T14395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.229790][T14395] CPU: 0 UID: 0 PID: 14395 Comm: syz.6.3652 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 225.229829][T14395] Tainted: [W]=WARN [ 225.229838][T14395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.229854][T14395] Call Trace: [ 225.229862][T14395] [ 225.229872][T14395] __dump_stack+0x1d/0x30 [ 225.229961][T14395] dump_stack_lvl+0x95/0xd0 [ 225.229987][T14395] dump_stack+0x15/0x1b [ 225.230013][T14395] should_fail_ex+0x265/0x280 [ 225.230041][T14395] should_fail+0xb/0x20 [ 225.230076][T14395] should_fail_usercopy+0x1a/0x20 [ 225.230126][T14395] _copy_from_user+0x1c/0xb0 [ 225.230205][T14395] kstrtouint_from_user+0x69/0xf0 [ 225.230307][T14395] ? 0xffffffff81000000 [ 225.230324][T14395] ? selinux_file_permission+0x1e2/0x320 [ 225.230367][T14395] proc_fail_nth_write+0x50/0x160 [ 225.230404][T14395] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 225.230501][T14395] vfs_write+0x269/0x960 [ 225.230525][T14395] ? vfs_read+0x4e6/0x770 [ 225.230546][T14395] ? __rcu_read_unlock+0x4f/0x70 [ 225.230569][T14395] ? __fget_files+0x184/0x1c0 [ 225.230593][T14395] ? mutex_lock+0x58/0x90 [ 225.230635][T14395] ksys_write+0xda/0x1a0 [ 225.230731][T14395] __x64_sys_write+0x40/0x50 [ 225.230756][T14395] x64_sys_call+0x2847/0x3000 [ 225.230784][T14395] do_syscall_64+0xca/0x2b0 [ 225.230820][T14395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.230887][T14395] RIP: 0033:0x7f22f29be1ff [ 225.230907][T14395] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 225.230929][T14395] RSP: 002b:00007f22f1427030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 225.230954][T14395] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f22f29be1ff [ 225.230970][T14395] RDX: 0000000000000001 RSI: 00007f22f14270a0 RDI: 0000000000000004 [ 225.230987][T14395] RBP: 00007f22f1427090 R08: 0000000000000000 R09: 0000000000000000 [ 225.231003][T14395] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 225.231073][T14395] R13: 00007f22f2c16038 R14: 00007f22f2c15fa0 R15: 00007ffd533587c8 [ 225.231093][T14395] [ 225.571862][T14422] FAULT_INJECTION: forcing a failure. [ 225.571862][T14422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.585097][T14422] CPU: 1 UID: 0 PID: 14422 Comm: syz.7.3671 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 225.585196][T14422] Tainted: [W]=WARN [ 225.585203][T14422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.585273][T14422] Call Trace: [ 225.585282][T14422] [ 225.585292][T14422] __dump_stack+0x1d/0x30 [ 225.585324][T14422] dump_stack_lvl+0x95/0xd0 [ 225.585370][T14422] dump_stack+0x15/0x1b [ 225.585394][T14422] should_fail_ex+0x265/0x280 [ 225.585423][T14422] should_fail+0xb/0x20 [ 225.585443][T14422] should_fail_usercopy+0x1a/0x20 [ 225.585470][T14422] _copy_from_user+0x1c/0xb0 [ 225.585540][T14422] kstrtouint_from_user+0x69/0xf0 [ 225.585569][T14422] ? 0xffffffff81000000 [ 225.585587][T14422] ? selinux_file_permission+0x1e2/0x320 [ 225.585675][T14422] proc_fail_nth_write+0x50/0x160 [ 225.585712][T14422] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 225.585810][T14422] vfs_write+0x269/0x960 [ 225.585833][T14422] ? vfs_read+0x4e6/0x770 [ 225.585852][T14422] ? __rcu_read_unlock+0x4f/0x70 [ 225.585872][T14422] ? __fget_files+0x184/0x1c0 [ 225.585955][T14422] ? mutex_lock+0x58/0x90 [ 225.585986][T14422] ksys_write+0xda/0x1a0 [ 225.586018][T14422] __x64_sys_write+0x40/0x50 [ 225.586054][T14422] x64_sys_call+0x2847/0x3000 [ 225.586086][T14422] do_syscall_64+0xca/0x2b0 [ 225.586122][T14422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.586144][T14422] RIP: 0033:0x7f971809e1ff [ 225.586232][T14422] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 225.586253][T14422] RSP: 002b:00007f9716aff030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 225.586277][T14422] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f971809e1ff [ 225.586293][T14422] RDX: 0000000000000001 RSI: 00007f9716aff0a0 RDI: 0000000000000003 [ 225.586309][T14422] RBP: 00007f9716aff090 R08: 0000000000000000 R09: 0000000000000000 [ 225.586323][T14422] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 225.586407][T14422] R13: 00007f97182f6038 R14: 00007f97182f5fa0 R15: 00007ffd681293d8 [ 225.586431][T14422] [ 225.865255][T14437] FAULT_INJECTION: forcing a failure. [ 225.865255][T14437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.878438][T14437] CPU: 1 UID: 0 PID: 14437 Comm: syz.5.3680 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 225.878477][T14437] Tainted: [W]=WARN [ 225.878486][T14437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.878502][T14437] Call Trace: [ 225.878584][T14437] [ 225.878595][T14437] __dump_stack+0x1d/0x30 [ 225.878627][T14437] dump_stack_lvl+0x95/0xd0 [ 225.878655][T14437] dump_stack+0x15/0x1b [ 225.878678][T14437] should_fail_ex+0x265/0x280 [ 225.878702][T14437] should_fail+0xb/0x20 [ 225.878731][T14437] should_fail_usercopy+0x1a/0x20 [ 225.878761][T14437] _copy_from_iter+0xcf/0xe70 [ 225.878788][T14437] ? __alloc_skb+0x396/0x4b0 [ 225.878811][T14437] ? __alloc_skb+0x228/0x4b0 [ 225.878862][T14437] netlink_sendmsg+0x471/0x6b0 [ 225.878977][T14437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.879013][T14437] __sock_sendmsg+0x145/0x180 [ 225.879074][T14437] ____sys_sendmsg+0x345/0x4a0 [ 225.879111][T14437] ___sys_sendmsg+0x17b/0x1d0 [ 225.879161][T14437] __sys_sendmmsg+0x178/0x300 [ 225.879201][T14437] __x64_sys_sendmmsg+0x57/0x70 [ 225.879286][T14437] x64_sys_call+0x1e28/0x3000 [ 225.879310][T14437] do_syscall_64+0xca/0x2b0 [ 225.879381][T14437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.879408][T14437] RIP: 0033:0x7f6a4eb5f749 [ 225.879472][T14437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.879497][T14437] RSP: 002b:00007f6a4d5c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 225.879523][T14437] RAX: ffffffffffffffda RBX: 00007f6a4edb5fa0 RCX: 00007f6a4eb5f749 [ 225.879540][T14437] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 225.879556][T14437] RBP: 00007f6a4d5c7090 R08: 0000000000000000 R09: 0000000000000000 [ 225.879572][T14437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.879662][T14437] R13: 00007f6a4edb6038 R14: 00007f6a4edb5fa0 R15: 00007ffe4c7c8628 [ 225.879686][T14437] [ 226.169718][T14463] FAULT_INJECTION: forcing a failure. [ 226.169718][T14463] name failslab, interval 1, probability 0, space 0, times 0 [ 226.182512][T14463] CPU: 0 UID: 0 PID: 14463 Comm: syz.6.3691 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 226.182552][T14463] Tainted: [W]=WARN [ 226.182620][T14463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 226.182633][T14463] Call Trace: [ 226.182640][T14463] [ 226.182649][T14463] __dump_stack+0x1d/0x30 [ 226.182680][T14463] dump_stack_lvl+0x95/0xd0 [ 226.182733][T14463] dump_stack+0x15/0x1b [ 226.182797][T14463] should_fail_ex+0x265/0x280 [ 226.182821][T14463] should_failslab+0x8c/0xb0 [ 226.182843][T14463] __kmalloc_cache_noprof+0x65/0x4c0 [ 226.182911][T14463] ? dev_ethtool+0x96/0x1670 [ 226.182934][T14463] dev_ethtool+0x96/0x1670 [ 226.182953][T14463] ? full_name_hash+0x92/0xe0 [ 226.183032][T14463] ? strcmp+0x22/0x50 [ 226.183053][T14463] dev_ioctl+0x2e0/0x960 [ 226.183092][T14463] sock_do_ioctl+0x197/0x220 [ 226.183150][T14463] sock_ioctl+0x41b/0x610 [ 226.183295][T14458] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.183269][T14463] ? __pfx_sock_ioctl+0x10/0x10 [ 226.183439][T14463] __se_sys_ioctl+0xce/0x140 [ 226.183600][T14463] __x64_sys_ioctl+0x43/0x50 [ 226.183707][T14463] x64_sys_call+0x14b0/0x3000 [ 226.183759][T14463] do_syscall_64+0xca/0x2b0 [ 226.183875][T14463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.183964][T14463] RIP: 0033:0x7f22f29bf749 [ 226.184028][T14463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.184086][T14463] RSP: 002b:00007f22f1427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.184151][T14463] RAX: ffffffffffffffda RBX: 00007f22f2c15fa0 RCX: 00007f22f29bf749 [ 226.184191][T14463] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 226.184234][T14463] RBP: 00007f22f1427090 R08: 0000000000000000 R09: 0000000000000000 [ 226.184277][T14463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.184393][T14463] R13: 00007f22f2c16038 R14: 00007f22f2c15fa0 R15: 00007ffd533587c8 [ 226.184457][T14463] [ 226.618508][T14494] bridge0: entered promiscuous mode [ 226.623981][T14494] macvtap1: entered promiscuous mode [ 226.629510][T14494] macvtap1: entered allmulticast mode [ 226.634946][T14494] bridge0: entered allmulticast mode [ 226.642046][T14494] bridge0: port 3(macvtap1) entered blocking state [ 226.648859][T14494] bridge0: port 3(macvtap1) entered disabled state [ 226.656856][T14494] bridge0: left allmulticast mode [ 226.662057][T14494] bridge0: left promiscuous mode [ 226.725694][ T29] kauditd_printk_skb: 1525 callbacks suppressed [ 226.725712][ T29] audit: type=1400 audit(1766807438.127:86244): avc: denied { read write } for pid=12437 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 226.769370][ T29] audit: type=1400 audit(1766807438.167:86245): avc: denied { read write } for pid=14496 comm="syz.4.3705" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 226.802721][ T29] audit: type=1400 audit(1766807438.167:86246): avc: denied { read write } for pid=12881 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 226.827351][ T29] audit: type=1400 audit(1766807438.197:86247): avc: denied { map_create } for pid=14498 comm="syz.7.3704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 226.846824][ T29] audit: type=1400 audit(1766807438.197:86248): avc: denied { map_create } for pid=14496 comm="syz.4.3705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 226.866229][ T29] audit: type=1400 audit(1766807438.197:86249): avc: denied { prog_load } for pid=14496 comm="syz.4.3705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 226.885689][ T29] audit: type=1400 audit(1766807438.197:86250): avc: denied { execmem } for pid=14496 comm="syz.4.3705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 226.905159][ T29] audit: type=1400 audit(1766807438.197:86251): avc: denied { mounton } for pid=14496 comm="syz.4.3705" path="/127" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 226.927574][ T29] audit: type=1400 audit(1766807438.197:86252): avc: denied { prog_load } for pid=14498 comm="syz.7.3704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 226.946896][ T29] audit: type=1400 audit(1766807438.197:86253): avc: denied { name_bind } for pid=14498 comm="syz.7.3704" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 227.115783][T14518] netlink: 'syz.5.3713': attribute type 39 has an invalid length. [ 227.329590][T14534] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 227.436201][T14546] lo speed is unknown, defaulting to 1000 [ 227.725488][T14572] xt_hashlimit: max too large, truncated to 1048576 [ 227.732310][T14572] No such timeout policy "syz1" [ 227.796308][T14584] FAULT_INJECTION: forcing a failure. [ 227.796308][T14584] name failslab, interval 1, probability 0, space 0, times 0 [ 227.809231][T14584] CPU: 0 UID: 0 PID: 14584 Comm: syz.7.3742 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 227.809275][T14584] Tainted: [W]=WARN [ 227.809285][T14584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.809303][T14584] Call Trace: [ 227.809370][T14584] [ 227.809381][T14584] __dump_stack+0x1d/0x30 [ 227.809412][T14584] dump_stack_lvl+0x95/0xd0 [ 227.809441][T14584] dump_stack+0x15/0x1b [ 227.809513][T14584] should_fail_ex+0x265/0x280 [ 227.809539][T14584] should_failslab+0x8c/0xb0 [ 227.809646][T14584] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 227.809676][T14584] ? __d_alloc+0x37/0x340 [ 227.809712][T14584] __d_alloc+0x37/0x340 [ 227.809780][T14584] ? security_inode_permission+0x4a/0xb0 [ 227.809816][T14584] d_alloc_parallel+0x54/0xcd0 [ 227.809914][T14584] ? __rcu_read_unlock+0x4f/0x70 [ 227.809940][T14584] ? __d_lookup+0x316/0x340 [ 227.809977][T14584] ? try_to_unlazy+0x283/0x3d0 [ 227.810086][T14584] path_openat+0x8c6/0x23b0 [ 227.810145][T14584] do_filp_open+0x109/0x230 [ 227.810201][T14584] do_sys_openat2+0xa6/0x150 [ 227.810321][T14584] __x64_sys_openat+0xf2/0x120 [ 227.810352][T14584] x64_sys_call+0x2b07/0x3000 [ 227.810382][T14584] do_syscall_64+0xca/0x2b0 [ 227.810505][T14584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.810537][T14584] RIP: 0033:0x7f971809f749 [ 227.810554][T14584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.810582][T14584] RSP: 002b:00007f9716aff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 227.810602][T14584] RAX: ffffffffffffffda RBX: 00007f97182f5fa0 RCX: 00007f971809f749 [ 227.810689][T14584] RDX: 000000000000275a RSI: 0000200000000180 RDI: ffffffffffffff9c [ 227.810705][T14584] RBP: 00007f9716aff090 R08: 0000000000000000 R09: 0000000000000000 [ 227.810721][T14584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.810734][T14584] R13: 00007f97182f6038 R14: 00007f97182f5fa0 R15: 00007ffd681293d8 [ 227.810753][T14584] [ 227.829205][T14586] netlink: 'syz.6.3743': attribute type 21 has an invalid length. [ 228.028949][T14586] netlink: 'syz.6.3743': attribute type 1 has an invalid length. [ 228.036833][T14586] __nla_validate_parse: 30 callbacks suppressed [ 228.036854][T14586] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3743'. [ 228.068278][T14597] netlink: 'syz.7.3747': attribute type 10 has an invalid length. [ 228.079589][T14597] netlink: 'syz.7.3747': attribute type 10 has an invalid length. [ 228.088613][T14597] team0: Port device dummy0 removed [ 228.103341][T14601] xt_hashlimit: max too large, truncated to 1048576 [ 228.111146][T14601] Timeout policy `syz1' can only be used by L3 protocol number 24580 [ 228.122361][T14603] FAULT_INJECTION: forcing a failure. [ 228.122361][T14603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.135628][T14603] CPU: 1 UID: 0 PID: 14603 Comm: syz.7.3750 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 228.135669][T14603] Tainted: [W]=WARN [ 228.135678][T14603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 228.135752][T14603] Call Trace: [ 228.135760][T14603] [ 228.135770][T14603] __dump_stack+0x1d/0x30 [ 228.135810][T14603] dump_stack_lvl+0x95/0xd0 [ 228.135834][T14603] dump_stack+0x15/0x1b [ 228.135854][T14603] should_fail_ex+0x265/0x280 [ 228.135878][T14603] should_fail+0xb/0x20 [ 228.135970][T14603] should_fail_usercopy+0x1a/0x20 [ 228.136001][T14603] _copy_from_iter+0xcf/0xe70 [ 228.136035][T14603] ? __alloc_skb+0x396/0x4b0 [ 228.136059][T14603] ? __alloc_skb+0x228/0x4b0 [ 228.136115][T14603] netlink_sendmsg+0x471/0x6b0 [ 228.136185][T14603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.136217][T14603] __sock_sendmsg+0x145/0x180 [ 228.136237][T14603] ____sys_sendmsg+0x345/0x4a0 [ 228.136348][T14603] ___sys_sendmsg+0x17b/0x1d0 [ 228.136493][T14603] __sys_sendmmsg+0x178/0x300 [ 228.136615][T14603] __x64_sys_sendmmsg+0x57/0x70 [ 228.136654][T14603] x64_sys_call+0x1e28/0x3000 [ 228.136686][T14603] do_syscall_64+0xca/0x2b0 [ 228.136790][T14603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.136824][T14603] RIP: 0033:0x7f971809f749 [ 228.136843][T14603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.136914][T14603] RSP: 002b:00007f9716aff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 228.136934][T14603] RAX: ffffffffffffffda RBX: 00007f97182f5fa0 RCX: 00007f971809f749 [ 228.136947][T14603] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 228.137004][T14603] RBP: 00007f9716aff090 R08: 0000000000000000 R09: 0000000000000000 [ 228.137020][T14603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.137035][T14603] R13: 00007f97182f6038 R14: 00007f97182f5fa0 R15: 00007ffd681293d8 [ 228.137059][T14603] [ 228.379781][T14614] FAULT_INJECTION: forcing a failure. [ 228.379781][T14614] name failslab, interval 1, probability 0, space 0, times 0 [ 228.392592][T14614] CPU: 0 UID: 0 PID: 14614 Comm: syz.6.3754 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 228.392699][T14614] Tainted: [W]=WARN [ 228.392708][T14614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 228.392724][T14614] Call Trace: [ 228.392732][T14614] [ 228.392741][T14614] __dump_stack+0x1d/0x30 [ 228.392774][T14614] dump_stack_lvl+0x95/0xd0 [ 228.392797][T14614] dump_stack+0x15/0x1b [ 228.392844][T14614] should_fail_ex+0x265/0x280 [ 228.392874][T14614] should_failslab+0x8c/0xb0 [ 228.392902][T14614] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 228.392973][T14614] ? security_context_to_sid_core+0x69/0x3b0 [ 228.393008][T14614] kmemdup_nul+0x36/0xc0 [ 228.393027][T14614] security_context_to_sid_core+0x69/0x3b0 [ 228.393067][T14614] ? avc_has_perm_noaudit+0xab/0x130 [ 228.393106][T14614] security_context_to_sid+0x2e/0x40 [ 228.393141][T14614] selinux_lsm_setattr+0x2db/0x660 [ 228.393189][T14614] selinux_setprocattr+0x4f/0x70 [ 228.393218][T14614] security_setprocattr+0x1a7/0x1d0 [ 228.393247][T14614] proc_pid_attr_write+0x1eb/0x220 [ 228.393358][T14614] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 228.393395][T14614] vfs_write+0x269/0x960 [ 228.393420][T14614] ? __rcu_read_unlock+0x4f/0x70 [ 228.393445][T14614] ? __fget_files+0x184/0x1c0 [ 228.393548][T14614] ? mutex_lock+0x58/0x90 [ 228.393577][T14614] ksys_write+0xda/0x1a0 [ 228.393597][T14614] __x64_sys_write+0x40/0x50 [ 228.393617][T14614] x64_sys_call+0x2847/0x3000 [ 228.393646][T14614] do_syscall_64+0xca/0x2b0 [ 228.393742][T14614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.393771][T14614] RIP: 0033:0x7f22f29bf749 [ 228.393790][T14614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.393810][T14614] RSP: 002b:00007f22f1427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 228.393830][T14614] RAX: ffffffffffffffda RBX: 00007f22f2c15fa0 RCX: 00007f22f29bf749 [ 228.393845][T14614] RDX: 000000000000001d RSI: 0000200000000100 RDI: 0000000000000003 [ 228.393874][T14614] RBP: 00007f22f1427090 R08: 0000000000000000 R09: 0000000000000000 [ 228.393891][T14614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.393908][T14614] R13: 00007f22f2c16038 R14: 00007f22f2c15fa0 R15: 00007ffd533587c8 [ 228.393928][T14614] [ 228.727205][T14630] xt_hashlimit: max too large, truncated to 1048576 [ 228.734025][T14630] No such timeout policy "syz1" [ 228.773240][T14634] lo speed is unknown, defaulting to 1000 [ 228.789926][T14632] lo speed is unknown, defaulting to 1000 [ 228.810177][T14642] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3764'. [ 228.832480][T14645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3765'. [ 228.903045][T14652] netlink: 24 bytes leftover after parsing attributes in process `,&#^%'. [ 229.143473][T14681] xt_hashlimit: max too large, truncated to 1048576 [ 229.150771][T14681] No such timeout policy "syz1" [ 229.212390][T14679] syzkaller0: entered promiscuous mode [ 229.218036][T14679] syzkaller0: entered allmulticast mode [ 229.386083][T14709] xt_hashlimit: max too large, truncated to 1048576 [ 229.401804][T14709] No such timeout policy "syz1" [ 229.415034][T14711] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 229.434063][T14694] lo speed is unknown, defaulting to 1000 [ 229.607707][T14724] FAULT_INJECTION: forcing a failure. [ 229.607707][T14724] name failslab, interval 1, probability 0, space 0, times 0 [ 229.620457][T14724] CPU: 1 UID: 0 PID: 14724 Comm: syz.7.3806 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 229.620557][T14724] Tainted: [W]=WARN [ 229.620566][T14724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 229.620628][T14724] Call Trace: [ 229.620637][T14724] [ 229.620648][T14724] __dump_stack+0x1d/0x30 [ 229.620731][T14724] dump_stack_lvl+0x95/0xd0 [ 229.620758][T14724] dump_stack+0x15/0x1b [ 229.620783][T14724] should_fail_ex+0x265/0x280 [ 229.620885][T14724] ? __pfx_resume_store+0x10/0x10 [ 229.620990][T14724] should_failslab+0x8c/0xb0 [ 229.621014][T14724] kmem_cache_alloc_noprof+0x69/0x4b0 [ 229.621037][T14724] ? getname_kernel+0x3c/0x1f0 [ 229.621064][T14724] ? should_fail_ex+0xdb/0x280 [ 229.621098][T14724] ? __pfx_resume_store+0x10/0x10 [ 229.621164][T14724] getname_kernel+0x3c/0x1f0 [ 229.621189][T14724] kern_path+0x23/0x130 [ 229.621218][T14724] ? __pfx_resume_store+0x10/0x10 [ 229.621239][T14724] lookup_bdev+0x66/0x150 [ 229.621314][T14724] resume_store+0x10b/0x3d0 [ 229.621332][T14724] ? _copy_from_iter+0x13e/0xe70 [ 229.621356][T14724] ? should_fail_ex+0xdb/0x280 [ 229.621401][T14724] ? __pfx_resume_store+0x10/0x10 [ 229.621433][T14724] kobj_attr_store+0x4a/0x70 [ 229.621492][T14724] ? __pfx_kobj_attr_store+0x10/0x10 [ 229.621547][T14724] sysfs_kf_write+0xfe/0x120 [ 229.621569][T14724] ? __pfx_sysfs_kf_write+0x10/0x10 [ 229.621589][T14724] kernfs_fop_write_iter+0x1eb/0x300 [ 229.621625][T14724] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 229.621690][T14724] vfs_write+0x52a/0x960 [ 229.621714][T14724] ksys_write+0xda/0x1a0 [ 229.621735][T14724] __x64_sys_write+0x40/0x50 [ 229.621772][T14724] x64_sys_call+0x2847/0x3000 [ 229.621842][T14724] do_syscall_64+0xca/0x2b0 [ 229.621876][T14724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.621898][T14724] RIP: 0033:0x7f971809f749 [ 229.621913][T14724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.621996][T14724] RSP: 002b:00007f9716aff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 229.622016][T14724] RAX: ffffffffffffffda RBX: 00007f97182f5fa0 RCX: 00007f971809f749 [ 229.622029][T14724] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000004 [ 229.622041][T14724] RBP: 00007f9716aff090 R08: 0000000000000000 R09: 0000000000000000 [ 229.622053][T14724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.622065][T14724] R13: 00007f97182f6038 R14: 00007f97182f5fa0 R15: 00007ffd681293d8 [ 229.622086][T14724] [ 229.622856][T14720] syzkaller0: entered promiscuous mode [ 229.646064][T14724] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 229.648321][T14720] syzkaller0: entered allmulticast mode [ 229.795007][T14729] netlink: 'syz.4.3805': attribute type 1 has an invalid length. [ 229.927830][T14729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.149845][T14750] lo speed is unknown, defaulting to 1000 [ 230.358786][T14781] netlink: 'syz.6.3826': attribute type 39 has an invalid length. [ 230.462876][T14794] FAULT_INJECTION: forcing a failure. [ 230.462876][T14794] name failslab, interval 1, probability 0, space 0, times 0 [ 230.475722][T14794] CPU: 0 UID: 0 PID: 14794 Comm: syz.4.3834 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 230.475799][T14794] Tainted: [W]=WARN [ 230.475810][T14794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 230.475825][T14794] Call Trace: [ 230.475832][T14794] [ 230.475840][T14794] __dump_stack+0x1d/0x30 [ 230.475865][T14794] dump_stack_lvl+0x95/0xd0 [ 230.475947][T14794] dump_stack+0x15/0x1b [ 230.476053][T14794] should_fail_ex+0x265/0x280 [ 230.476077][T14794] should_failslab+0x8c/0xb0 [ 230.476104][T14794] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 230.476136][T14794] ? sidtab_sid2str_get+0xa0/0x130 [ 230.476223][T14794] ? skb_put+0xa9/0xf0 [ 230.476257][T14794] kmemdup_noprof+0x2b/0x70 [ 230.476357][T14794] sidtab_sid2str_get+0xa0/0x130 [ 230.476495][T14794] security_sid_to_context_core+0x1eb/0x2e0 [ 230.476529][T14794] security_sid_to_context+0x27/0x40 [ 230.476558][T14794] avc_audit_post_callback+0x9d/0x520 [ 230.476659][T14794] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 230.476727][T14794] common_lsm_audit+0x1bb/0x230 [ 230.476760][T14794] ? _parse_integer_limit+0x170/0x190 [ 230.476789][T14794] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 230.476834][T14794] slow_avc_audit+0x104/0x140 [ 230.476881][T14794] avc_has_perm+0x13a/0x180 [ 230.476949][T14794] selinux_bpf+0xa3/0xc0 [ 230.477038][T14794] security_bpf+0x52/0x90 [ 230.477063][T14794] __sys_bpf+0x1c3/0x7c0 [ 230.477088][T14794] __x64_sys_bpf+0x41/0x50 [ 230.477117][T14794] x64_sys_call+0x28e1/0x3000 [ 230.477231][T14794] do_syscall_64+0xca/0x2b0 [ 230.477262][T14794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.477282][T14794] RIP: 0033:0x7fc9b989f749 [ 230.477313][T14794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.477365][T14794] RSP: 002b:00007fc9b82ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.477383][T14794] RAX: ffffffffffffffda RBX: 00007fc9b9af5fa0 RCX: 00007fc9b989f749 [ 230.477399][T14794] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 230.477410][T14794] RBP: 00007fc9b82ff090 R08: 0000000000000000 R09: 0000000000000000 [ 230.477495][T14794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.477554][T14794] R13: 00007fc9b9af6038 R14: 00007fc9b9af5fa0 R15: 00007fff3d11f648 [ 230.477572][T14794] [ 230.942876][T14817] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3843'. [ 230.975947][T14821] FAULT_INJECTION: forcing a failure. [ 230.975947][T14821] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 230.989293][T14821] CPU: 1 UID: 0 PID: 14821 Comm: syz.7.3846 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 230.989337][T14821] Tainted: [W]=WARN [ 230.989347][T14821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 230.989382][T14821] Call Trace: [ 230.989390][T14821] [ 230.989398][T14821] __dump_stack+0x1d/0x30 [ 230.989423][T14821] dump_stack_lvl+0x95/0xd0 [ 230.989452][T14821] dump_stack+0x15/0x1b [ 230.989478][T14821] should_fail_ex+0x265/0x280 [ 230.989633][T14821] should_fail_alloc_page+0xf2/0x100 [ 230.989665][T14821] __alloc_frozen_pages_noprof+0x109/0x360 [ 230.989780][T14821] alloc_pages_mpol+0xb3/0x260 [ 230.989813][T14821] alloc_pages_noprof+0x90/0x130 [ 230.989849][T14821] get_free_pages_noprof+0xc/0x40 [ 230.989906][T14821] selinux_genfs_get_sid+0x33/0x180 [ 230.989936][T14821] inode_doinit_with_dentry+0x5fd/0x7a0 [ 230.989967][T14821] selinux_d_instantiate+0x27/0x40 [ 230.989999][T14821] security_d_instantiate+0x7a/0xa0 [ 230.990023][T14821] d_make_persistent+0x4f/0x110 [ 230.990063][T14821] __debugfs_create_file+0x14e/0x2b0 [ 230.990109][T14821] debugfs_create_file_full+0x3f/0x60 [ 230.990212][T14821] ? __pfx_sl_setup+0x10/0x10 [ 230.990247][T14821] ref_tracker_dir_debugfs+0x100/0x210 [ 230.990352][T14821] alloc_netdev_mqs+0x1a7/0xa40 [ 230.990418][T14821] slip_open+0x2d1/0x920 [ 230.990444][T14821] ? skb_queue_purge_reason+0x151/0x250 [ 230.990466][T14821] ? ppp_sync_close+0xdf/0x110 [ 230.990530][T14821] ? kfree+0x10e/0x3c0 [ 230.990558][T14821] tty_ldisc_open+0x5d/0xb0 [ 230.990578][T14821] tty_set_ldisc+0x1db/0x380 [ 230.990642][T14821] tiocsetd+0x51/0x60 [ 230.990670][T14821] tty_ioctl+0xa79/0xb80 [ 230.990737][T14821] ? __pfx_tty_ioctl+0x10/0x10 [ 230.990757][T14821] __se_sys_ioctl+0xce/0x140 [ 230.990798][T14821] __x64_sys_ioctl+0x43/0x50 [ 230.990856][T14821] x64_sys_call+0x14b0/0x3000 [ 230.990881][T14821] do_syscall_64+0xca/0x2b0 [ 230.990920][T14821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.990949][T14821] RIP: 0033:0x7f971809f749 [ 230.991035][T14821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.991054][T14821] RSP: 002b:00007f9716aff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.991074][T14821] RAX: ffffffffffffffda RBX: 00007f97182f5fa0 RCX: 00007f971809f749 [ 230.991089][T14821] RDX: 00002000000003c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 230.991101][T14821] RBP: 00007f9716aff090 R08: 0000000000000000 R09: 0000000000000000 [ 230.991115][T14821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.991180][T14821] R13: 00007f97182f6038 R14: 00007f97182f5fa0 R15: 00007ffd681293d8 [ 230.991247][T14821] [ 231.107152][T14822] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3844'. [ 231.271624][T14822] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3844'. [ 231.532195][T14859] netlink: 'syz.5.3863': attribute type 4 has an invalid length. [ 231.591232][T14860] syzkaller0: entered promiscuous mode [ 231.596919][T14860] syzkaller0: entered allmulticast mode [ 231.602859][T14863] netlink: 'syz.5.3863': attribute type 4 has an invalid length. [ 231.734919][ T29] kauditd_printk_skb: 2183 callbacks suppressed [ 231.734937][ T29] audit: type=1326 audit(1766807443.137:88437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14814 comm="syz.4.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9b98d2005 code=0x7ffc0000 [ 231.789203][ T29] audit: type=1400 audit(1766807443.137:88438): avc: denied { read write } for pid=13515 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 231.813703][ T29] audit: type=1326 audit(1766807443.167:88439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14814 comm="syz.4.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9b98d2005 code=0x7ffc0000 [ 231.837565][ T29] audit: type=1326 audit(1766807443.167:88440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14814 comm="syz.4.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9b98d2005 code=0x7ffc0000 [ 231.861393][ T29] audit: type=1326 audit(1766807443.167:88441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14814 comm="syz.4.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9b98d2005 code=0x7ffc0000 [ 231.885395][ T29] audit: type=1400 audit(1766807443.167:88442): avc: denied { read write } for pid=11618 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 231.909921][ T29] audit: type=1326 audit(1766807443.167:88443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14814 comm="syz.4.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc9b98d2005 code=0x7ffc0000 [ 231.933768][ T29] audit: type=1326 audit(1766807443.167:88444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14814 comm="syz.4.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc9b989f749 code=0x7ffc0000 [ 231.957492][ T29] audit: type=1326 audit(1766807443.167:88445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14814 comm="syz.4.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9b989f749 code=0x7ffc0000 [ 231.981246][ T29] audit: type=1326 audit(1766807443.167:88446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14814 comm="syz.4.3844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc9b989f749 code=0x7ffc0000 [ 232.207571][T14907] IPv6: NLM_F_CREATE should be specified when creating new route [ 233.387307][T14985] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3913'. [ 233.399641][T14985] ip6gre1: entered allmulticast mode [ 233.617405][T15005] xt_hashlimit: max too large, truncated to 1048576 [ 233.625885][T15005] Timeout policy `syz1' can only be used by L3 protocol number 24580 [ 233.654974][T15007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3924'. [ 233.666973][T15007] ip6gre2: entered allmulticast mode [ 234.165244][T15073] xt_hashlimit: max too large, truncated to 1048576 [ 234.185970][T15073] No such timeout policy "syz1" [ 234.454549][T15102] xt_hashlimit: max too large, truncated to 1048576 [ 234.463082][T15102] No such timeout policy "syz1" [ 234.478371][T15107] netlink: 'syz.7.3968': attribute type 6 has an invalid length. [ 234.488109][T15107] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3968'. [ 234.649368][T15135] lo speed is unknown, defaulting to 1000 [ 234.691247][T15138] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3980'. [ 234.709088][T15138] ip6gre1: entered allmulticast mode [ 234.726547][T15140] netlink: 'syz.5.3982': attribute type 1 has an invalid length. [ 234.737461][T15140] dummy0: entered promiscuous mode [ 234.745812][T15140] team0: Port device dummy0 removed [ 235.285645][T15180] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3998'. [ 235.613873][T15210] xt_hashlimit: max too large, truncated to 1048576 [ 235.621850][T15210] No such timeout policy "syz1" [ 235.632712][T15208] syzkaller0: entered promiscuous mode [ 235.638307][T15208] syzkaller0: entered allmulticast mode [ 235.786517][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4018'. [ 235.804484][T15224] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 235.830124][T15224] bond1: (slave lo): Enslaving as a backup interface with an up link [ 235.845882][T15224] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 235.891662][T15236] xt_hashlimit: max too large, truncated to 1048576 [ 235.898641][T15236] No such timeout policy "syz1" [ 235.919925][T15238] FAULT_INJECTION: forcing a failure. [ 235.919925][T15238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.933210][T15238] CPU: 0 UID: 0 PID: 15238 Comm: syz.2.4024 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 235.933253][T15238] Tainted: [W]=WARN [ 235.933320][T15238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.933338][T15238] Call Trace: [ 235.933347][T15238] [ 235.933358][T15238] __dump_stack+0x1d/0x30 [ 235.933391][T15238] dump_stack_lvl+0x95/0xd0 [ 235.933447][T15238] dump_stack+0x15/0x1b [ 235.933473][T15238] should_fail_ex+0x265/0x280 [ 235.933503][T15238] should_fail+0xb/0x20 [ 235.933528][T15238] should_fail_usercopy+0x1a/0x20 [ 235.933609][T15238] _copy_from_user+0x1c/0xb0 [ 235.933637][T15238] memdup_user+0x5e/0xd0 [ 235.933656][T15238] strndup_user+0x68/0xb0 [ 235.933743][T15238] keyctl_restrict_keyring+0x15a/0x1b0 [ 235.933774][T15238] __se_sys_keyctl+0x1ed/0xb80 [ 235.933793][T15238] ? __rcu_read_unlock+0x4f/0x70 [ 235.933823][T15238] ? __fget_files+0x184/0x1c0 [ 235.933853][T15238] ? mutex_unlock+0x4f/0x90 [ 235.933902][T15238] ? fput+0x8f/0xc0 [ 235.933935][T15238] __x64_sys_keyctl+0x67/0x80 [ 235.933955][T15238] x64_sys_call+0x27b8/0x3000 [ 235.933980][T15238] do_syscall_64+0xca/0x2b0 [ 235.934099][T15238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.934154][T15238] RIP: 0033:0x7f9e24f4f749 [ 235.934177][T15238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.934200][T15238] RSP: 002b:00007f9e239af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 235.934223][T15238] RAX: ffffffffffffffda RBX: 00007f9e251a5fa0 RCX: 00007f9e24f4f749 [ 235.934236][T15238] RDX: 0000200000000240 RSI: 000000003eddaa90 RDI: 000000000000001d [ 235.934289][T15238] RBP: 00007f9e239af090 R08: 0000000000000000 R09: 0000000000000000 [ 235.934304][T15238] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 235.934319][T15238] R13: 00007f9e251a6038 R14: 00007f9e251a5fa0 R15: 00007ffc4f0b7608 [ 235.934338][T15238] [ 236.235377][T15252] lo speed is unknown, defaulting to 1000 [ 236.268113][T15266] xt_hashlimit: max too large, truncated to 1048576 [ 236.275016][T15266] No such timeout policy "syz1" [ 236.280876][T15261] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 236.289166][T15261] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 236.323653][T15270] netlink: 'syz.6.4038': attribute type 17 has an invalid length. [ 236.331641][T15270] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4038'. [ 236.527220][T15289] lo speed is unknown, defaulting to 1000 [ 236.743711][T15316] FAULT_INJECTION: forcing a failure. [ 236.743711][T15316] name failslab, interval 1, probability 0, space 0, times 0 [ 236.757127][T15316] CPU: 1 UID: 0 PID: 15316 Comm: syz.7.4056 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 236.757165][T15316] Tainted: [W]=WARN [ 236.757174][T15316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 236.757198][T15316] Call Trace: [ 236.757206][T15316] [ 236.757213][T15316] __dump_stack+0x1d/0x30 [ 236.757238][T15316] dump_stack_lvl+0x95/0xd0 [ 236.757324][T15316] dump_stack+0x15/0x1b [ 236.757344][T15316] should_fail_ex+0x265/0x280 [ 236.757440][T15316] should_failslab+0x8c/0xb0 [ 236.757464][T15316] kmem_cache_alloc_noprof+0x69/0x4b0 [ 236.757487][T15316] ? getname_flags+0x80/0x3b0 [ 236.757512][T15316] getname_flags+0x80/0x3b0 [ 236.757600][T15316] do_sys_openat2+0x60/0x150 [ 236.757632][T15316] __x64_sys_openat+0xf2/0x120 [ 236.757663][T15316] x64_sys_call+0x2b07/0x3000 [ 236.757770][T15316] do_syscall_64+0xca/0x2b0 [ 236.757808][T15316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.757830][T15316] RIP: 0033:0x7f971809f749 [ 236.757847][T15316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.757866][T15316] RSP: 002b:00007f9716aff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 236.757955][T15316] RAX: ffffffffffffffda RBX: 00007f97182f5fa0 RCX: 00007f971809f749 [ 236.757968][T15316] RDX: 0000000000040042 RSI: 00002000000013c0 RDI: ffffffffffffff9c [ 236.757981][T15316] RBP: 00007f9716aff090 R08: 0000000000000000 R09: 0000000000000000 [ 236.758071][T15316] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 236.758084][T15316] R13: 00007f97182f6038 R14: 00007f97182f5fa0 R15: 00007ffd681293d8 [ 236.758103][T15316] [ 236.759247][ T29] kauditd_printk_skb: 3699 callbacks suppressed [ 236.759262][ T29] audit: type=1400 audit(1766807448.157:92144): avc: denied { read write } for pid=13515 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 236.963866][ T29] audit: type=1400 audit(1766807448.217:92145): avc: denied { read write } for pid=12881 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 236.988390][ T29] audit: type=1400 audit(1766807448.257:92146): avc: denied { read write } for pid=15319 comm="syz.2.4058" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 237.012838][ T29] audit: type=1400 audit(1766807448.267:92147): avc: denied { create } for pid=15319 comm="syz.2.4058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 237.032467][ T29] audit: type=1400 audit(1766807448.277:92148): avc: denied { create } for pid=15319 comm="syz.2.4058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 237.053149][ T29] audit: type=1400 audit(1766807448.277:92149): avc: denied { map_create } for pid=15319 comm="syz.2.4058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 237.072563][ T29] audit: type=1400 audit(1766807448.277:92150): avc: denied { prog_load } for pid=15319 comm="syz.2.4058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 237.091859][ T29] audit: type=1400 audit(1766807448.277:92151): avc: denied { map_create } for pid=15319 comm="syz.2.4058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 237.111231][ T29] audit: type=1400 audit(1766807448.277:92152): avc: denied { prog_load } for pid=15319 comm="syz.2.4058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 237.130512][ T29] audit: type=1400 audit(1766807448.277:92153): avc: denied { read } for pid=15319 comm="syz.2.4058" dev="nsfs" ino=4026533397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 237.163132][T15333] xt_hashlimit: max too large, truncated to 1048576 [ 237.171113][T15333] No such timeout policy "syz1" [ 237.381082][T15361] xt_hashlimit: max too large, truncated to 1048576 [ 237.388051][T15361] No such timeout policy "syz1" [ 237.526327][T15376] syzkaller0: entered promiscuous mode [ 237.532029][T15376] syzkaller0: entered allmulticast mode [ 237.566830][T15378] lo speed is unknown, defaulting to 1000 [ 237.579813][T15381] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 237.586388][T15381] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 237.593996][T15381] vhci_hcd vhci_hcd.0: Device attached [ 237.655763][T15392] xt_hashlimit: max too large, truncated to 1048576 [ 237.662642][T15392] No such timeout policy "syz1" [ 237.691375][T15382] vhci_hcd: connection closed [ 237.691664][T12037] vhci_hcd vhci_hcd.5: stop threads [ 237.701736][T12037] vhci_hcd vhci_hcd.5: release socket [ 237.707261][T12037] vhci_hcd vhci_hcd.5: disconnect device [ 238.453589][T15455] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 238.673133][T15473] FAULT_INJECTION: forcing a failure. [ 238.673133][T15473] name failslab, interval 1, probability 0, space 0, times 0 [ 238.686028][T15473] CPU: 0 UID: 0 PID: 15473 Comm: syz.2.4119 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 238.686068][T15473] Tainted: [W]=WARN [ 238.686077][T15473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 238.686145][T15473] Call Trace: [ 238.686152][T15473] [ 238.686160][T15473] __dump_stack+0x1d/0x30 [ 238.686216][T15473] dump_stack_lvl+0x95/0xd0 [ 238.686239][T15473] dump_stack+0x15/0x1b [ 238.686260][T15473] should_fail_ex+0x265/0x280 [ 238.686289][T15473] should_failslab+0x8c/0xb0 [ 238.686362][T15473] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 238.686388][T15473] ? __alloc_skb+0x2ff/0x4b0 [ 238.686520][T15473] __alloc_skb+0x2ff/0x4b0 [ 238.686544][T15473] ? __alloc_skb+0x228/0x4b0 [ 238.686568][T15473] audit_log_start+0x3a0/0x720 [ 238.686600][T15473] ? kstrtouint+0x76/0xc0 [ 238.686626][T15473] audit_seccomp+0x48/0x100 [ 238.686664][T15473] ? __seccomp_filter+0x832/0x1260 [ 238.686700][T15473] __seccomp_filter+0x843/0x1260 [ 238.686737][T15473] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 238.686796][T15473] ? vfs_write+0x7e8/0x960 [ 238.686853][T15473] ? __rcu_read_unlock+0x4f/0x70 [ 238.686927][T15473] ? __fget_files+0x184/0x1c0 [ 238.686958][T15473] __secure_computing+0x82/0x150 [ 238.686992][T15473] syscall_trace_enter+0xcf/0x1e0 [ 238.687024][T15473] do_syscall_64+0xa4/0x2b0 [ 238.687147][T15473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.687175][T15473] RIP: 0033:0x7f9e24f4f749 [ 238.687191][T15473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.687209][T15473] RSP: 002b:00007f9e239af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000115 [ 238.687229][T15473] RAX: ffffffffffffffda RBX: 00007f9e251a5fa0 RCX: 00007f9e24f4f749 [ 238.687241][T15473] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 238.687283][T15473] RBP: 00007f9e239af090 R08: 0000000000000000 R09: 0000000000000000 [ 238.687299][T15473] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 238.687316][T15473] R13: 00007f9e251a6038 R14: 00007f9e251a5fa0 R15: 00007ffc4f0b7608 [ 238.687339][T15473] [ 238.936922][T15479] lo speed is unknown, defaulting to 1000 [ 238.977833][T15482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4121'. [ 239.003035][T15482] ip6gre1: entered allmulticast mode [ 239.044349][T15486] tap0: tun_chr_ioctl cmd 1074025680 [ 239.192271][T15502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4132'. [ 239.276732][T15517] FAULT_INJECTION: forcing a failure. [ 239.276732][T15517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.290061][T15517] CPU: 0 UID: 0 PID: 15517 Comm: syz.7.4139 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 239.290102][T15517] Tainted: [W]=WARN [ 239.290110][T15517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.290126][T15517] Call Trace: [ 239.290136][T15517] [ 239.290146][T15517] __dump_stack+0x1d/0x30 [ 239.290177][T15517] dump_stack_lvl+0x95/0xd0 [ 239.290266][T15517] dump_stack+0x15/0x1b [ 239.290290][T15517] should_fail_ex+0x265/0x280 [ 239.290319][T15517] should_fail+0xb/0x20 [ 239.290345][T15517] should_fail_usercopy+0x1a/0x20 [ 239.290398][T15517] _copy_from_user+0x1c/0xb0 [ 239.290434][T15517] ___sys_sendmsg+0xc1/0x1d0 [ 239.290500][T15517] __x64_sys_sendmsg+0xd4/0x160 [ 239.290559][T15517] x64_sys_call+0x17ba/0x3000 [ 239.290588][T15517] do_syscall_64+0xca/0x2b0 [ 239.290644][T15517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.290673][T15517] RIP: 0033:0x7f971809f749 [ 239.290800][T15517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.290825][T15517] RSP: 002b:00007f9716aff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.290861][T15517] RAX: ffffffffffffffda RBX: 00007f97182f5fa0 RCX: 00007f971809f749 [ 239.290877][T15517] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 239.290894][T15517] RBP: 00007f9716aff090 R08: 0000000000000000 R09: 0000000000000000 [ 239.290911][T15517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.290928][T15517] R13: 00007f97182f6038 R14: 00007f97182f5fa0 R15: 00007ffd681293d8 [ 239.290953][T15517] [ 239.330951][T15510] lo speed is unknown, defaulting to 1000 [ 239.387983][T15524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4137'. [ 239.540994][T15537] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 239.547603][T15537] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 239.555154][T15537] vhci_hcd vhci_hcd.0: Device attached [ 239.568780][T15524] ip6gre1: entered allmulticast mode [ 239.643031][T15549] xt_hashlimit: max too large, truncated to 1048576 [ 239.649952][T15549] Timeout policy `syz1' can only be used by L3 protocol number 24580 [ 239.717290][T15555] netlink: 'syz.2.4155': attribute type 10 has an invalid length. [ 239.734434][T13048] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 239.748959][T15555] macvlan1: entered promiscuous mode [ 239.754477][T15555] macvlan1: entered allmulticast mode [ 239.774142][T15555] veth1_vlan: entered allmulticast mode [ 239.787930][T15555] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 239.815955][T13048] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 239.928358][T15575] xt_hashlimit: max too large, truncated to 1048576 [ 239.935463][T15575] No such timeout policy "syz1" [ 239.970131][T15580] lo speed is unknown, defaulting to 1000 [ 240.021477][T15586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4166'. [ 240.033455][T15586] ip6gre2: entered allmulticast mode [ 240.210641][T15604] xt_hashlimit: max too large, truncated to 1048576 [ 240.217760][T15604] No such timeout policy "syz1" [ 240.309431][T15538] vhci_hcd: connection reset by peer [ 240.315154][T12042] vhci_hcd vhci_hcd.7: stop threads [ 240.320436][T12042] vhci_hcd vhci_hcd.7: release socket [ 240.326035][T12042] vhci_hcd vhci_hcd.7: disconnect device [ 240.592341][T15619] FAULT_INJECTION: forcing a failure. [ 240.592341][T15619] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 240.605868][T15619] CPU: 1 UID: 0 PID: 15619 Comm: syz.6.4183 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 240.605911][T15619] Tainted: [W]=WARN [ 240.605922][T15619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 240.605938][T15619] Call Trace: [ 240.605946][T15619] [ 240.605957][T15619] __dump_stack+0x1d/0x30 [ 240.605989][T15619] dump_stack_lvl+0x95/0xd0 [ 240.606061][T15619] dump_stack+0x15/0x1b [ 240.606088][T15619] should_fail_ex+0x265/0x280 [ 240.606120][T15619] should_fail_alloc_page+0xf2/0x100 [ 240.606213][T15619] __alloc_frozen_pages_noprof+0x109/0x360 [ 240.606247][T15619] alloc_pages_mpol+0xb3/0x260 [ 240.606287][T15619] vma_alloc_folio_noprof+0x1aa/0x300 [ 240.606329][T15619] handle_mm_fault+0xef5/0x2c60 [ 240.606394][T15619] ? mt_find+0x21b/0x330 [ 240.606430][T15619] do_user_addr_fault+0x3fe/0x1080 [ 240.606548][T15619] ? kstrtouint_from_user+0x9f/0xf0 [ 240.606582][T15619] exc_page_fault+0x62/0xa0 [ 240.606619][T15619] asm_exc_page_fault+0x26/0x30 [ 240.606654][T15619] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 240.606720][T15619] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 7f 17 02 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 240.606745][T15619] RSP: 0018:ffffc900018dfe30 EFLAGS: 00050206 [ 240.606767][T15619] RAX: ffff8881071edd10 RBX: 0000000000000070 RCX: 0000000000000070 [ 240.606835][T15619] RDX: 0000000000000000 RSI: ffffc900018dfe68 RDI: 0000200000008080 [ 240.606895][T15619] RBP: ffffc900018dff48 R08: 00000000000000ff R09: 0000000000000000 [ 240.606913][T15619] R10: 0001c900018dfe68 R11: 0001c900018dfed7 R12: 00002000000080f0 [ 240.606930][T15619] R13: 00007ffffffff000 R14: 0000200000008080 R15: ffffc900018dfe68 [ 240.606956][T15619] _copy_to_user+0x7c/0xa0 [ 240.606996][T15619] __x64_sys_sysinfo+0x57/0xa0 [ 240.607035][T15619] x64_sys_call+0x2ec4/0x3000 [ 240.607133][T15619] do_syscall_64+0xca/0x2b0 [ 240.607180][T15619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.607216][T15619] RIP: 0033:0x7f22f29bf749 [ 240.607277][T15619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.607296][T15619] RSP: 002b:00007f22f1427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000063 [ 240.607313][T15619] RAX: ffffffffffffffda RBX: 00007f22f2c15fa0 RCX: 00007f22f29bf749 [ 240.607346][T15619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000008080 [ 240.607363][T15619] RBP: 00007f22f1427090 R08: 0000000000000000 R09: 0000000000000000 [ 240.607381][T15619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.607397][T15619] R13: 00007f22f2c16038 R14: 00007f22f2c15fa0 R15: 00007ffd533587c8 [ 240.607418][T15619] [ 240.997204][T15631] FAULT_INJECTION: forcing a failure. [ 240.997204][T15631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.010445][T15631] CPU: 1 UID: 0 PID: 15631 Comm: syz.6.4189 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 241.010554][T15631] Tainted: [W]=WARN [ 241.010563][T15631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.010581][T15631] Call Trace: [ 241.010590][T15631] [ 241.010601][T15631] __dump_stack+0x1d/0x30 [ 241.010633][T15631] dump_stack_lvl+0x95/0xd0 [ 241.010723][T15631] dump_stack+0x15/0x1b [ 241.010749][T15631] should_fail_ex+0x265/0x280 [ 241.010779][T15631] should_fail+0xb/0x20 [ 241.010805][T15631] should_fail_usercopy+0x1a/0x20 [ 241.010850][T15631] _copy_to_user+0x20/0xa0 [ 241.010885][T15631] simple_read_from_buffer+0xb5/0x130 [ 241.010913][T15631] proc_fail_nth_read+0x10e/0x150 [ 241.010942][T15631] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 241.011025][T15631] vfs_read+0x1a8/0x770 [ 241.011094][T15631] ? __rcu_read_unlock+0x4f/0x70 [ 241.011113][T15631] ? __fget_files+0x184/0x1c0 [ 241.011149][T15631] ? mutex_lock+0x58/0x90 [ 241.011175][T15631] ksys_read+0xda/0x1a0 [ 241.011193][T15631] __x64_sys_read+0x40/0x50 [ 241.011210][T15631] x64_sys_call+0x2889/0x3000 [ 241.011232][T15631] do_syscall_64+0xca/0x2b0 [ 241.011300][T15631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.011319][T15631] RIP: 0033:0x7f22f29be15c [ 241.011332][T15631] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 241.011348][T15631] RSP: 002b:00007f22f1427030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 241.011366][T15631] RAX: ffffffffffffffda RBX: 00007f22f2c15fa0 RCX: 00007f22f29be15c [ 241.011486][T15631] RDX: 000000000000000f RSI: 00007f22f14270a0 RDI: 0000000000000003 [ 241.011530][T15631] RBP: 00007f22f1427090 R08: 0000000000000000 R09: 0000000000000000 [ 241.011545][T15631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.011561][T15631] R13: 00007f22f2c16038 R14: 00007f22f2c15fa0 R15: 00007ffd533587c8 [ 241.011587][T15631] [ 241.231348][T15633] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 241.305776][T15644] xt_hashlimit: max too large, truncated to 1048576 [ 241.323098][T15644] No such timeout policy "syz1" [ 241.410394][T15659] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 241.491716][T15667] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 241.649570][T15696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4216'. [ 241.767189][ T29] kauditd_printk_skb: 2131 callbacks suppressed [ 241.767208][ T29] audit: type=1400 audit(1766807453.167:94283): avc: denied { prog_load } for pid=15716 comm="syz.2.4226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 241.767974][T15717] FAULT_INJECTION: forcing a failure. [ 241.767974][T15717] name failslab, interval 1, probability 0, space 0, times 0 [ 241.778114][T15705] netlink: 'syz.4.4219': attribute type 10 has an invalid length. [ 241.793146][T15717] CPU: 1 UID: 0 PID: 15717 Comm: syz.2.4226 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 241.793269][T15717] Tainted: [W]=WARN [ 241.793298][T15717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.793384][T15717] Call Trace: [ 241.793406][T15717] [ 241.793429][T15717] __dump_stack+0x1d/0x30 [ 241.793504][T15717] dump_stack_lvl+0x95/0xd0 [ 241.793577][T15717] dump_stack+0x15/0x1b [ 241.793649][T15717] should_fail_ex+0x265/0x280 [ 241.793733][T15717] should_failslab+0x8c/0xb0 [ 241.793809][T15717] __kmalloc_noprof+0xb9/0x5a0 [ 241.793894][T15717] ? lwtunnel_state_alloc+0x1d/0x30 [ 241.793970][T15717] ? __nla_parse+0x40/0x60 [ 241.794055][T15717] lwtunnel_state_alloc+0x1d/0x30 [ 241.794115][T15717] ip6_tun_build_state+0xc5/0x3e0 [ 241.794253][T15717] lwtunnel_build_state+0x127/0x200 [ 241.794387][T15717] fib_nh_match+0x1eb/0xa20 [ 241.794483][T15717] ? __nla_validate_parse+0x1652/0x1d00 [ 241.794583][T15717] fib_table_delete+0x4c0/0x830 [ 241.794769][T15717] inet_rtm_delroute+0x15f/0x1e0 [ 241.794874][T15717] ? __pfx_inet_rtm_delroute+0x10/0x10 [ 241.794975][T15717] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 241.795051][T15717] netlink_rcv_skb+0x123/0x220 [ 241.795154][T15717] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 241.795231][T15717] rtnetlink_rcv+0x1c/0x30 [ 241.795423][T15717] netlink_unicast+0x5c0/0x690 [ 241.795521][T15717] netlink_sendmsg+0x58b/0x6b0 [ 241.795630][T15717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.795902][T15717] __sock_sendmsg+0x145/0x180 [ 241.795967][T15717] ____sys_sendmsg+0x31e/0x4a0 [ 241.796073][T15717] ___sys_sendmsg+0x17b/0x1d0 [ 241.796206][T15717] __x64_sys_sendmsg+0xd4/0x160 [ 241.796383][T15717] x64_sys_call+0x17ba/0x3000 [ 241.796469][T15717] do_syscall_64+0xca/0x2b0 [ 241.796620][T15717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.796703][T15717] RIP: 0033:0x7f9e24f4f749 [ 241.796757][T15717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.796842][T15717] RSP: 002b:00007f9e239af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.796937][T15717] RAX: ffffffffffffffda RBX: 00007f9e251a5fa0 RCX: 00007f9e24f4f749 [ 241.796979][T15717] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 241.797021][T15717] RBP: 00007f9e239af090 R08: 0000000000000000 R09: 0000000000000000 [ 241.797064][T15717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.797188][T15717] R13: 00007f9e251a6038 R14: 00007f9e251a5fa0 R15: 00007ffc4f0b7608 [ 241.797260][T15717] [ 241.804622][ T29] audit: type=1400 audit(1766807453.177:94284): avc: denied { prog_load } for pid=15704 comm="syz.4.4219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 241.806196][T15705] ipvlan0: entered allmulticast mode [ 241.817084][ T29] audit: type=1400 audit(1766807453.207:94285): avc: denied { create } for pid=15718 comm="syz.7.4227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 241.824916][T15705] veth0_vlan: entered allmulticast mode [ 241.850722][ T29] audit: type=1400 audit(1766807453.247:94286): avc: denied { read write } for pid=13515 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 242.146688][ T29] audit: type=1400 audit(1766807453.277:94287): avc: denied { create } for pid=15720 comm="syz.2.4228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 242.166741][ T29] audit: type=1400 audit(1766807453.277:94288): avc: denied { map_create } for pid=15720 comm="syz.2.4228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 242.186102][ T29] audit: type=1400 audit(1766807453.277:94289): avc: denied { prog_load } for pid=15720 comm="syz.2.4228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 242.205382][ T29] audit: type=1400 audit(1766807453.287:94290): avc: denied { read write } for pid=15720 comm="syz.2.4228" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 242.229690][ T29] audit: type=1400 audit(1766807453.317:94291): avc: denied { read write } for pid=13515 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 242.254292][ T29] audit: type=1400 audit(1766807453.317:94292): avc: denied { map_create } for pid=15718 comm="syz.7.4227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 242.277459][T15735] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4232'. [ 242.287585][T15735] hsr_slave_0: left promiscuous mode [ 242.293435][T15735] hsr_slave_1: left promiscuous mode [ 242.356981][T15744] macvtap0: refused to change device tx_queue_len [ 242.439137][T15758] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 242.449613][T15757] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4244'. [ 242.513627][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4249'. [ 242.583671][T15771] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4250'. [ 242.636224][T15785] FAULT_INJECTION: forcing a failure. [ 242.636224][T15785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.649397][T15785] CPU: 0 UID: 0 PID: 15785 Comm: syz.7.4257 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 242.649433][T15785] Tainted: [W]=WARN [ 242.649440][T15785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.649454][T15785] Call Trace: [ 242.649463][T15785] [ 242.649473][T15785] __dump_stack+0x1d/0x30 [ 242.649513][T15785] dump_stack_lvl+0x95/0xd0 [ 242.649542][T15785] dump_stack+0x15/0x1b [ 242.649614][T15785] should_fail_ex+0x265/0x280 [ 242.649639][T15785] should_fail+0xb/0x20 [ 242.649659][T15785] should_fail_usercopy+0x1a/0x20 [ 242.649683][T15785] _copy_from_user+0x1c/0xb0 [ 242.649719][T15785] __tun_chr_ioctl+0x147/0x14c0 [ 242.649823][T15785] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 242.649851][T15785] tun_chr_ioctl+0x27/0x40 [ 242.649879][T15785] __se_sys_ioctl+0xce/0x140 [ 242.649921][T15785] __x64_sys_ioctl+0x43/0x50 [ 242.650051][T15785] x64_sys_call+0x14b0/0x3000 [ 242.650081][T15785] do_syscall_64+0xca/0x2b0 [ 242.650157][T15785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.650182][T15785] RIP: 0033:0x7f971809f749 [ 242.650214][T15785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.650238][T15785] RSP: 002b:00007f9716aff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.650262][T15785] RAX: ffffffffffffffda RBX: 00007f97182f5fa0 RCX: 00007f971809f749 [ 242.650277][T15785] RDX: 00002000000002c0 RSI: 00000000400454d9 RDI: 0000000000000003 [ 242.650296][T15785] RBP: 00007f9716aff090 R08: 0000000000000000 R09: 0000000000000000 [ 242.650336][T15785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.650349][T15785] R13: 00007f97182f6038 R14: 00007f97182f5fa0 R15: 00007ffd681293d8 [ 242.650368][T15785] [ 242.942796][T15806] FAULT_INJECTION: forcing a failure. [ 242.942796][T15806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.955980][T15806] CPU: 0 UID: 0 PID: 15806 Comm: syz.5.4267 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 242.956031][T15806] Tainted: [W]=WARN [ 242.956041][T15806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.956058][T15806] Call Trace: [ 242.956067][T15806] [ 242.956078][T15806] __dump_stack+0x1d/0x30 [ 242.956111][T15806] dump_stack_lvl+0x95/0xd0 [ 242.956167][T15806] dump_stack+0x15/0x1b [ 242.956258][T15806] should_fail_ex+0x265/0x280 [ 242.956288][T15806] should_fail+0xb/0x20 [ 242.956386][T15806] should_fail_usercopy+0x1a/0x20 [ 242.956498][T15806] _copy_to_user+0x20/0xa0 [ 242.956534][T15806] simple_read_from_buffer+0xb5/0x130 [ 242.956562][T15806] proc_fail_nth_read+0x10e/0x150 [ 242.956600][T15806] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.956657][T15806] vfs_read+0x1a8/0x770 [ 242.956679][T15806] ? __fget_files+0x184/0x1c0 [ 242.956706][T15806] ? __rcu_read_unlock+0x4f/0x70 [ 242.956774][T15806] ? __fget_files+0x184/0x1c0 [ 242.956803][T15806] ? mutex_lock+0x58/0x90 [ 242.956837][T15806] ksys_read+0xda/0x1a0 [ 242.956879][T15806] __x64_sys_read+0x40/0x50 [ 242.956903][T15806] x64_sys_call+0x2889/0x3000 [ 242.957067][T15806] do_syscall_64+0xca/0x2b0 [ 242.957108][T15806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.957259][T15806] RIP: 0033:0x7f6a4eb5e15c [ 242.957280][T15806] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 242.957300][T15806] RSP: 002b:00007f6a4d5c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.957320][T15806] RAX: ffffffffffffffda RBX: 00007f6a4edb5fa0 RCX: 00007f6a4eb5e15c [ 242.957333][T15806] RDX: 000000000000000f RSI: 00007f6a4d5c70a0 RDI: 0000000000000005 [ 242.957378][T15806] RBP: 00007f6a4d5c7090 R08: 0000000000000000 R09: 0000000000000000 [ 242.957395][T15806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.957411][T15806] R13: 00007f6a4edb6038 R14: 00007f6a4edb5fa0 R15: 00007ffe4c7c8628 [ 242.957435][T15806] [ 242.960598][T15792] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 242.985874][T15802] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4266'. [ 243.187228][T15802] netem: change failed [ 243.289084][T15836] xt_hashlimit: max too large, truncated to 1048576 [ 243.299833][T15836] No such timeout policy "syz1" [ 243.336379][T15830] FAULT_INJECTION: forcing a failure. [ 243.336379][T15830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.349519][T15830] CPU: 1 UID: 0 PID: 15830 Comm: syz.5.4278 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 243.349561][T15830] Tainted: [W]=WARN [ 243.349605][T15830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.349623][T15830] Call Trace: [ 243.349631][T15830] [ 243.349641][T15830] __dump_stack+0x1d/0x30 [ 243.349666][T15830] dump_stack_lvl+0x95/0xd0 [ 243.349776][T15830] dump_stack+0x15/0x1b [ 243.349798][T15830] should_fail_ex+0x265/0x280 [ 243.349828][T15830] should_fail+0xb/0x20 [ 243.349855][T15830] should_fail_usercopy+0x1a/0x20 [ 243.349961][T15830] strncpy_from_user+0x27/0x260 [ 243.350079][T15830] getname_flags+0xae/0x3b0 [ 243.350104][T15830] user_path_at+0x28/0x130 [ 243.350139][T15830] do_fchownat+0xb0/0x210 [ 243.350239][T15830] __x64_sys_lchown+0x4a/0x60 [ 243.350275][T15830] x64_sys_call+0x2eda/0x3000 [ 243.350305][T15830] do_syscall_64+0xca/0x2b0 [ 243.350417][T15830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.350439][T15830] RIP: 0033:0x7f6a4eb5f749 [ 243.350455][T15830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.350512][T15830] RSP: 002b:00007f6a4d5c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 243.350572][T15830] RAX: ffffffffffffffda RBX: 00007f6a4edb5fa0 RCX: 00007f6a4eb5f749 [ 243.350588][T15830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.350666][T15830] RBP: 00007f6a4d5c7090 R08: 0000000000000000 R09: 0000000000000000 [ 243.350684][T15830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.350700][T15830] R13: 00007f6a4edb6038 R14: 00007f6a4edb5fa0 R15: 00007ffe4c7c8628 [ 243.350725][T15830] [ 243.608871][T15850] netlink: 'syz.4.4284': attribute type 39 has an invalid length. [ 243.784611][T15864] xt_hashlimit: max too large, truncated to 1048576 [ 243.799593][T15864] Timeout policy `syz1' can only be used by L3 protocol number 24580 [ 243.903798][T15875] FAULT_INJECTION: forcing a failure. [ 243.903798][T15875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.917043][T15875] CPU: 1 UID: 0 PID: 15875 Comm: syz.5.4297 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 243.917085][T15875] Tainted: [W]=WARN [ 243.917094][T15875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.917111][T15875] Call Trace: [ 243.917120][T15875] [ 243.917130][T15875] __dump_stack+0x1d/0x30 [ 243.917161][T15875] dump_stack_lvl+0x95/0xd0 [ 243.917204][T15875] dump_stack+0x15/0x1b [ 243.917228][T15875] should_fail_ex+0x265/0x280 [ 243.917282][T15875] should_fail+0xb/0x20 [ 243.917306][T15875] should_fail_usercopy+0x1a/0x20 [ 243.917336][T15875] _copy_to_user+0x20/0xa0 [ 243.917371][T15875] simple_read_from_buffer+0xb5/0x130 [ 243.917434][T15875] proc_fail_nth_read+0x10e/0x150 [ 243.917471][T15875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.917506][T15875] vfs_read+0x1a8/0x770 [ 243.917551][T15875] ? __rcu_read_unlock+0x4f/0x70 [ 243.917577][T15875] ? __fget_files+0x184/0x1c0 [ 243.917605][T15875] ? mutex_lock+0x58/0x90 [ 243.917639][T15875] ksys_read+0xda/0x1a0 [ 243.917663][T15875] __x64_sys_read+0x40/0x50 [ 243.917700][T15875] x64_sys_call+0x2889/0x3000 [ 243.917798][T15875] do_syscall_64+0xca/0x2b0 [ 243.917913][T15875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.917940][T15875] RIP: 0033:0x7f6a4eb5e15c [ 243.918039][T15875] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 243.918099][T15875] RSP: 002b:00007f6a4d5c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 243.918123][T15875] RAX: ffffffffffffffda RBX: 00007f6a4edb5fa0 RCX: 00007f6a4eb5e15c [ 243.918214][T15875] RDX: 000000000000000f RSI: 00007f6a4d5c70a0 RDI: 0000000000000003 [ 243.918229][T15875] RBP: 00007f6a4d5c7090 R08: 0000000000000000 R09: 0000000000000000 [ 243.918245][T15875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.918260][T15875] R13: 00007f6a4edb6038 R14: 00007f6a4edb5fa0 R15: 00007ffe4c7c8628 [ 243.918283][T15875] [ 244.844526][T13048] usb 15-1: enqueue for inactive port 0 [ 244.850247][T13048] usb 15-1: enqueue for inactive port 0 [ 244.871464][T15933] FAULT_INJECTION: forcing a failure. [ 244.871464][T15933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.884735][T15933] CPU: 1 UID: 0 PID: 15933 Comm: syz.2.4323 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 244.884765][T15933] Tainted: [W]=WARN [ 244.884771][T15933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 244.884783][T15933] Call Trace: [ 244.884789][T15933] [ 244.884797][T15933] __dump_stack+0x1d/0x30 [ 244.884824][T15933] dump_stack_lvl+0x95/0xd0 [ 244.884843][T15933] dump_stack+0x15/0x1b [ 244.884860][T15933] should_fail_ex+0x265/0x280 [ 244.884881][T15933] should_fail+0xb/0x20 [ 244.884897][T15933] should_fail_usercopy+0x1a/0x20 [ 244.884961][T15933] _copy_from_user+0x1c/0xb0 [ 244.884985][T15933] get_user_ifreq+0x53/0x110 [ 244.885053][T15933] sock_ioctl+0x54e/0x610 [ 244.885131][T15933] ? __pfx_sock_ioctl+0x10/0x10 [ 244.885175][T15933] __se_sys_ioctl+0xce/0x140 [ 244.885205][T15933] __x64_sys_ioctl+0x43/0x50 [ 244.885233][T15933] x64_sys_call+0x14b0/0x3000 [ 244.885259][T15933] do_syscall_64+0xca/0x2b0 [ 244.885293][T15933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.885322][T15933] RIP: 0033:0x7f9e24f4f749 [ 244.885336][T15933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.885354][T15933] RSP: 002b:00007f9e239af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.885372][T15933] RAX: ffffffffffffffda RBX: 00007f9e251a5fa0 RCX: 00007f9e24f4f749 [ 244.885384][T15933] RDX: 0000200000000000 RSI: 00000000000089f0 RDI: 0000000000000003 [ 244.885459][T15933] RBP: 00007f9e239af090 R08: 0000000000000000 R09: 0000000000000000 [ 244.885470][T15933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.885534][T15933] R13: 00007f9e251a6038 R14: 00007f9e251a5fa0 R15: 00007ffc4f0b7608 [ 244.885552][T15933] [ 245.072039][T13048] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 245.150258][T15944] xt_hashlimit: max too large, truncated to 1048576 [ 245.160395][T15944] No such timeout policy "syz1" [ 245.281367][ T3507] IPVS: starting estimator thread 0... [ 245.356940][T15966] FAULT_INJECTION: forcing a failure. [ 245.356940][T15966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.370165][T15966] CPU: 0 UID: 0 PID: 15966 Comm: syz.2.4338 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 245.370275][T15966] Tainted: [W]=WARN [ 245.370317][T15966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 245.370392][T15966] Call Trace: [ 245.370400][T15966] [ 245.370411][T15966] __dump_stack+0x1d/0x30 [ 245.370443][T15966] dump_stack_lvl+0x95/0xd0 [ 245.370471][T15966] dump_stack+0x15/0x1b [ 245.370498][T15966] should_fail_ex+0x265/0x280 [ 245.370556][T15966] should_fail+0xb/0x20 [ 245.370652][T15966] should_fail_usercopy+0x1a/0x20 [ 245.370760][T15966] _copy_from_user+0x1c/0xb0 [ 245.370798][T15966] ___sys_sendmsg+0xc1/0x1d0 [ 245.370852][T15966] __x64_sys_sendmsg+0xd4/0x160 [ 245.370895][T15966] x64_sys_call+0x17ba/0x3000 [ 245.370939][T15966] do_syscall_64+0xca/0x2b0 [ 245.370983][T15966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.371011][T15966] RIP: 0033:0x7f9e24f4f749 [ 245.371031][T15966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.371096][T15966] RSP: 002b:00007f9e239af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.371121][T15966] RAX: ffffffffffffffda RBX: 00007f9e251a5fa0 RCX: 00007f9e24f4f749 [ 245.371138][T15966] RDX: 0000000000040010 RSI: 0000200000006040 RDI: 0000000000000004 [ 245.371200][T15966] RBP: 00007f9e239af090 R08: 0000000000000000 R09: 0000000000000000 [ 245.371217][T15966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.371233][T15966] R13: 00007f9e251a6038 R14: 00007f9e251a5fa0 R15: 00007ffc4f0b7608 [ 245.371308][T15966] [ 245.537834][T15961] IPVS: using max 2208 ests per chain, 110400 per kthread [ 245.692884][T15976] xt_hashlimit: max too large, truncated to 1048576 [ 245.699671][T15976] No such timeout policy "syz1" [ 245.776564][T15982] syzkaller0: entered promiscuous mode [ 245.782105][T15982] syzkaller0: entered allmulticast mode [ 245.859039][T15995] __nla_validate_parse: 1 callbacks suppressed [ 245.859060][T15995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4351'. [ 245.947841][T16007] xt_hashlimit: max too large, truncated to 1048576 [ 245.952665][T16008] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4353'. [ 245.955022][T16007] No such timeout policy "syz1" [ 245.968499][T16008] hsr_slave_0: left promiscuous mode [ 245.974974][T16008] hsr_slave_1: left promiscuous mode [ 245.996932][T16010] FAULT_INJECTION: forcing a failure. [ 245.996932][T16010] name failslab, interval 1, probability 0, space 0, times 0 [ 246.009737][T16010] CPU: 0 UID: 0 PID: 16010 Comm: syz.2.4357 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 246.009767][T16010] Tainted: [W]=WARN [ 246.009773][T16010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.009785][T16010] Call Trace: [ 246.009792][T16010] [ 246.009813][T16010] __dump_stack+0x1d/0x30 [ 246.009836][T16010] dump_stack_lvl+0x95/0xd0 [ 246.009855][T16010] dump_stack+0x15/0x1b [ 246.009873][T16010] should_fail_ex+0x265/0x280 [ 246.009894][T16010] should_failslab+0x8c/0xb0 [ 246.009949][T16010] kmem_cache_alloc_noprof+0x69/0x4b0 [ 246.009976][T16010] ? skb_clone+0x151/0x1f0 [ 246.010004][T16010] skb_clone+0x151/0x1f0 [ 246.010029][T16010] __netlink_deliver_tap+0x2c9/0x500 [ 246.010133][T16010] ? netlink_attachskb+0x2cc/0x650 [ 246.010159][T16010] netlink_sendskb+0x126/0x150 [ 246.010184][T16010] netlink_unicast+0x2a2/0x690 [ 246.010314][T16010] netlink_ack+0x4c8/0x500 [ 246.010345][T16010] netlink_rcv_skb+0x192/0x220 [ 246.010392][T16010] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 246.010415][T16010] rtnetlink_rcv+0x1c/0x30 [ 246.010443][T16010] netlink_unicast+0x5c0/0x690 [ 246.010529][T16010] netlink_sendmsg+0x58b/0x6b0 [ 246.010559][T16010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.010588][T16010] __sock_sendmsg+0x145/0x180 [ 246.010606][T16010] ____sys_sendmsg+0x345/0x4a0 [ 246.010677][T16010] ___sys_sendmsg+0x17b/0x1d0 [ 246.010729][T16010] __sys_sendmmsg+0x178/0x300 [ 246.010845][T16010] __x64_sys_sendmmsg+0x57/0x70 [ 246.010872][T16010] x64_sys_call+0x1e28/0x3000 [ 246.010914][T16010] do_syscall_64+0xca/0x2b0 [ 246.010979][T16010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.011010][T16010] RIP: 0033:0x7f9e24f4f749 [ 246.011024][T16010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.011097][T16010] RSP: 002b:00007f9e239af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 246.011115][T16010] RAX: ffffffffffffffda RBX: 00007f9e251a5fa0 RCX: 00007f9e24f4f749 [ 246.011127][T16010] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 246.011138][T16010] RBP: 00007f9e239af090 R08: 0000000000000000 R09: 0000000000000000 [ 246.011149][T16010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.011160][T16010] R13: 00007f9e251a6038 R14: 00007f9e251a5fa0 R15: 00007ffc4f0b7608 [ 246.011225][T16010] [ 246.361496][T16023] syzkaller0: entered promiscuous mode [ 246.367131][T16023] syzkaller0: entered allmulticast mode [ 246.482948][T16041] netlink: 'syz.2.4372': attribute type 7 has an invalid length. [ 246.490895][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4372'. [ 246.557753][T16047] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4375'. [ 246.595823][T16049] xt_hashlimit: max too large, truncated to 1048576 [ 246.602700][T16049] No such timeout policy "syz1" [ 246.628469][T16053] FAULT_INJECTION: forcing a failure. [ 246.628469][T16053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.641837][T16053] CPU: 1 UID: 0 PID: 16053 Comm: syz.4.4378 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 246.641878][T16053] Tainted: [W]=WARN [ 246.641887][T16053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.641904][T16053] Call Trace: [ 246.641913][T16053] [ 246.641979][T16053] __dump_stack+0x1d/0x30 [ 246.642007][T16053] dump_stack_lvl+0x95/0xd0 [ 246.642037][T16053] dump_stack+0x15/0x1b [ 246.642110][T16053] should_fail_ex+0x265/0x280 [ 246.642149][T16053] should_fail+0xb/0x20 [ 246.642170][T16053] should_fail_usercopy+0x1a/0x20 [ 246.642195][T16053] _copy_from_iter+0xcf/0xe70 [ 246.642294][T16053] ? __alloc_skb+0x396/0x4b0 [ 246.642327][T16053] ? __alloc_skb+0x228/0x4b0 [ 246.642363][T16053] netlink_sendmsg+0x471/0x6b0 [ 246.642409][T16053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.642490][T16053] __sock_sendmsg+0x145/0x180 [ 246.642521][T16053] ____sys_sendmsg+0x31e/0x4a0 [ 246.642611][T16053] ___sys_sendmsg+0x17b/0x1d0 [ 246.642811][T16053] __x64_sys_sendmsg+0xd4/0x160 [ 246.642897][T16053] x64_sys_call+0x17ba/0x3000 [ 246.642923][T16053] do_syscall_64+0xca/0x2b0 [ 246.642961][T16053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.643063][T16053] RIP: 0033:0x7fc9b989f749 [ 246.643079][T16053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.643099][T16053] RSP: 002b:00007fc9b82ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.643125][T16053] RAX: ffffffffffffffda RBX: 00007fc9b9af5fa0 RCX: 00007fc9b989f749 [ 246.643148][T16053] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 246.643161][T16053] RBP: 00007fc9b82ff090 R08: 0000000000000000 R09: 0000000000000000 [ 246.643239][T16053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.643274][T16053] R13: 00007fc9b9af6038 R14: 00007fc9b9af5fa0 R15: 00007fff3d11f648 [ 246.643293][T16053] [ 246.847834][ T29] kauditd_printk_skb: 1412 callbacks suppressed [ 246.847899][ T29] audit: type=1400 audit(1766807458.247:95705): avc: denied { read write } for pid=12839 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 246.892310][ T29] audit: type=1400 audit(1766807458.257:95706): avc: denied { map_create } for pid=16060 comm="syz.6.4381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 246.911840][ T29] audit: type=1400 audit(1766807458.257:95707): avc: denied { prog_load } for pid=16060 comm="syz.6.4381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 246.931234][ T29] audit: type=1400 audit(1766807458.257:95708): avc: denied { prog_load } for pid=16060 comm="syz.6.4381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 246.950655][ T29] audit: type=1400 audit(1766807458.257:95709): avc: denied { create } for pid=16060 comm="syz.6.4381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 246.971567][ T29] audit: type=1400 audit(1766807458.287:95710): avc: denied { read write } for pid=13515 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 246.999289][ T29] audit: type=1400 audit(1766807458.287:95711): avc: denied { read write } for pid=12839 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 246.999398][ T29] audit: type=1400 audit(1766807458.287:95712): avc: denied { read write } for pid=12881 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 246.999434][ T29] audit: type=1400 audit(1766807458.337:95713): avc: denied { read write } for pid=12437 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 246.999472][ T29] audit: type=1400 audit(1766807458.377:95714): avc: denied { read write } for pid=16062 comm="syz.6.4382" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 247.149957][T16078] xt_hashlimit: max too large, truncated to 1048576 [ 247.157273][T16078] No such timeout policy "syz1" [ 247.218802][T16090] ALSA: seq fatal error: cannot create timer (-22) [ 247.232560][T16091] netlink: 'syz.6.4387': attribute type 39 has an invalid length. [ 247.353817][T16109] netlink: 'syz.2.4404': attribute type 30 has an invalid length. [ 248.204778][T16132] FAULT_INJECTION: forcing a failure. [ 248.204778][T16132] name failslab, interval 1, probability 0, space 0, times 0 [ 248.217662][T16132] CPU: 1 UID: 0 PID: 16132 Comm: syz.4.4412 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 248.217701][T16132] Tainted: [W]=WARN [ 248.217708][T16132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 248.217774][T16132] Call Trace: [ 248.217781][T16132] [ 248.217789][T16132] __dump_stack+0x1d/0x30 [ 248.217828][T16132] dump_stack_lvl+0x95/0xd0 [ 248.217854][T16132] dump_stack+0x15/0x1b [ 248.217879][T16132] should_fail_ex+0x265/0x280 [ 248.217969][T16132] should_failslab+0x8c/0xb0 [ 248.218017][T16132] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 248.218044][T16132] ? kstrdup_const+0x3e/0x50 [ 248.218138][T16132] ? __xa_alloc+0x291/0x300 [ 248.218161][T16132] kstrdup+0x3e/0xd0 [ 248.218244][T16132] kstrdup_const+0x3e/0x50 [ 248.218262][T16132] alloc_vfsmnt+0xe7/0x300 [ 248.218294][T16132] clone_mnt+0x30/0x5d0 [ 248.218358][T16132] ? copy_tree+0xa3/0x8c0 [ 248.218465][T16132] copy_tree+0xb9/0x8c0 [ 248.218498][T16132] ? proc_alloc_inum+0x4f/0x70 [ 248.218584][T16132] ? __ns_common_init+0xd4/0x120 [ 248.218612][T16132] ? __ns_tree_gen_id+0x48/0x60 [ 248.218643][T16132] copy_mnt_ns+0x136/0x6a0 [ 248.218677][T16132] ? kmem_cache_alloc_noprof+0x2c5/0x4b0 [ 248.218699][T16132] ? create_new_namespaces+0x3c/0x400 [ 248.218727][T16132] create_new_namespaces+0x83/0x400 [ 248.218756][T16132] unshare_nsproxy_namespaces+0xe8/0x120 [ 248.218807][T16132] ksys_unshare+0x3d0/0x6d0 [ 248.218831][T16132] ? ksys_write+0x15f/0x1a0 [ 248.218853][T16132] __x64_sys_unshare+0x1f/0x30 [ 248.218901][T16132] x64_sys_call+0x2ae6/0x3000 [ 248.218926][T16132] do_syscall_64+0xca/0x2b0 [ 248.218963][T16132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.219082][T16132] RIP: 0033:0x7fc9b989f749 [ 248.219171][T16132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.219190][T16132] RSP: 002b:00007fc9b82ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 248.219210][T16132] RAX: ffffffffffffffda RBX: 00007fc9b9af5fa0 RCX: 00007fc9b989f749 [ 248.219223][T16132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 248.219235][T16132] RBP: 00007fc9b82ff090 R08: 0000000000000000 R09: 0000000000000000 [ 248.219248][T16132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.219260][T16132] R13: 00007fc9b9af6038 R14: 00007fc9b9af5fa0 R15: 00007fff3d11f648 [ 248.219327][T16132] [ 248.494527][T16134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4413'. [ 248.515665][T16141] FAULT_INJECTION: forcing a failure. [ 248.515665][T16141] name failslab, interval 1, probability 0, space 0, times 0 [ 248.528519][T16141] CPU: 0 UID: 0 PID: 16141 Comm: syz.4.4417 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 248.528561][T16141] Tainted: [W]=WARN [ 248.528570][T16141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 248.528587][T16141] Call Trace: [ 248.528594][T16141] [ 248.528603][T16141] __dump_stack+0x1d/0x30 [ 248.528630][T16141] dump_stack_lvl+0x95/0xd0 [ 248.528656][T16141] dump_stack+0x15/0x1b [ 248.528678][T16141] should_fail_ex+0x265/0x280 [ 248.528707][T16141] should_failslab+0x8c/0xb0 [ 248.528737][T16141] kmem_cache_alloc_noprof+0x69/0x4b0 [ 248.528790][T16141] ? security_file_alloc+0x32/0x100 [ 248.528839][T16141] security_file_alloc+0x32/0x100 [ 248.528865][T16141] init_file+0x5c/0x1c0 [ 248.528932][T16141] alloc_empty_file+0x8b/0x200 [ 248.529022][T16141] alloc_file_pseudo+0xc6/0x160 [ 248.529062][T16141] __shmem_file_setup+0x1de/0x210 [ 248.529175][T16141] shmem_file_setup+0x3b/0x50 [ 248.529208][T16141] __se_sys_memfd_create+0x2f7/0x6b0 [ 248.529254][T16141] __x64_sys_memfd_create+0x31/0x40 [ 248.529329][T16141] x64_sys_call+0x28cb/0x3000 [ 248.529357][T16141] do_syscall_64+0xca/0x2b0 [ 248.529462][T16141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.529491][T16141] RIP: 0033:0x7fc9b989f749 [ 248.529512][T16141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.529582][T16141] RSP: 002b:00007fc9b82fee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 248.529601][T16141] RAX: ffffffffffffffda RBX: 00000000000005ad RCX: 00007fc9b989f749 [ 248.529654][T16141] RDX: 00007fc9b82feef0 RSI: 0000000000000000 RDI: 00007fc9b9924960 [ 248.529671][T16141] RBP: 0000200000000180 R08: 00007fc9b82febb7 R09: 00007fc9b82fee40 [ 248.529687][T16141] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 248.529703][T16141] R13: 00007fc9b82feef0 R14: 00007fc9b82feeb0 R15: 0000200000000940 [ 248.529805][T16141] [ 248.786808][T16161] xt_hashlimit: max too large, truncated to 1048576 [ 248.793922][T16161] No such timeout policy "syz1" [ 248.837427][T16167] FAULT_INJECTION: forcing a failure. [ 248.837427][T16167] name failslab, interval 1, probability 0, space 0, times 0 [ 248.850226][T16167] CPU: 1 UID: 0 PID: 16167 Comm: syz.2.4428 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 248.850271][T16167] Tainted: [W]=WARN [ 248.850280][T16167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 248.850298][T16167] Call Trace: [ 248.850307][T16167] [ 248.850318][T16167] __dump_stack+0x1d/0x30 [ 248.850405][T16167] dump_stack_lvl+0x95/0xd0 [ 248.850509][T16167] dump_stack+0x15/0x1b [ 248.850536][T16167] should_fail_ex+0x265/0x280 [ 248.850567][T16167] should_failslab+0x8c/0xb0 [ 248.850661][T16167] __kmalloc_noprof+0xb9/0x5a0 [ 248.850699][T16167] ? iovec_from_user+0x84/0x210 [ 248.850816][T16167] iovec_from_user+0x84/0x210 [ 248.850855][T16167] __import_iovec+0xf3/0x540 [ 248.850952][T16167] ? aio_prep_rw+0x551/0x5a0 [ 248.850991][T16167] aio_read+0x135/0x2e0 [ 248.851038][T16167] io_submit_one+0xb00/0x1210 [ 248.851125][T16167] __se_sys_io_submit+0xfb/0x280 [ 248.851163][T16167] __x64_sys_io_submit+0x43/0x50 [ 248.851197][T16167] x64_sys_call+0x2e40/0x3000 [ 248.851293][T16167] do_syscall_64+0xca/0x2b0 [ 248.851339][T16167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.851513][T16167] RIP: 0033:0x7f9e24f4f749 [ 248.851533][T16167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.851591][T16167] RSP: 002b:00007f9e239af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 248.851617][T16167] RAX: ffffffffffffffda RBX: 00007f9e251a5fa0 RCX: 00007f9e24f4f749 [ 248.851641][T16167] RDX: 0000200000000240 RSI: 0000000000000002 RDI: 00007f9e25cde000 [ 248.851658][T16167] RBP: 00007f9e239af090 R08: 0000000000000000 R09: 0000000000000000 [ 248.851676][T16167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.851721][T16167] R13: 00007f9e251a6038 R14: 00007f9e251a5fa0 R15: 00007ffc4f0b7608 [ 248.851781][T16167] [ 249.181768][T16185] syzkaller0: entered promiscuous mode [ 249.187393][T16185] syzkaller0: entered allmulticast mode [ 249.226389][T16192] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4440'. [ 249.245135][T16192] hsr_slave_0: left promiscuous mode [ 249.250078][T16194] xt_hashlimit: max too large, truncated to 1048576 [ 249.257965][T16194] No such timeout policy "syz1" [ 249.283095][T16192] hsr_slave_1: left promiscuous mode [ 249.539890][T16214] lo speed is unknown, defaulting to 1000 [ 249.591992][T16221] xt_hashlimit: max too large, truncated to 1048576 [ 249.606498][T16221] No such timeout policy "syz1" [ 249.690952][T16223] syzkaller0: entered promiscuous mode [ 249.696547][T16223] syzkaller0: entered allmulticast mode [ 249.878896][T16242] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 249.949844][T16248] xt_hashlimit: max too large, truncated to 1048576 [ 249.956814][T16248] No such timeout policy "syz1" [ 250.058399][T16256] syzkaller0: entered promiscuous mode [ 250.063910][T16256] syzkaller0: entered allmulticast mode [ 250.161266][T16262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=146 sclass=netlink_route_socket pid=16262 comm=syz.7.4471 [ 250.174230][T16263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=146 sclass=netlink_route_socket pid=16263 comm=syz.7.4471 [ 250.226024][T16273] xt_hashlimit: max too large, truncated to 1048576 [ 250.241345][T16273] Timeout policy `syz1' can only be used by L3 protocol number 24580 [ 250.245247][T16275] FAULT_INJECTION: forcing a failure. [ 250.245247][T16275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.262628][T16275] CPU: 1 UID: 0 PID: 16275 Comm: syz.7.4476 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 250.262748][T16275] Tainted: [W]=WARN [ 250.262758][T16275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.262850][T16275] Call Trace: [ 250.262858][T16275] [ 250.262867][T16275] __dump_stack+0x1d/0x30 [ 250.262900][T16275] dump_stack_lvl+0x95/0xd0 [ 250.262923][T16275] dump_stack+0x15/0x1b [ 250.262954][T16275] should_fail_ex+0x265/0x280 [ 250.262978][T16275] should_fail+0xb/0x20 [ 250.263008][T16275] should_fail_usercopy+0x1a/0x20 [ 250.263031][T16275] _copy_to_user+0x20/0xa0 [ 250.263059][T16275] simple_read_from_buffer+0xb5/0x130 [ 250.263086][T16275] proc_fail_nth_read+0x10e/0x150 [ 250.263180][T16275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 250.263215][T16275] vfs_read+0x1a8/0x770 [ 250.263238][T16275] ? __rcu_read_unlock+0x4f/0x70 [ 250.263269][T16275] ? __fget_files+0x184/0x1c0 [ 250.263290][T16275] ? mutex_lock+0x58/0x90 [ 250.263356][T16275] ksys_read+0xda/0x1a0 [ 250.263375][T16275] __x64_sys_read+0x40/0x50 [ 250.263399][T16275] x64_sys_call+0x2889/0x3000 [ 250.263492][T16275] do_syscall_64+0xca/0x2b0 [ 250.263630][T16275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.263683][T16275] RIP: 0033:0x7f971809e15c [ 250.263699][T16275] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 250.263717][T16275] RSP: 002b:00007f9716aff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 250.263839][T16275] RAX: ffffffffffffffda RBX: 00007f97182f5fa0 RCX: 00007f971809e15c [ 250.263854][T16275] RDX: 000000000000000f RSI: 00007f9716aff0a0 RDI: 0000000000000004 [ 250.263881][T16275] RBP: 00007f9716aff090 R08: 0000000000000000 R09: 0000000000000000 [ 250.263895][T16275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.263951][T16275] R13: 00007f97182f6038 R14: 00007f97182f5fa0 R15: 00007ffd681293d8 [ 250.263975][T16275] [ 250.471933][T16277] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 250.515897][T16283] FAULT_INJECTION: forcing a failure. [ 250.515897][T16283] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 250.529286][T16283] CPU: 0 UID: 0 PID: 16283 Comm: syz.4.4480 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 250.529335][T16283] Tainted: [W]=WARN [ 250.529343][T16283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.529360][T16283] Call Trace: [ 250.529369][T16283] [ 250.529378][T16283] __dump_stack+0x1d/0x30 [ 250.529441][T16283] dump_stack_lvl+0x95/0xd0 [ 250.529469][T16283] dump_stack+0x15/0x1b [ 250.529495][T16283] should_fail_ex+0x265/0x280 [ 250.529522][T16283] should_fail_alloc_page+0xf2/0x100 [ 250.529555][T16283] __alloc_frozen_pages_noprof+0x109/0x360 [ 250.529597][T16283] alloc_pages_mpol+0xb3/0x260 [ 250.529636][T16283] alloc_pages_noprof+0x90/0x130 [ 250.529677][T16283] __pmd_alloc+0x47/0x480 [ 250.529735][T16283] handle_mm_fault+0x1a07/0x2c60 [ 250.529775][T16283] ? __rcu_read_unlock+0x4f/0x70 [ 250.529803][T16283] ? mt_find+0x21b/0x330 [ 250.529869][T16283] do_user_addr_fault+0x3fe/0x1080 [ 250.529955][T16283] exc_page_fault+0x62/0xa0 [ 250.529990][T16283] asm_exc_page_fault+0x26/0x30 [ 250.530018][T16283] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 250.530049][T16283] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 250.530110][T16283] RSP: 0018:ffffc90008ec3c38 EFLAGS: 00050202 [ 250.530131][T16283] RAX: ffff8881405e8a90 RBX: 0000000000000004 RCX: 0000000000000004 [ 250.530148][T16283] RDX: 0000000000000001 RSI: 0000200000000300 RDI: ffffc90008ec3cc4 [ 250.530165][T16283] RBP: 0000000000000001 R08: 000000000000053b R09: 0000000000000000 [ 250.530181][T16283] R10: 0001c90008ec3cc4 R11: 0001c90008ec3cc7 R12: 0000200000000300 [ 250.530198][T16283] R13: 0000000000000036 R14: ffffc90008ec3cc4 R15: 0000200000000300 [ 250.530222][T16283] _copy_from_user+0x6f/0xb0 [ 250.530265][T16283] do_ipv6_setsockopt+0x124/0x2160 [ 250.530311][T16283] ? calipso_sock_getattr+0x28b/0x3d0 [ 250.530352][T16283] ? _raw_spin_lock_bh+0x56/0xb0 [ 250.530419][T16283] ? __rcu_read_unlock+0x4f/0x70 [ 250.530444][T16283] ? ip6_datagram_release_cb+0xf8/0x160 [ 250.530482][T16283] ? _raw_spin_unlock_bh+0x36/0x40 [ 250.530532][T16283] ? release_sock+0x116/0x150 [ 250.530561][T16283] ? selinux_netlbl_socket_setsockopt+0x255/0x2d0 [ 250.530603][T16283] ipv6_setsockopt+0x59/0x130 [ 250.530712][T16283] udpv6_setsockopt+0x99/0xb0 [ 250.530752][T16283] sock_common_setsockopt+0x69/0x80 [ 250.530844][T16283] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 250.530870][T16283] __sys_setsockopt+0x184/0x200 [ 250.530931][T16283] __x64_sys_setsockopt+0x64/0x80 [ 250.530966][T16283] x64_sys_call+0x21d5/0x3000 [ 250.531000][T16283] do_syscall_64+0xca/0x2b0 [ 250.531046][T16283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.531068][T16283] RIP: 0033:0x7fc9b989f749 [ 250.531086][T16283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.531106][T16283] RSP: 002b:00007fc9b82ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 250.531155][T16283] RAX: ffffffffffffffda RBX: 00007fc9b9af5fa0 RCX: 00007fc9b989f749 [ 250.531172][T16283] RDX: 0000000000000036 RSI: 0000000000000029 RDI: 0000000000000003 [ 250.531193][T16283] RBP: 00007fc9b82ff090 R08: 00000000000001b0 R09: 0000000000000000 [ 250.531210][T16283] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 250.531227][T16283] R13: 00007fc9b9af6038 R14: 00007fc9b9af5fa0 R15: 00007fff3d11f648 [ 250.531272][T16283] [ 251.209986][T16332] erspan0: entered promiscuous mode [ 251.289627][T16346] xt_hashlimit: max too large, truncated to 1048576 [ 251.307264][T16346] No such timeout policy "syz1" [ 251.335746][T16352] ip6t_srh: unknown srh match flags 4000 [ 251.356360][T16357] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 251.362984][T16358] FAULT_INJECTION: forcing a failure. [ 251.362984][T16358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.368642][T16352] bridge0: entered promiscuous mode [ 251.380449][T16358] CPU: 0 UID: 0 PID: 16358 Comm: syz.4.4512 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 251.380609][T16358] Tainted: [W]=WARN [ 251.380631][T16358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.380672][T16358] Call Trace: [ 251.380698][T16358] [ 251.380813][T16358] __dump_stack+0x1d/0x30 [ 251.380944][T16358] dump_stack_lvl+0x95/0xd0 [ 251.381073][T16358] dump_stack+0x15/0x1b [ 251.381148][T16358] should_fail_ex+0x265/0x280 [ 251.381303][T16358] should_fail+0xb/0x20 [ 251.381371][T16358] should_fail_usercopy+0x1a/0x20 [ 251.381473][T16358] _copy_from_user+0x1c/0xb0 [ 251.381577][T16358] load_msg+0x1e2/0x2f0 [ 251.381669][T16358] do_msgsnd+0xdc/0xb00 [ 251.381805][T16358] ? __rcu_read_unlock+0x4f/0x70 [ 251.381896][T16358] ? mutex_unlock+0x4f/0x90 [ 251.381975][T16358] ? fput+0x8f/0xc0 [ 251.382079][T16358] __x64_sys_msgsnd+0xa8/0xc0 [ 251.382166][T16358] x64_sys_call+0x180f/0x3000 [ 251.382237][T16358] do_syscall_64+0xca/0x2b0 [ 251.382437][T16358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.382579][T16358] RIP: 0033:0x7fc9b989f749 [ 251.382631][T16358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.382684][T16358] RSP: 002b:00007fc9b82ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 251.382745][T16358] RAX: ffffffffffffffda RBX: 00007fc9b9af5fa0 RCX: 00007fc9b989f749 [ 251.382757][T16358] RDX: 0000000000002000 RSI: 0000200000000240 RDI: 0000000000000000 [ 251.382828][T16358] RBP: 00007fc9b82ff090 R08: 0000000000000000 R09: 0000000000000000 [ 251.382878][T16358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.382923][T16358] R13: 00007fc9b9af6038 R14: 00007fc9b9af5fa0 R15: 00007fff3d11f648 [ 251.382984][T16358] [ 251.602259][T16363] lo speed is unknown, defaulting to 1000 [ 251.684003][T16381] xt_hashlimit: max too large, truncated to 1048576 [ 251.690920][T16381] No such timeout policy "syz1" [ 251.860738][ T29] kauditd_printk_skb: 1463 callbacks suppressed [ 251.860757][ T29] audit: type=1400 audit(1766807463.257:97176): avc: denied { map_create } for pid=16407 comm="syz.4.4535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 251.900560][ T29] audit: type=1400 audit(1766807463.297:97177): avc: denied { prog_load } for pid=16407 comm="syz.4.4535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 251.919907][ T29] audit: type=1400 audit(1766807463.297:97178): avc: denied { prog_load } for pid=16407 comm="syz.4.4535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 251.939177][ T29] audit: type=1400 audit(1766807463.297:97179): avc: denied { create } for pid=16407 comm="syz.4.4535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 251.959945][ T29] audit: type=1400 audit(1766807463.297:97180): avc: denied { read write } for pid=16407 comm="syz.4.4535" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=0 [ 251.983896][ T29] audit: type=1400 audit(1766807463.297:97181): avc: denied { create } for pid=16407 comm="syz.4.4535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 252.006473][ T29] audit: type=1400 audit(1766807463.297:97182): avc: denied { read write } for pid=11618 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 252.030959][ T29] audit: type=1400 audit(1766807463.367:97183): avc: denied { read write } for pid=12437 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 252.055553][ T29] audit: type=1400 audit(1766807463.387:97184): avc: denied { read write } for pid=12881 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 252.080497][T16410] xt_hashlimit: max too large, truncated to 1048576 [ 252.087466][T16410] No such timeout policy "syz1" [ 252.112954][ T29] audit: type=1400 audit(1766807463.477:97185): avc: denied { create } for pid=16409 comm="syz.4.4537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 252.949699][T16448] bridge_slave_0: left allmulticast mode [ 252.955678][T16448] bridge_slave_0: left promiscuous mode [ 252.961437][T16448] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.970282][T16448] bridge_slave_1: left allmulticast mode [ 252.976018][T16448] bridge_slave_1: left promiscuous mode [ 252.981815][T16448] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.994941][T16448] bond0: (slave bond_slave_0): Releasing backup interface [ 253.008458][T16448] team0: Port device team_slave_0 removed [ 253.027794][T16448] team0: Port device team_slave_1 removed [ 253.040340][T16448] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 253.060027][T16449] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4552'. [ 253.069132][T16449] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4552'. [ 253.078630][T16455] xt_hashlimit: max too large, truncated to 1048576 [ 253.085696][T16455] Timeout policy `syz1' can only be used by L3 protocol number 24580 [ 253.093944][ T23] syz!: Port: 1 Link DOWN [ 253.222286][T16479] netlink: 'syz.6.4566': attribute type 13 has an invalid length. [ 253.273044][T16479] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.280335][T16479] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.437868][T12044] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.446996][T12044] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.456319][T12044] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.465342][T12044] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.475174][T12044] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.484109][T12044] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.493472][T12044] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.502487][T12044] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.811378][T12023] Bluetooth: hci0: Frame reassembly failed (-84) [ 254.137057][T16521] No such timeout policy "syz1" [ 254.145160][T16521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4582'. [ 254.254685][T16530] FAULT_INJECTION: forcing a failure. [ 254.254685][T16530] name failslab, interval 1, probability 0, space 0, times 0 [ 254.267436][T16530] CPU: 1 UID: 0 PID: 16530 Comm: syz.4.4585 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 254.267473][T16530] Tainted: [W]=WARN [ 254.267482][T16530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 254.267571][T16530] Call Trace: [ 254.267576][T16530] [ 254.267583][T16530] __dump_stack+0x1d/0x30 [ 254.267642][T16530] dump_stack_lvl+0x95/0xd0 [ 254.267739][T16530] dump_stack+0x15/0x1b [ 254.267840][T16530] should_fail_ex+0x265/0x280 [ 254.267868][T16530] should_failslab+0x8c/0xb0 [ 254.267894][T16530] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 254.267923][T16530] ? __d_alloc+0x37/0x340 [ 254.268001][T16530] __d_alloc+0x37/0x340 [ 254.268027][T16530] d_alloc+0x2e/0x100 [ 254.268127][T16530] lookup_one_qstr_excl+0x99/0x250 [ 254.268160][T16530] start_dirop+0x3e/0x70 [ 254.268218][T16530] simple_start_creating+0x83/0xb0 [ 254.268241][T16530] debugfs_start_creating+0xda/0x150 [ 254.268261][T16530] __debugfs_create_file+0x70/0x2b0 [ 254.268279][T16530] debugfs_create_file_full+0x3f/0x60 [ 254.268336][T16530] ? __pfx_macsec_setup+0x10/0x10 [ 254.268354][T16530] ref_tracker_dir_debugfs+0x100/0x210 [ 254.268397][T16530] alloc_netdev_mqs+0x1a7/0xa40 [ 254.268648][T16530] rtnl_create_link+0x239/0x6e0 [ 254.268685][T16530] rtnl_newlink_create+0x14c/0x620 [ 254.268713][T16530] ? security_capable+0x83/0x90 [ 254.268751][T16530] ? netlink_ns_capable+0x86/0xa0 [ 254.268776][T16530] rtnl_newlink+0xf5b/0x1360 [ 254.268815][T16530] ? bpf_get_stack+0x33/0x50 [ 254.268844][T16530] ? bpf_prog_f0a671877bccbe4b+0x41/0x49 [ 254.268865][T16530] ? xas_load+0x413/0x430 [ 254.268891][T16530] ? strlen+0x19/0x40 [ 254.268906][T16530] ? perf_trace_kmem_cache_free+0x55/0x160 [ 254.268979][T16530] ? __kfree_skb+0x109/0x150 [ 254.269009][T16530] ? __rcu_read_unlock+0x4f/0x70 [ 254.269027][T16530] ? avc_has_perm_noaudit+0xab/0x130 [ 254.269100][T16530] ? cred_has_capability+0x210/0x280 [ 254.269281][T16530] ? selinux_capable+0x31/0x40 [ 254.269308][T16530] ? security_capable+0x83/0x90 [ 254.269348][T16530] ? ns_capable+0x7d/0xb0 [ 254.269384][T16530] ? __pfx_rtnl_newlink+0x10/0x10 [ 254.269495][T16530] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 254.269521][T16530] netlink_rcv_skb+0x123/0x220 [ 254.269559][T16530] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 254.269661][T16530] rtnetlink_rcv+0x1c/0x30 [ 254.269697][T16530] netlink_unicast+0x5c0/0x690 [ 254.269726][T16530] netlink_sendmsg+0x58b/0x6b0 [ 254.269904][T16530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.269938][T16530] __sock_sendmsg+0x145/0x180 [ 254.269958][T16530] ____sys_sendmsg+0x31e/0x4a0 [ 254.270015][T16530] ___sys_sendmsg+0x17b/0x1d0 [ 254.270068][T16530] __x64_sys_sendmsg+0xd4/0x160 [ 254.270136][T16530] x64_sys_call+0x17ba/0x3000 [ 254.270167][T16530] do_syscall_64+0xca/0x2b0 [ 254.270267][T16530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.270304][T16530] RIP: 0033:0x7fc9b989f749 [ 254.270369][T16530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.270388][T16530] RSP: 002b:00007fc9b82ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.270407][T16530] RAX: ffffffffffffffda RBX: 00007fc9b9af5fa0 RCX: 00007fc9b989f749 [ 254.270419][T16530] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 254.270431][T16530] RBP: 00007fc9b82ff090 R08: 0000000000000000 R09: 0000000000000000 [ 254.270449][T16530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.270464][T16530] R13: 00007fc9b9af6038 R14: 00007fc9b9af5fa0 R15: 00007fff3d11f648 [ 254.270482][T16530] [ 254.674972][T16536] xt_hashlimit: max too large, truncated to 1048576 [ 254.681816][T16536] No such timeout policy "syz1" [ 254.687676][T16537] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4586'. [ 254.696726][T16537] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4586'. [ 254.859305][T12023] Bluetooth: hci1: Frame reassembly failed (-84) [ 254.870009][T16547] lo speed is unknown, defaulting to 1000 [ 255.631781][T16572] xt_hashlimit: max too large, truncated to 1048576 [ 255.646567][T16572] No such timeout policy "syz1" [ 255.764790][T16581] netlink: '+}[@': attribute type 10 has an invalid length. [ 255.772546][T16581] netlink: '+}[@': attribute type 10 has an invalid length. [ 255.781924][T16581] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 255.884226][ T3486] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 256.148281][T16588] wg2: entered promiscuous mode [ 256.153225][T16588] wg2: entered allmulticast mode [ 256.170548][T16588] lo speed is unknown, defaulting to 1000 [ 256.225395][T16589] lo speed is unknown, defaulting to 1000 [ 256.905073][ T29] kauditd_printk_skb: 2155 callbacks suppressed [ 256.905091][ T29] audit: type=1400 audit(1766807468.307:99341): avc: denied { read write } for pid=11618 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 256.936296][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 256.945924][ T29] audit: type=1400 audit(1766807468.337:99342): avc: denied { map_create } for pid=16615 comm="syz.5.4617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 256.965493][ T29] audit: type=1400 audit(1766807468.337:99343): avc: denied { map_create } for pid=16615 comm="syz.5.4617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 256.985017][ T29] audit: type=1400 audit(1766807468.337:99344): avc: denied { prog_load } for pid=16615 comm="syz.5.4617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 257.004512][ T29] audit: type=1400 audit(1766807468.337:99345): avc: denied { create } for pid=16615 comm="syz.5.4617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 257.025253][ T29] audit: type=1400 audit(1766807468.337:99346): avc: denied { create } for pid=16615 comm="syz.5.4617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 257.045942][ T29] audit: type=1400 audit(1766807468.347:99347): avc: denied { prog_load } for pid=16615 comm="syz.5.4617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 257.065244][ T29] audit: type=1400 audit(1766807468.347:99348): avc: denied { create } for pid=16615 comm="syz.5.4617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=0 [ 257.085071][ T29] audit: type=1400 audit(1766807468.347:99349): avc: denied { prog_load } for pid=16615 comm="syz.5.4617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 257.104357][ T29] audit: type=1400 audit(1766807468.347:99350): avc: denied { prog_load } for pid=16615 comm="syz.5.4617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 257.238422][T16626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4620'. [ 257.286440][T16628] syzkaller0: left promiscuous mode [ 257.291774][T16628] syzkaller0: left allmulticast mode [ 257.388027][T16638] xt_hashlimit: max too large, truncated to 1048576 [ 257.395221][T16638] No such timeout policy "syz1" [ 257.429768][T16642] FAULT_INJECTION: forcing a failure. [ 257.429768][T16642] name failslab, interval 1, probability 0, space 0, times 0 [ 257.442548][T16642] CPU: 0 UID: 0 PID: 16642 Comm: syz.7.4628 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 257.442578][T16642] Tainted: [W]=WARN [ 257.442584][T16642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 257.442596][T16642] Call Trace: [ 257.442602][T16642] [ 257.442609][T16642] __dump_stack+0x1d/0x30 [ 257.442657][T16642] dump_stack_lvl+0x95/0xd0 [ 257.442676][T16642] dump_stack+0x15/0x1b [ 257.442842][T16642] should_fail_ex+0x265/0x280 [ 257.442874][T16642] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 257.442894][T16642] should_failslab+0x8c/0xb0 [ 257.442912][T16642] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 257.442950][T16642] ? debugfs_alloc_inode+0x34/0x40 [ 257.443014][T16642] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 257.443033][T16642] debugfs_alloc_inode+0x34/0x40 [ 257.443053][T16642] alloc_inode+0x40/0x170 [ 257.443072][T16642] new_inode+0x1d/0xe0 [ 257.443100][T16642] __debugfs_create_file+0x97/0x2b0 [ 257.443118][T16642] debugfs_create_file_full+0x3f/0x60 [ 257.443136][T16642] ? __pfx_ipip6_tunnel_setup+0x10/0x10 [ 257.443159][T16642] ref_tracker_dir_debugfs+0x100/0x210 [ 257.443235][T16642] alloc_netdev_mqs+0x1a7/0xa40 [ 257.443265][T16642] rtnl_create_link+0x239/0x6e0 [ 257.443293][T16642] rtnl_newlink_create+0x14c/0x620 [ 257.443313][T16642] ? security_capable+0x83/0x90 [ 257.443344][T16642] rtnl_newlink+0xf5b/0x1360 [ 257.443442][T16642] ? perf_trace_kmem_cache_free+0x55/0x160 [ 257.443535][T16642] ? __kfree_skb+0x109/0x150 [ 257.443568][T16642] ? __rcu_read_unlock+0x4f/0x70 [ 257.443586][T16642] ? avc_has_perm_noaudit+0xab/0x130 [ 257.443605][T16642] ? cred_has_capability+0x210/0x280 [ 257.443656][T16642] ? selinux_capable+0x31/0x40 [ 257.443676][T16642] ? security_capable+0x83/0x90 [ 257.443705][T16642] ? ns_capable+0x7d/0xb0 [ 257.443773][T16642] ? __pfx_rtnl_newlink+0x10/0x10 [ 257.443808][T16642] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 257.443828][T16642] netlink_rcv_skb+0x123/0x220 [ 257.443926][T16642] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 257.443979][T16642] rtnetlink_rcv+0x1c/0x30 [ 257.444007][T16642] netlink_unicast+0x5c0/0x690 [ 257.444035][T16642] netlink_sendmsg+0x58b/0x6b0 [ 257.444084][T16642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.444114][T16642] __sock_sendmsg+0x145/0x180 [ 257.444131][T16642] ____sys_sendmsg+0x31e/0x4a0 [ 257.444239][T16642] ___sys_sendmsg+0x17b/0x1d0 [ 257.444310][T16642] __x64_sys_sendmsg+0xd4/0x160 [ 257.444379][T16642] x64_sys_call+0x17ba/0x3000 [ 257.444411][T16642] do_syscall_64+0xca/0x2b0 [ 257.444457][T16642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.444480][T16642] RIP: 0033:0x7f971809f749 [ 257.444495][T16642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.444521][T16642] RSP: 002b:00007f9716aff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.444622][T16642] RAX: ffffffffffffffda RBX: 00007f97182f5fa0 RCX: 00007f971809f749 [ 257.444639][T16642] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 0000000000000003 [ 257.444655][T16642] RBP: 00007f9716aff090 R08: 0000000000000000 R09: 0000000000000000 [ 257.444671][T16642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.444686][T16642] R13: 00007f97182f6038 R14: 00007f97182f5fa0 R15: 00007ffd681293d8 [ 257.444711][T16642] [ 257.769089][T16642] debugfs: out of free dentries, can not create file 'netdev@ffff888120361558' [ 257.804611][T16644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4629'. [ 257.840453][T16652] ================================================================== [ 257.848602][T16652] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry [ 257.856214][T16652] [ 257.858566][T16652] write to 0xffff888104fec128 of 8 bytes by task 16650 on cpu 1: [ 257.866339][T16652] mas_wr_store_entry+0x11e9/0x2750 [ 257.871597][T16652] mas_store_prealloc+0x760/0xa90 [ 257.876663][T16652] commit_merge+0x6a5/0x730 [ 257.881206][T16652] vma_expand+0x1fe/0x460 [ 257.885571][T16652] vma_merge_new_range+0x296/0x310 [ 257.890724][T16652] mmap_region+0xa71/0x1410 [ 257.895255][T16652] do_mmap+0x9b3/0xbe0 [ 257.899366][T16652] vm_mmap_pgoff+0x17a/0x2e0 [ 257.903988][T16652] ksys_mmap_pgoff+0xc2/0x310 [ 257.908719][T16652] x64_sys_call+0x16bb/0x3000 [ 257.913443][T16652] do_syscall_64+0xca/0x2b0 [ 257.917991][T16652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.923931][T16652] [ 257.926269][T16652] read to 0xffff888104fec128 of 8 bytes by task 16652 on cpu 0: [ 257.933925][T16652] mas_state_walk+0x2f5/0x650 [ 257.938656][T16652] mas_walk+0x60/0x150 [ 257.942764][T16652] lock_vma_under_rcu+0x95/0x1b0 [ 257.947732][T16652] do_user_addr_fault+0x233/0x1080 [ 257.952889][T16652] exc_page_fault+0x62/0xa0 [ 257.957428][T16652] asm_exc_page_fault+0x26/0x30 [ 257.962297][T16652] [ 257.964653][T16652] value changed: 0x00007f9e2398efff -> 0x00007f9e2396dfff [ 257.971772][T16652] [ 257.974103][T16652] Reported by Kernel Concurrency Sanitizer on: [ 257.980285][T16652] CPU: 0 UID: 0 PID: 16652 Comm: syz.2.4633 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 257.991679][T16652] Tainted: [W]=WARN [ 257.995501][T16652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 258.005587][T16652] ==================================================================