last executing test programs: 46.280934485s ago: executing program 3 (id=2882): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r2, @ANYBLOB="d37a6d95c19185020000010000000000000001410001001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010014) close(r0) 46.218439578s ago: executing program 3 (id=2885): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='netlink_extack\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r2, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) 46.1769194s ago: executing program 3 (id=2888): socket$kcm(0x10, 0x2, 0x0) unshare(0x22020600) syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='mm_page_free\x00', r1, 0x0, 0x800000000000002}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000640)="3df2a10f8ccb32460f9d4ba0986827ca65dce4a564b637e186541199e76901ab4ef7eba7b16966b124ea1aca52fe51db78f95f4288113dd9268475903c13a68de1ad9dab1f42f4e9afafa6ccce1c38be4541453c64276beee4006522584c90f0ced79d08cd839a363a95ed00b0b1fb75c2992721b91c9f79290276637383692d60624ff44bf577fc190270b6ec33979c1ca24fa3aeac5973bcf737742ad7923e57fab6c205422893b538d9ba5c4415f7b2", 0xb1}], 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000000)={0x7, 'veth1_to_bridge\x00', {0x6}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x4, 0x1}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0xa1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000800)=0x14) mkdir(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f00000000c0)={[{@nobh}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x3, 0x4f8, &(0x7f0000000140)="$eJzs3E1sFGUfAPD/bLv9gBfoy8vL+4IoBTQ2JrZQUDiYGExMPGhixIMcm1IJUsDQHoQQKYnBM4lXQzwab5p41aPxZOIVDx5MDJEYLnwkJmNmd6Yf+9UuXVrL/n7Jdp9n5pl5nv/MPLOz83QngK41nP1JIv4VEbciYls1u7TAcPXt/t0rkw/uXpmMuTQ98WdSKXcvy+eK5TbnmZFSROmTpGaFVTOXLp+dmJ6eupjnx2bPfTg2c+nyi2fOTZyeOj11fvzYsSOHDx19efyl9oNqUF8W173dH1/Ys+uNkzfemuwtpg/k74vjaKq3vWYMt5j3XHur+sfbsiid1G+nq2vaGFZsID+sy1n/vzK9/+R6NwhYM2mapv3NZ8+lta7VTQE2rCTWuwXA+ig+6LPvv/fullf2PfgJcud49gUoqcR9P39V5/RGKS9Trvl+20nDEfHe3MObg/HwZrS6D/HrY2oAANB1vj9eXAlm13/VV3VOKXYuKrc1H0MZioh/R8T2iPhPROyIiP9GVMr+LyL+X1tBEpG2qH9HTX6h/m/yUYTS7VUH2UJ2/fdKPra19PqvuPqLoZ48tyWiuGCeOphvk5Eo979/ZnrqUJP19y1Tf3H9V7yy+rP3hRKl2701N+hOTcxOPFq09e5ci9jdWxt/0pvtuGIYJ4mIXRGxu431Di1Kn3nhyz3zmfLScsvHX5E2GNJrezyukfSLiOer+38uluz/hRqT1uOTYwMxPXVwLDsKDjas48efrr/drP5l4//2t9pFXj/63YnVhj0v2/+bqvGXI4+9Mn67EP9QEpHMj9fORKQ97dVx/ZdPK+sdPlA/7xGO/76YmJ3oS97NM1UfTczOXjwU0Ze8WT99fGHhIl+Uz+IfOdC4/2/Pl8m2xFMRkR3ET0fEMxGxN2/7vojYHxH1of38R5H64bVnP2i2bZbGv7XZ8T8/Tt1pWfynGp7/luz/hfH6FSaKhbMpPWf33XrQ5OSxsv1/pJIayac0Pv8lS04RK23p6rYeAAAAbAylqPzvf2l0Pl0qjY5W7wHtiE2l6Qszs3sj4vyp6m8EhqJcKu50Ve8Hl5Pi/ufQovx4Tf5wft/4s57BSn508sJyt0aBx2xzpc8ndf0/83ub93mBDagD42jABrVc/995Y40aAqw5n//QvRb1/7kmReb8pww8mXz+Q/dq1P+vxlctB+icM2DjS/Vl6Gr6P3Sv3nhnPl352XPDX9sCTyKf/9CV2v1df3uJtH966tWIqJ01UDfl0uUYeDzNGGxQ17oksiurDq6wHBErKzz4KFUUl4DNn/BQam+F/VE/qydaLZW0fI7DX2ma1s/Ktsqy7Tm9s+MHf/FMlE4fNl8v9NNy5SFL87M+37aCSFeRWJfTEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMf9HQAA//8V1NEi") mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 45.431348352s ago: executing program 3 (id=2901): r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8000000000000001, 0x800) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x7ff}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x6, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000001c0000000007000000000000004b20000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x84d8c6813efea365, 0x0, 0x0, 0x0, 0xfffffffffffffe05, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000340)={@local, @loopback, 0x0}, &(0x7f00000004c0)=0xc) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@private0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x9, 0xd, 0x0, 0x9, 0x200000, r3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='rss_stat\x00', r2, 0x0, 0x3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r5 = getpid() syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {@mblk_io_submit}, {@noquota}, {@nodiscard}, {@nogrpid}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffff}}]}, 0x0, 0x55a, &(0x7f0000001400)="$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") madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) r6 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r8}, 0x10) sendmmsg$inet(r6, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1787b35", 0x14}], 0x1}}], 0x2, 0x4004040) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000002c0)) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x48, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone(0x60002080, 0x0, 0x0, 0x0, 0x0, 0x0) 44.914344174s ago: executing program 3 (id=2911): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x53) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) 43.1278472s ago: executing program 3 (id=2927): socket$kcm(0x10, 0x2, 0x0) unshare(0x22020600) syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='mm_page_free\x00', r1, 0x0, 0x800000000000002}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000640)="3df2a10f8ccb32460f9d4ba0986827ca65dce4a564b637e186541199e76901ab4ef7eba7b16966b124ea1aca52fe51db78f95f4288113dd9268475903c13a68de1ad9dab1f42f4e9afafa6ccce1c38be4541453c64276beee4006522584c90f0ced79d08cd839a363a95ed00b0b1fb75c2992721b91c9f79290276637383692d60624ff44bf577fc190270b6ec33979c1ca24fa3aeac5973bcf737742ad7923e57fab6c205422893b538d9ba5c4415f7b2", 0xb1}], 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000000)={0x7, 'veth1_to_bridge\x00', {0x6}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x4, 0x1}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0xa1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000800)=0x14) mkdir(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f00000000c0)={[{@nobh}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x3, 0x4f8, &(0x7f0000000140)="$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") mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 43.12750287s ago: executing program 32 (id=2927): socket$kcm(0x10, 0x2, 0x0) unshare(0x22020600) syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='mm_page_free\x00', r1, 0x0, 0x800000000000002}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000640)="3df2a10f8ccb32460f9d4ba0986827ca65dce4a564b637e186541199e76901ab4ef7eba7b16966b124ea1aca52fe51db78f95f4288113dd9268475903c13a68de1ad9dab1f42f4e9afafa6ccce1c38be4541453c64276beee4006522584c90f0ced79d08cd839a363a95ed00b0b1fb75c2992721b91c9f79290276637383692d60624ff44bf577fc190270b6ec33979c1ca24fa3aeac5973bcf737742ad7923e57fab6c205422893b538d9ba5c4415f7b2", 0xb1}], 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000000)={0x7, 'veth1_to_bridge\x00', {0x6}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x4, 0x1}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0xa1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000800)=0x14) mkdir(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f00000000c0)={[{@nobh}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x3, 0x4f8, &(0x7f0000000140)="$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") mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16.512865766s ago: executing program 0 (id=3527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180"], 0x44}}, 0x20008000) 16.449802558s ago: executing program 0 (id=3529): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f00000041c0)=""/4100, &(0x7f0000000100)=0x1004) 16.435442808s ago: executing program 0 (id=3530): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19b417bfa5108c41ab0000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x9}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) 16.294069224s ago: executing program 0 (id=3532): socket$netlink(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xcec0}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000010201080000000000000000050000080600074000020000080008400000000008000540000000030800084000000000188008000100ffffffcf2f43895774e32f700604ff08000200"], 0x54}, 0x1, 0x0, 0x0, 0x48001}, 0x840) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xffff}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ffff"], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000400)={0x5, &(0x7f00000003c0)=[{0x1, 0x0, 0x7, 0xffff}, {0x3, 0xf7, 0xf7, 0x6}, {0x6, 0x9, 0xfb, 0xfffffffc}, {0x4, 0x7, 0x3, 0x401}, {0x6, 0x0, 0xea, 0x4f53}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5, 0x0, 0x8}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 16.054132703s ago: executing program 0 (id=3535): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) syz_open_dev$usbfs(&(0x7f0000000340), 0xffffffffffffffff, 0xa82) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) statx(0xffffffffffffffff, 0x0, 0x400, 0x400, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x7, 0x6}, &(0x7f0000000200)=0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000f303010000000000000000000a00000a1400"], 0x28}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb8, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x8e, 0x5b, "abaf9631b81f11154c4224db5b8ae76256d47c186c44cf9387625688c2398fec9a4f7d9685a0f410f325e5b02a3833910d16aff365622d03288587a5983ba843fcfa5ac0ea3482d1f20f417ccc9bb816206ac96bd14e0f1353a7c67964f14befec4e3ee5ebe10c09188d88db74d912b1af611ebe38d4802c11e89bb9bf4dffbd046ca69ce8de48e2d3d7"}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8000}]}, 0xb8}, 0x1, 0x0, 0x0, 0x190}, 0x20000000) 15.831201544s ago: executing program 0 (id=3541): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x2fd, 0xffff, 0x101, 0x300}}) r1 = socket(0x11, 0x800000003, 0x96) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1100, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020600) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 15.827681134s ago: executing program 33 (id=3541): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x2fd, 0xffff, 0x101, 0x300}}) r1 = socket(0x11, 0x800000003, 0x96) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1100, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020600) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 11.72700197s ago: executing program 1 (id=3624): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800400, &(0x7f00000009c0)={[{@quota}]}, 0x1, 0x4f3, &(0x7f0000000a00)="$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") r0 = open(&(0x7f0000000040)='./file2\x00', 0x4440, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 11.672574242s ago: executing program 1 (id=3625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x80000001}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x4e6e, &(0x7f0000000000)={0x0, 0x694e, 0x8, 0x2, 0x3d}, &(0x7f0000000080), &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x8, 0x800, 0x20, @local, @rand_addr=' \x01\x00', 0x700, 0x7800, 0x8, 0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x55, '\x00', r5, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0xfffffffffffffc42) close(0x3) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000001480)={[{@data_journal}]}, 0x1, 0x5ad, &(0x7f0000000180)="$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") 10.54304725s ago: executing program 1 (id=3638): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) 10.341575119s ago: executing program 1 (id=3640): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xcec0}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000010201080000000000000000050000080600074000020000080008400000000008000540000000030800084000000000188008000100ffffffcf2f43895774e32f700604ff08000200"], 0x54}, 0x1, 0x0, 0x0, 0x48001}, 0x840) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 10.29544127s ago: executing program 1 (id=3641): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x0, 0x0, {0x1d}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0) 10.210764034s ago: executing program 1 (id=3642): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) syz_open_dev$usbfs(&(0x7f0000000340), 0xffffffffffffffff, 0xa82) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x7, 0x6}, &(0x7f0000000200)=0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000f303010000000000000000000a00000a1400"], 0x28}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb8, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x8e, 0x5b, "abaf9631b81f11154c4224db5b8ae76256d47c186c44cf9387625688c2398fec9a4f7d9685a0f410f325e5b02a3833910d16aff365622d03288587a5983ba843fcfa5ac0ea3482d1f20f417ccc9bb816206ac96bd14e0f1353a7c67964f14befec4e3ee5ebe10c09188d88db74d912b1af611ebe38d4802c11e89bb9bf4dffbd046ca69ce8de48e2d3d7"}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8000}]}, 0xb8}, 0x1, 0x0, 0x0, 0x190}, 0x20000000) 10.210539694s ago: executing program 34 (id=3642): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) syz_open_dev$usbfs(&(0x7f0000000340), 0xffffffffffffffff, 0xa82) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x7, 0x6}, &(0x7f0000000200)=0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000f303010000000000000000000a00000a1400"], 0x28}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb8, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x8e, 0x5b, "abaf9631b81f11154c4224db5b8ae76256d47c186c44cf9387625688c2398fec9a4f7d9685a0f410f325e5b02a3833910d16aff365622d03288587a5983ba843fcfa5ac0ea3482d1f20f417ccc9bb816206ac96bd14e0f1353a7c67964f14befec4e3ee5ebe10c09188d88db74d912b1af611ebe38d4802c11e89bb9bf4dffbd046ca69ce8de48e2d3d7"}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8000}]}, 0xb8}, 0x1, 0x0, 0x0, 0x190}, 0x20000000) 9.060072894s ago: executing program 5 (id=3652): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x142) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000000c0)={0x5, {{0xa, 0x4e21, 0x2, @empty}}, {{0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}}}, 0x108) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10, 0xc0800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000e7c492598c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f0000000400)=@framed={{}, [@map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r3, &(0x7f0000f62000/0x1000)=nil, 0x7000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6083, 0x3) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0) syz_open_procfs(0x0, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000100)={0x0, 0x80da61, 0x1, 0x20000000, 0x40000337}, &(0x7f0000000240), &(0x7f00000001c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='kmem_cache_free\x00', r5}, 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) getrlimit(0x0, &(0x7f0000000280)) 8.926014509s ago: executing program 5 (id=3653): shutdown(0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x5}, 0x8) memfd_create(&(0x7f0000000140)='#\x00', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000240)='rpcgss_svc_accept_upcall\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000700)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',access=', @ANYBLOB="03"]) (fail_nth: 8) 7.827819906s ago: executing program 5 (id=3665): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001200)={'wlan1\x00', &(0x7f0000001100)=@ethtool_rxnfc={0x2a, 0x8, 0x7e1ab084, {0x6, @usr_ip4_spec={@multicast1, @multicast1, 0x50, 0x7f, 0x1, 0x5}, {0x0, @random="7729ba522e59", 0xa, 0x0, [0x10000, 0x3]}, @hdata="a86b57371eff451fd353517f755532b803741b5b2aade83e68f35d937d79d8993111b4ca75f0612da64df99e636e9cb7eb62b35f", {0x0, @link_local, 0x9, 0x6, [0x6]}, 0x3, 0x6}}}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f00000012c0)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b57f440284", 0xf}], 0x4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) memfd_secret(0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffe1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000c000000ffffffff01"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000b8568dc3a61f0d278db73a5ac8a9718dcadaaf375257ff4ba7729a2e09efde2252d8f5d8b55a6381b7bfda992851bc4dd18e9cf0a6ed8bf2323ca9977debeb80c6d8dc5b37c65a74ef11e2b8fadc734ab82e65cd856d76d0276fdb1e507066eb397bc6c9660cc1991c77a9440343aa6eac0c07cd5cba077c6a50fbf47067c5d58e6e59b5a359e588d7ba7d7065c4c740cfc3c5c895bad480ff38aa9a0449e2ff5cfc27ec95997f3d706121eb3c2c0ebe8b541244609b891966d96858a7", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fd}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES64=r0, @ANYRES8, @ANYRES8=r0, @ANYRES8=r1], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES8], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x4000}, 0x18) 6.810018609s ago: executing program 5 (id=3673): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xcec0}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000010201080000000000000000050000080600074000020000080008400000000008000540000000030800084000000000188008000100ffffffcf2f43895774e32f700604ff08000200"], 0x54}, 0x1, 0x0, 0x0, 0x48001}, 0x840) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 6.751654352s ago: executing program 5 (id=3675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigpending(0x0, 0x0) (fail_nth: 2) 6.639421277s ago: executing program 5 (id=3676): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x2fd, 0xffff, 0x101, 0x300}}) r1 = socket(0x11, 0x800000003, 0x96) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) unshare(0x22020600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 6.637436477s ago: executing program 6 (id=3677): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000040000000100000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) r6 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e60, 0x40003, @private0}, {0x2, 0xfff9, 0xe0000002, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x81}, r5, 0x9dfffffd}}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6, 0xffffffff}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x8000000, 0x0, 0x200000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000, 0x804}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9, 0x2, 0x0, 0xd133}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x3}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80, 0x0, 0x0, 0x0, 0x400}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x4, 0x0, 0x0, 0x8510}, {0xffff}, {}, {0x0, 0x0, 0x0, 0x80000, 0x407}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, {0x0, 0x0, 0x4000000}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {0x0, 0xfb, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x3, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {0x0, 0x2}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xfffffffd, 0x4000}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x80e9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x71, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x7, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0xfffffffb, 0x7, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x5d9}, {0x0, 0x3}, {0x0, 0x3, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180"], 0x44}}, 0x20008000) 6.586649899s ago: executing program 35 (id=3676): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x2fd, 0xffff, 0x101, 0x300}}) r1 = socket(0x11, 0x800000003, 0x96) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) unshare(0x22020600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 5.835107861s ago: executing program 6 (id=3681): openat$vcsu(0xffffffffffffff9c, 0x0, 0x4080, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xa85, 0xf) 5.791410273s ago: executing program 6 (id=3683): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x0, 0x1a0, 0x98, 0x298, 0x1a0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x2, 0x3f}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@ip={@local, @local, 0x0, 0xff, 'veth0_to_batadv\x00', 'nicvf0\x00', {}, {}, 0x8}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "ec4a", 0x1}}, @common=@set={{0x40}, {{0x2, [0x0, 0x3, 0x2, 0x7, 0x6, 0x2], 0x5, 0x6}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0xff0}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7ff, 0x6, @ipv4=@empty, 0x4e21}}}, {{@ip={@remote, @local, 0x0, 0x0, 'syzkaller0\x00', 'wg0\x00', {}, {}, 0x89, 0x0, 0x35}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb3, 0x1}}}, {{@ip={@local, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x18}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "cc00", 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0xa5, 0x57}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) creat(0x0, 0x0) syz_io_uring_setup(0x298b, 0x0, &(0x7f0000000100), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r4, 0x0, 0x4000050) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r5) waitid(0x0, 0x0, 0x0, 0xe, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a85}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) 5.17705672s ago: executing program 6 (id=3690): socket$netlink(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xcec0}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000010201080000000000000000050000080600074000020000080008400000000008000540000000030800084000000000188008000100ffffffcf2f43895774e32f700604ff08000200"], 0x54}, 0x1, 0x0, 0x0, 0x48001}, 0x840) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xffff}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ffff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000400)={0x5, &(0x7f00000003c0)=[{0x1, 0x0, 0x7, 0xffff}, {0x3, 0xf7, 0xf7, 0x6}, {0x6, 0x9, 0xfb, 0xfffffffc}, {0x4, 0x7, 0x3, 0x401}, {0x6, 0x0, 0xea, 0x4f53}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r4, 0x0, 0x8}, 0x18) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 5.112821142s ago: executing program 6 (id=3692): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="070000000400050008210001001c7c314176193e70e4c2db6da01c11b38f7243989287f130c9720000000000000598be0d353cb9d843d5ae5a8345767f8809", @ANYRES16=0x0], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100039042cbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="0184552e4b71a64f0000128008000100060008000f00"/40], 0x40}}, 0x4040) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = open_tree(r5, &(0x7f0000000040)='\x00', 0x89901) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x33, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000001200001119d4e17e1f09465337a7d9442c810fb4bb7a119c16ada6412feb6407c48fbf52b5bc8b847564cd59822d953581841a4b664c835583be94fee4052581c75fdc675a6e622190187bddc46c61", @ANYRES32=r0, @ANYRES32=r4], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='fsi_master_acf_copro_command\x00', r7}, 0x18) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x5, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x513, &(0x7f0000000c00)="$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") 4.507649718s ago: executing program 6 (id=3701): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000020000eeb6030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0xf5285249573891d8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r5}, 0x18) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file1\x00', 0x0, 0x4000, r4}, 0x18) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r8, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x44}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x884}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x60}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYRES32=r7, @ANYRESDEC=r8], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0x7}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x20006, 0x8, 0xfffffffd, 0xd99d}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x44800}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x8100, r7, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 4.487324039s ago: executing program 36 (id=3701): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000020000eeb6030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0xf5285249573891d8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r5}, 0x18) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file1\x00', 0x0, 0x4000, r4}, 0x18) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r8, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x44}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x884}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x60}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYRES32=r7, @ANYRESDEC=r8], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0x7}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x20006, 0x8, 0xfffffffd, 0xd99d}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x44800}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x8100, r7, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 2.853285888s ago: executing program 2 (id=3728): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x254c, &(0x7f0000000000)={0x0, 0x7c87, 0x800, 0x0, 0x39}, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000900)={&(0x7f0000003000), 0x1, 0x3}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1) 2.852748779s ago: executing program 2 (id=3729): r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x8) r2 = dup(r1) sendfile(r2, r0, 0x0, 0x8000fffffffc) (fail_nth: 13) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) 2.340079071s ago: executing program 2 (id=3731): openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x109) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00', r2, 0x0, 0x80000001}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000780)=[{{&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003a00)=[{&(0x7f00000001c0)="184d3ea3efc15ab7cf3e12ed80bb5ce272df438a9b31bb03c1dc2a59a6d8ba40282a5a95256681c1956f7f835869d6", 0x2f}, {&(0x7f0000000540)="a3110ca65b9e23bd508ccd83581caaa9efe895d716f34c90848df7c35de334b3aec4ebf2634b0dbe5b8d8043d07a8eb7e69782377d82a6e62dc402e52e22fdfe2f35f8e4b88dca6e231f210dbadff20e1b2d7e604d06b4be", 0x58}, {&(0x7f0000000700)="c849726df74809c245ccd8e86629c007eea8067098e4e50cdd430ef328ff80a7c07f2f958c71b0f55a0dc263b3160ba21bee70b2b2931574c946465cf1d9ad1469ed47758bfc", 0x46}, {&(0x7f0000000a00)="1425ec5d8f1d449708000752f23fa6c238aff0a3c3a77cba09b088f7821a553b8a1a7441f7d067963eb62860b3155cf67cf621cfbc86d533b6a46db30ae5a9d7bf3d28f45104c49561bfe8c0701b2e2c4e652158c466e14019e11898efba9238f56739b6d11ef8bcdcd412c07a557d38cd482f90d7e72dd1e9fd6d35ad3bca2791c8515b5e60bdd44e82f5116578b3fd3727993c145b24380db255ca9db00cfb03e275cf5eb20c842914ca360da45229a258fcccc0d34e065c8691a1e04fafe4f84dab89c72929b65896423c4e5c71c08251b18528f6b406c5d281dcde97c455e634bffeb02d104266c3b21bb5c3ccdf421b577a9eb64399c7bcb0a5b75e346d90dede90cf43478ca19c10009dd345e15b8abd82ac217d01c25f7380434dab8551a7dbbf87dcc5e2b9749815b34fc02e3c0edb648e9bb35d58a557a4ef6a756b22dfc16b7c42bf94fa2af9f2740839ad69d955fb266b33504d8e88368be8d91c92110122a4976fe236165fede7ce56359e9ef4b4a64a249118d9a38cb8c6df954411ccb954b299f401014aabd89cfc25de61076348df1b1ab7c061399b01aa6e01f803c495bb34df7835dcb060c3168dbc9852f453b71ce2d5696d6d481a4baec7c5164c598d57a722072f818a7627c6d745de3017bfec86998c4af0003a4ed40b900f0c12a83a85805489687460cf41d78c1becc3b3133f6563c2e250ada8846c0c897a99bfc4fe78bacbccd335be8173449d00cf150b91fe0f93590a601911ba43f0e642b410260832f858654f2aef9345cfda402f9c45114e010ac6a8aacdf19fc2f16f30b7a2cd0a57ebba6433bbb17ed19a1991abacdb6fb5f59b56514dd35536e4186b033b5055e17a7532aa11cb83b5c5c921527893bf0de2083d0ae15013e0ec850de06247403a56a115bd5c8b66e1884029e54f996eb555918173bc62065559680d747ddaa080d255c92df9d32351c82b76fc4dc091cecb6af3fb0bf5f54f23134b73f8b7e82ae7c3c55319f6f756ee33875f40a4903ddcbc559db88f28a03c90d5943a088f9daf68b43786fca5cc246836e04737d61f2718805cd3244d5c7a9fcf373c532f9ad087a2d64add68d94a4de8c621840a5cab1b831ab7cf1fce6529f9cb6427414ce2b57b209c636bc819dcf7bad5f8890fd6f02aa511235243800751710208c46ab6cd9288ece8481a60a8b3c97e5f7eb00f49efd2c39a8f0fa0de601d4d49ec7052c9e038acd890d7e306966dc59bc4d524c821b7fcb9a7433ca18f030bec2cd5c032c86c46ef2c776e88396b39089fe52ac11780df3b4dd25dcbffbee0799260295ecb2fdd95b8027cc59c5dc20c62d60cbb2fe5c00ad545f65f9a593363207eb69ac02999a9e9aaf66e37dd8cd25a74e3aea25b972ac2b0aaa0cd7b6042ef3b1579b97a7c1a978ce81bacef4bfb6ac938b11322387eff6962e09c16597d13867fea2e0e186c7742af31bbb10da6c19de2ead2519e10f4b532d8a48fe828b48be6224349f1fcad4fe524158065f071314d1c034f2b2c7378dbc1167c3b2a82f18337c06c7d9d3f3f06341b90d666cba7ba637517f4f972c2b3206cb142392a4b8344087045083790dfb6eaf21c5ddc457ab2e2f2f3f0c8771a9716bc76f8931c3a74f3104b418981836b3dd41559ed369b69dc965ee6b11de79f3fdb3944608aa08ef5d2315d0ce7ebef77ac9a502e88fc80af180333cb9d1be7c8d8ad17eddc4c3e6641b143c09a0e17b113ecf2710287f3a4a179ac89d630044e9a25cd0cb116f86bfee6fd0b4bf0d4861c15cef745cd97ed75dc8270f0f5f59029c9eb7b3d1f02de0cf65bd0c894d8dce9d6eb4bdff172e539030ebb9a55fba5b369f5d0a960a83eec479566e3e9ba37e534786591483bbffbd91a9de9e0bab85089f58e219a0154894bd1f997e011a25eb31149a90903939391caf9b9ded66b57e406019b2e5d3ac0f55dd2bc109be68e364d95d567065ec03f65d69cb9d8814e195da9befaf5d37e555eb9e1531252ecb400076a0c651904349e850a89d5dd40dddac4a4042ef1c87ea70012c69a69be3ab8f46fd48f60b86cc16dadc54c0cc5f586c08151dcb95cf0940bafa3b1558e7371ed12a56ef662fb5887fc3b9e1bbcff18c732344f60eb91a524f85e696f88a2c5b337722d784a3a33cf6916f0926795a82f21a398c7ca0a9585ecb6915352362bc288f84ee89f17cba1c7282e310f4df76a0179b19c7fe3edb9b1098dd83286c369b4570303d51609451184b636982824b47b0a01b53b1670a686058caa044cf4bec7d2ad248d084b3a5b787c27fbdbc698c8933811acff080da8eb9a8778fea5a3e38501aed8d0ea120595b52bcfb6ead87cf7aa5050bdedb4bbc1cf58e73f8b8ef7dbfe44ffabc8d694a36a8e8d1636f18ba2ccd196a174dd8c3ea465b4a7a8817e087945e6c2f169b433334cabf7640377b4dc00a6c1a4514c63b03e2922d2cb3a3433ceac4cb90b2547b96ecb86078d2886987e41a484d90b6879733016ed4f629b11e5bed243c30b979d44a8cc024f54c667ffaaa8471bbb588d9d2cb7c4312ba253b1cbfdd632a0d47e69006a23080ec65f8f99e2d766b0ded9421e02bffaf1f51e53152c6dc3e9b65827fdff92747facc201ead3225436e50bd24b6720698113f87792be86619c7b95b674efc831ddcab1ba1ae9d913ce345566fee627a6893b787215bbbba362a3914df06ece4e048bc3edf66e37cdfcc0cc9b60481c7c21b7b7a6296a5ad794767920e1ddceac29f82f878fd0a560b7a645c8419f5fe0fb8f366063619b2ebc62aafb49baa843b0dc423a3b4395ad7a5019c182f88d3a6b7e129c400b97400b24e5fe5886cc90c53007b2240b069b5f3899a622cb8e729a8da09cb3e02a8f62e046b9510ada9253918dd96465d3568aa5005b7f61c17224e427206c6c15f4e107655292b3784683075cafa25f0885d552290cdd715736ad7dbcc18af26ad4a14ef9964237c9f12f41550ae5bb5066215225e0cac2b3c9e7ac250d3c1ea28b6b27787268f496420c19dbc281274472172dcfe7ec9fb2502a2cb250d1e68aa03bfd6664b4f65129203bd7f85502746cacf07bc3d4b4d782a6078f9904ffb44951b2f665c384fc9886226df3bc9a11e0dc21217d6cd59b957fd61dbc90db0a01d933ce40a40837287334a1e35f6b6e441a56ea23faee5e8bc9b18b1b0b25569b432f7be9786dd1093215ce63592ec05302da7dcc3de315c36bc474065dece29a3ec9c627bc59bd1914675f363e27bdb6ce0745fa60fa8c599acdd6749c55cf8789bdf1ac53e464382600e4cde110be625891458e75647eb37ab6d608fc5b6b2ecc8fc0f593e4ff7fbc45fbfe660fcc753c1bc22aad2f862c8d402713dc297f5bfdbe97ceaccc1207904facd0b583395de4f8c4a52a2d25c2e45fcaa6c0585ae4479697cf5210a8c11689bb4b33a84d3a7f153f856673f0421e3e8fed24c3c55e22041779c36629572f6809796c2654eb2e5c8542cce3ed7eab7f9900b142fcad5c72d7956d34077960309038a56aeed9352e9acd27ccaec063eca6b69e1a0fd0e8aba4db91c83d62178d9f818942f2535b0fcadb3195e9f3c1eabbf8cdb40555c97bfa5ea90b903ebc9b4b04d6024d9941839208c61c39b9a84bc7c297da567a1878028eb5083d3c36dc0811b8310349d7a37f74a5e01fcfb7389d25d97951c9863d909e1542f544e38269fa1402f7ca666635e3c02156990c5ce2afde909f2e5583d4133588c2dabd1a198b79af800901fd1a162f6d3f36ebb770183ccb781a654a4b5758a273a9ca400f6c06c8de2f3770a37440a946563ed34b463e9d7cef8979ac81bc30641f83744974a87429e7b048e5e13b76301004547645970fb1c012a7cfed366325fa9787411b28f5b514da2b5ac3351f8531a51280621e300b2ad79c924ec378f5cffb3be4fcb81287bcc0646e788f694be369a726a3813e8b440551758e602e2d70152edd7893de94e276eaf8673445a11015d957dcdfe10326cd0fc43710fd44aded492e262e061e70d0039bfd7d149407edc1f813360ecc4679538cf7e177ea51e5869bf6539acc53a3030acd812a0661085888c7e7f69d35942c8df23d7e3b6b006c9321d79c476d369b7e350dc1e25ca8948fb6e1483709c6f2a96efb94a66537d0845129fb2dd0acabd8c1bcd756ee60a1490bc872f7aabef76536583f28029c3ad2b1550a12b90a4ca35ab1435cf15fab88259e27d027a6481791ae4d7dc05fb0252bc8d16c96b9d74cf91b5c260a5a622d017482dafcaa71faacd3dde19cba615eb30a6c6b8a401621f9c1b3bb130d8a2809bf7e70aac0d8dd31dfb8c07a4c722193c9d529baa18b9341714dacd9efaf2e8fbb8f8bf1554e7f669c3bbf0140a511fd46ceba395567dcec03bfbea89a9300cc413dd7061b75de2dc5bb76ac958d42825629622756442fbe8ccb6aab3ca17e69ab59ef96ce9e62b4d91269c2fc545c5fc93590deb92735530e7737e4b6c72e2bfb2d1660e5392a333e4bfd1839b0a647e7e5920fad46674e4e1a645e9ed4f55eca7ac4b40d3c49ee03b11c3970c99b5e0ebf3d5d11f4db2658afd9355f7ee9b142f439683cde5fd8e2731d1a0c793601d51e30d124c05f46ffed846977cfc962f741ecd1e0042ea59c8e05f04b69ce34ca52b1126d4ee53b561a341f7005a79c51875bf403ec98dd2a25d23f8857ffd17de96521f3a5ba19a810c9c4cfc2b8b9a27b963b627079caa59748436031cb568570a3661caf11b586216c6514c107302d52f891d5e8b59f65f88fb9e37e8fb9dfc8f9986a89ed6d96119fe053bc30c3c0e16d6778cbd28fecba3c7fd9191911473f3b6680c70597fa7b227e9c53313c40cd5c5eed7e5e46515224252ee5ee5d31199de7638136a747d253ebd931c3dd56b32c0c62393d49c5396c49e43acb48f897ce68b8180acb190a122492f9908355abf5d18a9ee618a5941bd9a2f2a0c04d89616f03ba146d9ac5d0c5ae9b2f184a0d28f7c4ce2e5adba653bb39fc21f25d2511997cb9c6ea7cf27c6591947597a6c1fd7009d3853e7b7f1dd05a42b7fda664406540a7464a20861731ea107c9ef94e100b690a37696725d12975f4ee818a0f114f13af6a9426cca1a2a68e333fd8606d4ed7175ce59267bd27c77275129c98dc38a8f7e17752210c9c440c874f384f73ba7048bbcd26578beb53744ffa99e99c0ef20c0d44dd98932c2f08a9d4a1d33190b4002ea2d2b97d6324ae51780afb07b1c5ca6a62060ffbbeb82eb12f9a0820b85c41aefb63be7fe8781bb31906b8db825092f8ca142fe4a8eb62a376a1e72d9d061bcce3dd82cc0f79ef585ab8e58aaff9c0f2f58fdc78d2a1d01e9bee64e947a82dee52b997dd097554e216fddc1cd63d2b1d7d754004f1902e5aec6d21d91ed5c6a7ca9c982ced2f2df38357e31f0e65e5f9deee54b47c4f43f3f9f2dfcc7d44a08029be3ea023ab211152bd2a1f35ccc8513757eb8f49f93e56e6c277e1f154415507232cbcec0c75c2fd928a72db9dbd53b2ffc7872d2c6e0ec699f78de02541d50c9d256094f344de05389d7166602b6163ddef1b5bae0b2df2752f25ff7f6cd6b3db25dcf45dfb5e2e4545394d40c6b5b4c33f1f91242bdf7fca038ddd997b69d05a95c9df3d48e890f894a08a424aaf450c029fd2a4a8de74fb7320544e2321e48451afbec20474ebb6dd4eae650cb2c65f00006962ab2b99281443772d57064347b302a7b7902d4fb48b4c4cc8ded536250c83b63a393138ca29", 0x1000}, {&(0x7f00000005c0)="7b74e3b6e18ae92b5b7753833b899236", 0x10}, {&(0x7f0000000800)="d4afbdbfe6bfb0482f4cb5aaac4bfd9e72092e566fef044183544ed038580e1aee8e044fbfda3a5c5fe621e403fb232cdeaaa7c8451a30b40bd3105eaa1a2cd1fa9f924e81820c68bf8ffa7cae22fcce311c97e170e36cb52ada5dce876b8cf592b4574aa570e2d75349a9db709794c889ae1991509d8cb801867e38aee900fd7f7cc88282903a378eb39311659cab481c8166e604993e7b17a63b36d47bf2bcf167320eebc59820e06b4e11d2fe18d59c98eef247f4a2785e988213605c67fe", 0xc0}, {&(0x7f00000008c0)="dfc66cd915bee76e02ae93ae847fdc632417b42336952fc5094298ba0c534372bbd668c0c858d544a98e77da39f4a4f5fbd2ee5237f1a5ac3911084689139b8a754bcfd2193bb1d990ad03c36f43a1be37ae3e1a692db9fcae6a9f408c7bebdbd0278d8af2a56d9bf7fd26aac7b2cc977aa3a1f137397bbc5f0f217898", 0x7d}, {&(0x7f0000001a00)="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", 0x1000}, {&(0x7f0000002a00)="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", 0x1000}], 0x9, 0x0, 0x0, 0x84}}], 0x1, 0x4008000) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x8, 0x0, 0x1000}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000200)="531347c8476178cf77c2cd92d464", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r9}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r3], &(0x7f0000000280)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r10}, 0x18) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1.511866946s ago: executing program 4 (id=3738): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = inotify_init1(0x800) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x29) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x23}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) write$UHID_CREATE(r0, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0xffffff5a) 1.511495426s ago: executing program 7 (id=3739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r2) sendmmsg$unix(r1, &(0x7f0000000c40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xb}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 1.478126707s ago: executing program 7 (id=3740): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19b417bfa5108c41ab0000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x9}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) 1.450721878s ago: executing program 2 (id=3741): socket$unix(0x1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="796104000000000000007e0000001bfe0300", @ANYRES32=0x0, @ANYBLOB="0000990008000000640000005a9318aada040cdce12c3707ed6ba9d398f2c4d24439cd82f77c08f9cb6d70b57c5e8edeaedfc127a294e86203a57696184ab548ec6f999f3b416e63de47ee1943c639a7dcffef6b68ecfd8d4a1083ae140a64bfcf04b184bb99d1216ec4e612b33e8454f74f61bfb269e6fdbeded13742c3079aad337817b95f76c5fda7"], 0x1c}}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6(0xa, 0x3, 0xff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000006800090300002000000000000a000000000000020400048cb50a1a8ba2ebdd00d2b7d665908b9dc4954da9afa3df6970703bff10e671a3"], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000020000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000380)="390000fa461aa0fbe8ab13aa2151b94dbe9e8a722e34d7e484893ffa56020013fc0712", 0x23}], 0x1) r8 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x8842) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r9 = socket$kcm(0x2, 0x0, 0x0) sendmsg$inet(r9, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 1.372835931s ago: executing program 7 (id=3742): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e0001006970366772657461700000003800028014000700fe8000000000000000000001000000aa06000f00ff070000060003000100000006000e0011"], 0x6c}}, 0x44850) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000055c0)=ANY=[@ANYBLOB="180000000200000000002f9e9d99b8c60c060000", @ANYRES32=r0, @ANYBLOB="0600000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000073c99dbf91000000000000b7020000010000008500000084000000b7b03b41005b47ba91a77a5b72078800000000000000950000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000056c0)={r0, 0x0, &(0x7f0000005680)=@udp6=r3, 0x4}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) getsockopt$sock_buf(r7, 0x1, 0x1a, &(0x7f0000004100)=""/4101, &(0x7f0000000100)=0x1005) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x400, 0x2, 0x1, 0xfffffffd, 0xffffff00}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r9, 0x4b48, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) fdatasync(0xffffffffffffffff) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x8, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005440)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) setxattr$trusted_overlay_redirect(&(0x7f0000005500)='./file0\x00', &(0x7f0000005540), &(0x7f0000005580)='./file0\x00', 0x8, 0x1) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x40, r11, 0x801, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008000}, 0x24004000) clock_gettime(0x0, &(0x7f00000053c0)={0x0, 0x0}) recvmmsg(r10, &(0x7f0000005340)=[{{&(0x7f0000000400)=@alg, 0x80, &(0x7f0000002d40)=[{&(0x7f0000000500)=""/209, 0xd1}, {&(0x7f0000000600)=""/249, 0xf9}, {&(0x7f00000007c0)=""/239, 0xef}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/208, 0xd0}, {&(0x7f00000019c0)=""/226, 0xe2}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/183, 0xb7}, {&(0x7f0000002b80)=""/133, 0x85}, {&(0x7f0000002c40)=""/234, 0xea}], 0xa, &(0x7f0000000700)=""/70, 0x46}, 0xffffff0c}, {{&(0x7f0000002e00)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000004280)=[{&(0x7f0000002e80)=""/135, 0x87}, {&(0x7f0000002f40)=""/234, 0xea}, {&(0x7f0000003040)=""/65, 0x41}, {&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f00000030c0)=""/118, 0x76}, {&(0x7f0000003140)=""/84, 0x54}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f00000031c0)=""/149, 0x95}, {&(0x7f0000000480)=""/7, 0x7}, {&(0x7f0000003280)=""/4096, 0x1000}], 0xa, &(0x7f0000004340)=""/4096, 0x1000}, 0x2abc0000}], 0x2, 0x12020, &(0x7f0000005400)={r12, r13+10000000}) 1.257189197s ago: executing program 7 (id=3743): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x10014, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7f, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1000, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) unshare(0x20060400) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280080, 0x0) getdents64(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r4, 0x0, 0x4804}, 0x18) io_setup(0x1, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r5, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x11010000}], 0x1, 0x40008c0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3c8, 0x2a8, 0x2a8, 0x3c8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x330, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x330, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1, 0x2}, {0x0, 0x1, 0x3}, {0xffffffffffffffff, 0x6, 0x3}, 0x5, 0x401}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x44}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x20000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4c0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33) unshare(0x80) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000100)=0x1) 1.256771357s ago: executing program 4 (id=3744): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x53) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x50}}, 0x0) 1.256420897s ago: executing program 4 (id=3745): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5871, 0x2, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x5, 0x0, 0x1, 0xe, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}, {0x0}], 0x2}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="59c4b5da1b6d160500009c6900005072847a92bf33d250a0482af8e53001050000000000005159d9d267b6a3046fdcc1bd0d933d6abe2c12fa3a3441084708aba8d0fb08600671f163f91bc2db11167b49ee963abac0a993dec02f176f9c76a8add849085f3946d81c508bbd4fa5a0eae01c15adc6264200"/132, @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b0, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) r13 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x2010, r1, 0x10000000) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r13, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x21, 0x0, r5, &(0x7f0000000400), &(0x7f0000000040)='./file0\x00', 0x10, 0x6000, 0x1, {0x0, r14}}) 1.17553088s ago: executing program 2 (id=3746): socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x800, @loopback, 0x1, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)="f4040900062b2c25fe80040000000000dc8b8543aa00fcb11e2851f4b6d285eb7672caa6fc903b1433548466", 0x2c}], 0x1}, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(0xffffffffffffffff, 0x0, r7, 0x0, 0x155) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, r7, 0x5, 0x4}, 0x50) ioctl$SNAPSHOT_UNFREEZE(r7, 0x3302) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) removexattr(&(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000400)=@known='user.incfs.size\x00') setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 1.128383943s ago: executing program 7 (id=3747): syz_io_uring_setup(0x4175, &(0x7f0000000240)={0x0, 0xbf56, 0x10000, 0x2, 0x2d0}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000600)=""/207) 1.017725297s ago: executing program 4 (id=3748): syz_io_uring_setup(0x4175, &(0x7f0000000240)={0x0, 0xbf56, 0x10000, 0x2, 0x2d0}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000600)=""/207) 831.681705ms ago: executing program 8 (id=3678): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (fail_nth: 9) 804.733096ms ago: executing program 2 (id=3749): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) 703.19787ms ago: executing program 8 (id=3750): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x6306, &(0x7f0000000600)={0x0, 0xe4b4, 0x80, 0x2, 0x245}, &(0x7f00000002c0), &(0x7f0000000340)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b274, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='console\x00', r5}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r7}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0xf792, 0x200, 0x9, 0x201, 0x0, r4}, &(0x7f00000001c0), &(0x7f0000000440)) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r8, 0x20) poll(&(0x7f0000000400)=[{r8, 0x904f}, {r8, 0xf264}], 0x2, 0x11ff) shutdown(r8, 0x0) 506.581158ms ago: executing program 8 (id=3751): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0xfffffffb}, 0x48) (async) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00f\x00'], 0xfe33) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xb}, 0x18) (async, rerun: 64) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 64) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)) (async) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 432.568962ms ago: executing program 8 (id=3752): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000005c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a00000000000000000000000000000000000000000000010b0000000000000a02000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000f8ff00000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) (fail_nth: 6) 234.416721ms ago: executing program 4 (id=3753): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x53) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x50}}, 0x0) 171.416503ms ago: executing program 7 (id=3754): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) munlock(&(0x7f0000efa000/0x2000)=nil, 0x2000) r5 = gettid() r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="154601efff000000540012800c0001006d6163766c616e004400028006000200010000000800010001"], 0x84}}, 0x20008040) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32=r5, @ANYRESOCT=r2, @ANYRESHEX=r7, @ANYBLOB="fa9bd440dbb0f6ba9b8423df2187b2c6f57689cff00f06d9cd206aa25a8e6d44ccfbb58b7aecff071ef4a62353332004c92ae7b011c8a5e2d9cd82b105b10ddd88f757152adfd2c0ff44362aaf54163a1bc4b6aa3d619f8b2bdcf55955a5c1a6c21655138f870bd997e95ae6f1ee57ea33ffacddacc9f78c04fefa199032d3d65a19dd801bd7256adac976b8caa5d34d80d6588bea23f41327816ccdc0c38573ec816f246cdd8c9a03e500485b646fbee103848fd0f1e0a8ecb320f67dfeb2e04d9de73f362ed9b6956998a4b18d1c7c022773cfa6f74ba05dd4efa09c59"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000800), &(0x7f0000000840)=r9}, 0x20) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r2, &(0x7f00000002c0)={r2, r2, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r10}, 0x18) r11 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) 152.761284ms ago: executing program 4 (id=3755): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) 71.894477ms ago: executing program 8 (id=3756): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x2105024, &(0x7f0000000540), 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) getdents(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 8 (id=3757): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) kernel console output (not intermixed with test programs): pid=12937 comm=syz.0.3411 [ 158.867109][T12791] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.887978][T12944] tipc: Enabled bearer , priority 0 [ 158.895723][T12944] tipc: Disabling bearer [ 158.921463][T12791] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.942107][T12950] loop2: detected capacity change from 0 to 8192 [ 158.991389][T12954] __nla_validate_parse: 17 callbacks suppressed [ 158.991402][T12954] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3417'. [ 159.007641][T12954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=12954 comm=syz.0.3417 [ 159.041826][ T3877] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.071548][ T3877] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.089373][ T3877] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.106064][ T3877] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.126879][T12971] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12971 comm=syz.1.3424 [ 159.151962][T12973] loop4: detected capacity change from 0 to 512 [ 159.166183][T12973] EXT4-fs: Ignoring removed nobh option [ 159.179662][T12961] FAULT_INJECTION: forcing a failure. [ 159.179662][T12961] name failslab, interval 1, probability 0, space 0, times 0 [ 159.179864][T12976] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3425'. [ 159.192309][T12961] CPU: 0 UID: 0 PID: 12961 Comm: syz.0.3420 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 159.192340][T12961] Tainted: [W]=WARN [ 159.192346][T12961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 159.192358][T12961] Call Trace: [ 159.192363][T12961] [ 159.192371][T12961] __dump_stack+0x1d/0x30 [ 159.192449][T12961] dump_stack_lvl+0xe8/0x140 [ 159.192468][T12961] dump_stack+0x15/0x1b [ 159.192482][T12961] should_fail_ex+0x265/0x280 [ 159.192500][T12961] should_failslab+0x8c/0xb0 [ 159.192527][T12961] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 159.192603][T12961] ? __d_alloc+0x3d/0x340 [ 159.192672][T12961] __d_alloc+0x3d/0x340 [ 159.192698][T12961] ? from_vfsgid+0x70/0xa0 [ 159.192724][T12961] d_alloc_pseudo+0x1e/0x80 [ 159.192766][T12961] alloc_file_pseudo+0x71/0x160 [ 159.192808][T12961] hugetlb_file_setup+0x2a6/0x3d0 [ 159.192834][T12961] ksys_mmap_pgoff+0x157/0x310 [ 159.192853][T12961] x64_sys_call+0x14a3/0x3000 [ 159.192873][T12961] do_syscall_64+0xd2/0x200 [ 159.192993][T12961] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 159.193017][T12961] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 159.193124][T12961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.193143][T12961] RIP: 0033:0x7f3328aff749 [ 159.193159][T12961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.193175][T12961] RSP: 002b:00007f3327567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 159.193230][T12961] RAX: ffffffffffffffda RBX: 00007f3328d55fa0 RCX: 00007f3328aff749 [ 159.193242][T12961] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000200000000000 [ 159.193254][T12961] RBP: 00007f3327567090 R08: ffffffffffffffff R09: 0000000000000000 [ 159.193266][T12961] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 159.193278][T12961] R13: 00007f3328d56038 R14: 00007f3328d55fa0 R15: 00007ffd08d18308 [ 159.193296][T12961] [ 159.398803][T12973] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.3423: corrupted inode contents [ 159.411421][T12973] EXT4-fs (loop4): Remounting filesystem read-only [ 159.418695][T12973] EXT4-fs (loop4): 1 truncate cleaned up [ 159.424781][T12973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.439895][T12973] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.456815][T12985] loop2: detected capacity change from 0 to 1024 [ 159.482521][T12985] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 159.507120][T12985] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 159.518217][T12985] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 159.528774][T11261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.548977][T12989] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3429'. [ 159.567541][T12985] JBD2: no valid journal superblock found [ 159.573313][T12985] EXT4-fs (loop2): Could not load journal inode [ 159.579814][T12989] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3429'. [ 159.621562][T12989] ALSA: seq fatal error: cannot create timer (-19) [ 159.621580][T12997] FAULT_INJECTION: forcing a failure. [ 159.621580][T12997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.641406][T12997] CPU: 0 UID: 0 PID: 12997 Comm: syz.2.3432 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 159.641435][T12997] Tainted: [W]=WARN [ 159.641440][T12997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 159.641451][T12997] Call Trace: [ 159.641457][T12997] [ 159.641465][T12997] __dump_stack+0x1d/0x30 [ 159.641487][T12997] dump_stack_lvl+0xe8/0x140 [ 159.641513][T12997] dump_stack+0x15/0x1b [ 159.641528][T12997] should_fail_ex+0x265/0x280 [ 159.641544][T12997] should_fail+0xb/0x20 [ 159.641557][T12997] should_fail_usercopy+0x1a/0x20 [ 159.641613][T12997] _copy_to_user+0x20/0xa0 [ 159.641638][T12997] simple_read_from_buffer+0xb5/0x130 [ 159.641664][T12997] proc_fail_nth_read+0x10e/0x150 [ 159.641709][T12997] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.641831][T12997] vfs_read+0x1a8/0x770 [ 159.641851][T12997] ? __rcu_read_unlock+0x4f/0x70 [ 159.641871][T12997] ? __fget_files+0x184/0x1c0 [ 159.641893][T12997] ksys_read+0xda/0x1a0 [ 159.641945][T12997] __x64_sys_read+0x40/0x50 [ 159.642043][T12997] x64_sys_call+0x27c0/0x3000 [ 159.642124][T12997] do_syscall_64+0xd2/0x200 [ 159.642143][T12997] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 159.642244][T12997] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 159.642275][T12997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.642296][T12997] RIP: 0033:0x7f7ac1d8e15c [ 159.642316][T12997] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 159.642334][T12997] RSP: 002b:00007f7ac07ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.642353][T12997] RAX: ffffffffffffffda RBX: 00007f7ac1fe5fa0 RCX: 00007f7ac1d8e15c [ 159.642364][T12997] RDX: 000000000000000f RSI: 00007f7ac07ef0a0 RDI: 0000000000000006 [ 159.642374][T12997] RBP: 00007f7ac07ef090 R08: 0000000000000000 R09: 0000000000000000 [ 159.642435][T12997] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 159.642448][T12997] R13: 00007f7ac1fe6038 R14: 00007f7ac1fe5fa0 R15: 00007ffc69362b18 [ 159.642463][T12997] [ 159.879966][T13003] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13003 comm=syz.2.3435 [ 159.915057][T13002] loop5: detected capacity change from 0 to 764 [ 159.925910][T13002] rock: directory entry would overflow storage [ 159.932134][T13002] rock: sig=0x4654, size=5, remaining=4 [ 159.945025][T13010] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13010 comm=syz.4.3437 [ 159.959085][T13010] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13010 comm=syz.4.3437 [ 160.014331][T13014] loop2: detected capacity change from 0 to 128 [ 160.120939][T13020] loop4: detected capacity change from 0 to 8192 [ 160.315067][T13045] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13045 comm=syz.4.3452 [ 160.357340][T13045] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13045 comm=syz.4.3452 [ 160.417876][T13052] tipc: Enabling of bearer rejected, already enabled [ 160.490334][T13054] pim6reg: entered allmulticast mode [ 160.561102][T13057] FAULT_INJECTION: forcing a failure. [ 160.561102][T13057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.566678][T13059] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3458'. [ 160.574251][T13057] CPU: 1 UID: 0 PID: 13057 Comm: syz.2.3457 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 160.574355][T13057] Tainted: [W]=WARN [ 160.574361][T13057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 160.574378][T13057] Call Trace: [ 160.574384][T13057] [ 160.574391][T13057] __dump_stack+0x1d/0x30 [ 160.574412][T13057] dump_stack_lvl+0xe8/0x140 [ 160.574431][T13057] dump_stack+0x15/0x1b [ 160.574447][T13057] should_fail_ex+0x265/0x280 [ 160.574465][T13057] should_fail+0xb/0x20 [ 160.574501][T13057] should_fail_usercopy+0x1a/0x20 [ 160.574521][T13057] copy_fpstate_to_sigframe+0x628/0x7d0 [ 160.574550][T13057] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 160.574622][T13057] ? x86_task_fpu+0x36/0x60 [ 160.574647][T13057] get_sigframe+0x34d/0x490 [ 160.574664][T13057] ? get_signal+0xdc7/0xf70 [ 160.574702][T13057] x64_setup_rt_frame+0xa8/0x580 [ 160.574723][T13057] arch_do_signal_or_restart+0x23e/0x440 [ 160.574761][T13057] exit_to_user_mode_loop+0x77/0x110 [ 160.574846][T13057] do_syscall_64+0x1d6/0x200 [ 160.574865][T13057] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 160.574947][T13057] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 160.574975][T13057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.575041][T13057] RIP: 0033:0x7f7ac1d8f747 [ 160.575056][T13057] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 160.575108][T13057] RSP: 002b:00007f7ac07ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.575126][T13057] RAX: 0000000000000000 RBX: 00007f7ac1fe5fa0 RCX: 00007f7ac1d8f749 [ 160.575138][T13057] RDX: 0000000000001004 RSI: 00002000000013c0 RDI: 0000000000000004 [ 160.575150][T13057] RBP: 00007f7ac07ef090 R08: 0000000000000000 R09: 0000000000000000 [ 160.575161][T13057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.575173][T13057] R13: 00007f7ac1fe6038 R14: 00007f7ac1fe5fa0 R15: 00007ffc69362b18 [ 160.575190][T13057] [ 160.652625][T13064] loop4: detected capacity change from 0 to 128 [ 160.658492][T13059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=13059 comm=syz.1.3458 [ 160.886968][T13074] loop2: detected capacity change from 0 to 764 [ 160.899165][T13076] loop5: detected capacity change from 0 to 1024 [ 160.899343][T13072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3462'. [ 160.915944][T13076] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 160.938894][T13076] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 160.945759][T13082] loop4: detected capacity change from 0 to 1024 [ 160.949791][T13076] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 160.958618][T13083] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3462'. [ 160.974854][T13074] rock: directory entry would overflow storage [ 160.976601][T13082] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 160.981092][T13074] rock: sig=0x4654, size=5, remaining=4 [ 160.995799][T13082] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 161.010740][T13076] JBD2: no valid journal superblock found [ 161.014619][T13072] program syz.1.3462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.016568][T13076] EXT4-fs (loop5): Could not load journal inode [ 161.026500][T13082] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 161.041575][T13082] EXT4-fs (loop4): orphan cleanup on readonly fs [ 161.048228][T13082] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.3468: Inode bitmap for bg 0 marked uninitialized [ 161.061854][T13082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.079835][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 161.079850][ T29] audit: type=1400 audit(1764495448.070:20842): avc: denied { remount } for pid=13081 comm="syz.4.3468" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 161.095160][T13090] loop2: detected capacity change from 0 to 1024 [ 161.112254][T13082] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 161.128711][T13090] EXT4-fs: Ignoring removed bh option [ 161.134172][T13090] EXT4-fs: Ignoring removed i_version option [ 161.141846][ T29] audit: type=1326 audit(1764495448.100:20843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13086 comm="syz.0.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3328aff749 code=0x7ffc0000 [ 161.165461][ T29] audit: type=1326 audit(1764495448.100:20844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13086 comm="syz.0.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3328aff749 code=0x7ffc0000 [ 161.189084][ T29] audit: type=1326 audit(1764495448.100:20845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13086 comm="syz.0.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3328aff749 code=0x7ffc0000 [ 161.212646][ T29] audit: type=1326 audit(1764495448.100:20846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13086 comm="syz.0.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3328aff749 code=0x7ffc0000 [ 161.236252][ T29] audit: type=1326 audit(1764495448.100:20847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13086 comm="syz.0.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3328aff749 code=0x7ffc0000 [ 161.259888][ T29] audit: type=1326 audit(1764495448.100:20848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13086 comm="syz.0.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3328aff749 code=0x7ffc0000 [ 161.283452][ T29] audit: type=1326 audit(1764495448.100:20849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13086 comm="syz.0.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3328aff749 code=0x7ffc0000 [ 161.306999][ T29] audit: type=1326 audit(1764495448.100:20850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13086 comm="syz.0.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3328aff749 code=0x7ffc0000 [ 161.330736][ T29] audit: type=1326 audit(1764495448.100:20851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13086 comm="syz.0.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3328aff749 code=0x7ffc0000 [ 161.354446][T13090] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 161.355566][T11261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.380910][T13093] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3472'. [ 161.412145][T13094] loop5: detected capacity change from 0 to 8192 [ 161.489158][ T3876] Bluetooth: hci0: Frame reassembly failed (-84) [ 161.571377][T13120] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 161.592721][T13130] loop4: detected capacity change from 0 to 512 [ 161.617247][T13130] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 161.630033][T13130] EXT4-fs (loop4): 1 truncate cleaned up [ 161.640337][T13130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.653585][T13132] loop2: detected capacity change from 0 to 764 [ 161.663645][T13132] rock: directory entry would overflow storage [ 161.669824][T13132] rock: sig=0x4654, size=5, remaining=4 [ 161.704759][T13139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3489'. [ 161.719165][T11261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.778736][T13147] netlink: 'syz.0.3493': attribute type 4 has an invalid length. [ 161.786817][T13147] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3493'. [ 161.797536][ T3876] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.801408][T13157] loop4: detected capacity change from 0 to 512 [ 161.810296][ T3876] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.817304][T13156] IPv6: Can't replace route, no match found [ 161.821345][ T3876] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.839799][T13157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.852861][T13157] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.863549][T13156] loop2: detected capacity change from 0 to 128 [ 161.881364][T13147] .`: renamed from bond0 (while UP) [ 161.902981][ T3876] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.929600][T11261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.945400][T13162] loop2: detected capacity change from 0 to 764 [ 161.953008][T13162] rock: directory entry would overflow storage [ 161.959235][T13162] rock: sig=0x4654, size=5, remaining=4 [ 162.029747][T13177] vhci_hcd: default hub control req: 0700 v0000 i0007 l0 [ 162.141386][T13189] loop2: detected capacity change from 0 to 512 [ 162.147824][T13189] EXT4-fs: Ignoring removed i_version option [ 162.153865][T13189] EXT4-fs: Ignoring removed bh option [ 162.170098][T13189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.183048][T13189] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.195392][T13189] FAULT_INJECTION: forcing a failure. [ 162.195392][T13189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.208496][T13189] CPU: 1 UID: 0 PID: 13189 Comm: syz.2.3510 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 162.208515][T13189] Tainted: [W]=WARN [ 162.208519][T13189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 162.208525][T13189] Call Trace: [ 162.208531][T13189] [ 162.208536][T13189] __dump_stack+0x1d/0x30 [ 162.208570][T13189] dump_stack_lvl+0xe8/0x140 [ 162.208581][T13189] dump_stack+0x15/0x1b [ 162.208640][T13189] should_fail_ex+0x265/0x280 [ 162.208667][T13189] should_fail+0xb/0x20 [ 162.208678][T13189] should_fail_usercopy+0x1a/0x20 [ 162.208689][T13189] strncpy_from_user+0x25/0x230 [ 162.208704][T13189] ? kmem_cache_alloc_noprof+0x242/0x480 [ 162.208783][T13189] ? getname_flags+0x80/0x3b0 [ 162.208800][T13189] getname_flags+0xae/0x3b0 [ 162.208860][T13189] do_sys_openat2+0x60/0x110 [ 162.208872][T13189] __x64_sys_openat+0xf2/0x120 [ 162.208930][T13189] x64_sys_call+0x2eab/0x3000 [ 162.208942][T13189] do_syscall_64+0xd2/0x200 [ 162.208954][T13189] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 162.209009][T13189] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 162.209026][T13189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.209038][T13189] RIP: 0033:0x7f7ac1d8f749 [ 162.209047][T13189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.209113][T13189] RSP: 002b:00007f7ac07ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 162.209130][T13189] RAX: ffffffffffffffda RBX: 00007f7ac1fe5fa0 RCX: 00007f7ac1d8f749 [ 162.209137][T13189] RDX: 0000000000181242 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 162.209148][T13189] RBP: 00007f7ac07ef090 R08: 0000000000000000 R09: 0000000000000000 [ 162.209205][T13189] R10: 0000000000000148 R11: 0000000000000246 R12: 0000000000000001 [ 162.209212][T13189] R13: 00007f7ac1fe6038 R14: 00007f7ac1fe5fa0 R15: 00007ffc69362b18 [ 162.209222][T13189] [ 162.218080][T11850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.436993][T13195] loop2: detected capacity change from 0 to 764 [ 162.444061][T13195] rock: directory entry would overflow storage [ 162.450213][T13195] rock: sig=0x4654, size=5, remaining=4 [ 162.512431][T13199] loop2: detected capacity change from 0 to 512 [ 162.518956][T13199] EXT4-fs: Ignoring removed i_version option [ 162.524975][T13199] EXT4-fs: Ignoring removed bh option [ 162.540347][T13199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.553429][T13199] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.580162][T11850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.709260][T13218] tipc: Enabled bearer , priority 0 [ 162.717389][T13218] tipc: Disabling bearer [ 162.785392][T13220] loop2: detected capacity change from 0 to 764 [ 162.804166][T13220] rock: directory entry would overflow storage [ 162.810414][T13220] rock: sig=0x4654, size=5, remaining=4 [ 162.847611][T13226] loop2: detected capacity change from 0 to 256 [ 162.896445][T13228] FAULT_INJECTION: forcing a failure. [ 162.896445][T13228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.909690][T13228] CPU: 0 UID: 0 PID: 13228 Comm: syz.4.3528 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 162.909796][T13228] Tainted: [W]=WARN [ 162.909803][T13228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 162.909814][T13228] Call Trace: [ 162.909820][T13228] [ 162.909827][T13228] __dump_stack+0x1d/0x30 [ 162.909857][T13228] dump_stack_lvl+0xe8/0x140 [ 162.909874][T13228] dump_stack+0x15/0x1b [ 162.909948][T13228] should_fail_ex+0x265/0x280 [ 162.909965][T13228] should_fail+0xb/0x20 [ 162.909981][T13228] should_fail_usercopy+0x1a/0x20 [ 162.910002][T13228] strncpy_from_user+0x25/0x230 [ 162.910026][T13228] ? kmem_cache_alloc_noprof+0x242/0x480 [ 162.910061][T13228] ? getname_flags+0x80/0x3b0 [ 162.910086][T13228] getname_flags+0xae/0x3b0 [ 162.910136][T13228] getname_uflags+0x21/0x30 [ 162.910162][T13228] __x64_sys_execveat+0x5d/0x90 [ 162.910185][T13228] x64_sys_call+0x1fec/0x3000 [ 162.910289][T13228] do_syscall_64+0xd2/0x200 [ 162.910309][T13228] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 162.910382][T13228] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 162.910438][T13228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.910455][T13228] RIP: 0033:0x7f26c267f749 [ 162.910469][T13228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.910484][T13228] RSP: 002b:00007f26c10e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 162.910545][T13228] RAX: ffffffffffffffda RBX: 00007f26c28d5fa0 RCX: 00007f26c267f749 [ 162.910558][T13228] RDX: 0000200000000100 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 162.910570][T13228] RBP: 00007f26c10e7090 R08: 0000000000000000 R09: 0000000000000000 [ 162.910582][T13228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.910592][T13228] R13: 00007f26c28d6038 R14: 00007f26c28d5fa0 R15: 00007ffc21933248 [ 162.910608][T13228] [ 162.913920][T13226] program syz.2.3526 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.039918][T13240] loop4: detected capacity change from 0 to 512 [ 163.121551][T13240] EXT4-fs: Ignoring removed nobh option [ 163.144567][T13240] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.3531: corrupted inode contents [ 163.179747][T13240] EXT4-fs (loop4): Remounting filesystem read-only [ 163.222258][T13240] EXT4-fs (loop4): 1 truncate cleaned up [ 163.233680][T13240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.246368][T13240] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.307509][T13250] loop2: detected capacity change from 0 to 512 [ 163.319822][T13250] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 163.327923][T13250] EXT4-fs (loop2): orphan cleanup on readonly fs [ 163.335500][T13250] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.3534: corrupted inode contents [ 163.347605][T13250] EXT4-fs (loop2): Remounting filesystem read-only [ 163.358419][T13250] EXT4-fs (loop2): 1 truncate cleaned up [ 163.364526][ T3867] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 163.375106][ T3867] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 163.386072][ T3867] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 163.386286][T11261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.396975][T13250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.433751][T13255] loop4: detected capacity change from 0 to 764 [ 163.440465][T11850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.450128][T13255] rock: directory entry would overflow storage [ 163.456275][T13255] rock: sig=0x4654, size=5, remaining=4 [ 163.482671][T13259] loop2: detected capacity change from 0 to 512 [ 163.501444][T13259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.517849][T13259] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.529400][ T3879] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.548432][ T3495] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.584363][ T3879] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.585566][T13270] SELinux: Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped). [ 163.630053][T11850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.645151][ T3879] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.694194][T13287] loop2: detected capacity change from 0 to 764 [ 163.703754][T13271] lo speed is unknown, defaulting to 1000 [ 163.709911][T13287] rock: directory entry would overflow storage [ 163.716068][T13287] rock: sig=0x4654, size=5, remaining=4 [ 163.725944][ T3879] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.746550][T13286] loop4: detected capacity change from 0 to 8192 [ 163.791271][T13293] netlink: 'syz.2.3551': attribute type 13 has an invalid length. [ 163.801502][T13271] chnl_net:caif_netlink_parms(): no params data found [ 163.853188][T13293] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.860395][T13293] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.868376][T12062] Bluetooth: hci1: command 0x1003 tx timeout [ 163.868611][T11623] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 163.881086][T13154] FAULT_INJECTION: forcing a failure. [ 163.881086][T13154] name failslab, interval 1, probability 0, space 0, times 0 [ 163.893759][T13154] CPU: 0 UID: 0 PID: 13154 Comm: syz.1.3496 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 163.893805][T13154] Tainted: [W]=WARN [ 163.893811][T13154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 163.893823][T13154] Call Trace: [ 163.893828][T13154] [ 163.893834][T13154] __dump_stack+0x1d/0x30 [ 163.893853][T13154] dump_stack_lvl+0xe8/0x140 [ 163.893923][T13154] dump_stack+0x15/0x1b [ 163.893936][T13154] should_fail_ex+0x265/0x280 [ 163.893953][T13154] ? kobject_uevent_env+0x1c0/0x570 [ 163.893981][T13154] should_failslab+0x8c/0xb0 [ 163.894081][T13154] __kmalloc_cache_noprof+0x4c/0x4a0 [ 163.894106][T13154] kobject_uevent_env+0x1c0/0x570 [ 163.894128][T13154] ? device_pm_check_callbacks+0x683/0x6a0 [ 163.894154][T13154] kobject_uevent+0x1d/0x30 [ 163.894203][T13154] device_del+0x710/0x790 [ 163.894225][T13154] hci_unregister_dev+0x292/0x2b0 [ 163.894245][T13154] hci_uart_tty_close+0x115/0x170 [ 163.894314][T13154] ? __pfx_hci_uart_tty_close+0x10/0x10 [ 163.894341][T13154] tty_ldisc_kill+0x8d/0x140 [ 163.894363][T13154] tty_ldisc_hangup+0x2fa/0x370 [ 163.894402][T13154] __tty_hangup+0x3c2/0x540 [ 163.894418][T13154] tty_ioctl+0x601/0xb80 [ 163.894462][T13154] ? __pfx_tty_ioctl+0x10/0x10 [ 163.894484][T13154] __se_sys_ioctl+0xce/0x140 [ 163.894510][T13154] __x64_sys_ioctl+0x43/0x50 [ 163.894529][T13154] x64_sys_call+0x1816/0x3000 [ 163.894629][T13154] do_syscall_64+0xd2/0x200 [ 163.894646][T13154] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 163.894734][T13154] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 163.894812][T13154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.894886][T13154] RIP: 0033:0x7f94a2f3f749 [ 163.894901][T13154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.894916][T13154] RSP: 002b:00007f94a199f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.894947][T13154] RAX: ffffffffffffffda RBX: 00007f94a3195fa0 RCX: 00007f94a2f3f749 [ 163.894957][T13154] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000005 [ 163.894968][T13154] RBP: 00007f94a199f090 R08: 0000000000000000 R09: 0000000000000000 [ 163.894978][T13154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.895041][T13154] R13: 00007f94a3196038 R14: 00007f94a3195fa0 R15: 00007ffe5a945148 [ 163.895059][T13154] [ 164.156159][T13293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.166457][T13293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.253446][ T3876] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.262429][ T3876] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.271464][ T3879] bridge_slave_1: left allmulticast mode [ 164.277120][ T3879] bridge_slave_1: left promiscuous mode [ 164.282863][ T3879] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.291812][ T3879] bridge_slave_0: left allmulticast mode [ 164.297506][ T3879] bridge_slave_0: left promiscuous mode [ 164.297612][T13310] loop4: detected capacity change from 0 to 764 [ 164.303254][ T3879] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.316538][T13310] rock: directory entry would overflow storage [ 164.322757][T13310] rock: sig=0x4654, size=5, remaining=4 [ 164.401422][ T3879] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.412019][ T3879] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.421308][ T3879] .` (unregistering): Released all slaves [ 164.435657][ T3876] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.444643][ T3876] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.453922][ T3876] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.462831][ T3876] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.471926][ T3876] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.480927][ T3876] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.522860][ T3879] tipc: Left network mode [ 164.533582][T13271] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.540863][T13271] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.582096][T13271] bridge_slave_0: entered allmulticast mode [ 164.593883][T13271] bridge_slave_0: entered promiscuous mode [ 164.608199][T13326] __nla_validate_parse: 10 callbacks suppressed [ 164.608211][T13326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3564'. [ 164.609464][T13271] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.630517][T13271] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.658659][T13271] bridge_slave_1: entered allmulticast mode [ 164.665114][T13271] bridge_slave_1: entered promiscuous mode [ 164.680128][ T3879] hsr_slave_0: left promiscuous mode [ 164.685824][ T3879] hsr_slave_1: left promiscuous mode [ 164.698848][ T3879] veth1_macvtap: left promiscuous mode [ 164.704357][ T3879] veth0_macvtap: left promiscuous mode [ 164.710463][ T3879] veth1_vlan: left promiscuous mode [ 164.715962][ T3879] veth0_vlan: left promiscuous mode [ 164.723463][T13343] netlink: 'syz.1.3570': attribute type 13 has an invalid length. [ 164.738642][T13341] loop2: detected capacity change from 0 to 764 [ 164.753565][T13341] rock: directory entry would overflow storage [ 164.759773][T13341] rock: sig=0x4654, size=5, remaining=4 [ 164.765643][T13346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3564'. [ 164.824253][ T3879] team0 (unregistering): Port device team_slave_1 removed [ 164.835755][ T3879] team0 (unregistering): Port device team_slave_0 removed [ 164.970553][T13343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.980762][T13343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.046677][T13271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.056796][ T3875] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.071323][T13271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.080493][ T3875] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.099096][ T3875] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.128183][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3580'. [ 165.137898][ T3875] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.146954][T13271] team0: Port device team_slave_0 added [ 165.164957][T13271] team0: Port device team_slave_1 added [ 165.179526][T13371] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3580'. [ 165.191826][T13372] loop5: detected capacity change from 0 to 764 [ 165.208640][T13374] FAULT_INJECTION: forcing a failure. [ 165.208640][T13374] name failslab, interval 1, probability 0, space 0, times 0 [ 165.219846][T13367] program syz.1.3580 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.221325][T13374] CPU: 1 UID: 0 PID: 13374 Comm: syz.4.3583 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 165.221353][T13374] Tainted: [W]=WARN [ 165.221359][T13374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 165.221368][T13374] Call Trace: [ 165.221374][T13374] [ 165.221382][T13374] __dump_stack+0x1d/0x30 [ 165.221410][T13374] dump_stack_lvl+0xe8/0x140 [ 165.221440][T13374] dump_stack+0x15/0x1b [ 165.221507][T13374] should_fail_ex+0x265/0x280 [ 165.221524][T13374] should_failslab+0x8c/0xb0 [ 165.221550][T13374] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 165.221593][T13374] ? __alloc_skb+0x101/0x320 [ 165.221666][T13374] __alloc_skb+0x101/0x320 [ 165.221692][T13374] netlink_alloc_large_skb+0xbf/0xf0 [ 165.221764][T13374] netlink_sendmsg+0x3cf/0x6b0 [ 165.221785][T13374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.221803][T13374] __sock_sendmsg+0x145/0x180 [ 165.221852][T13374] ____sys_sendmsg+0x31e/0x4e0 [ 165.221872][T13374] ___sys_sendmsg+0x17b/0x1d0 [ 165.221900][T13374] __x64_sys_sendmsg+0xd4/0x160 [ 165.221921][T13374] x64_sys_call+0x191e/0x3000 [ 165.221963][T13374] do_syscall_64+0xd2/0x200 [ 165.221981][T13374] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 165.222006][T13374] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 165.222041][T13374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.222061][T13374] RIP: 0033:0x7f26c267f749 [ 165.222076][T13374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.222096][T13374] RSP: 002b:00007f26c10e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.222114][T13374] RAX: ffffffffffffffda RBX: 00007f26c28d5fa0 RCX: 00007f26c267f749 [ 165.222145][T13374] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 165.222157][T13374] RBP: 00007f26c10e7090 R08: 0000000000000000 R09: 0000000000000000 [ 165.222169][T13374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.222261][T13374] R13: 00007f26c28d6038 R14: 00007f26c28d5fa0 R15: 00007ffc21933248 [ 165.222278][T13374] [ 165.280119][T13372] rock: directory entry would overflow storage [ 165.285205][T13271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.290294][T13372] rock: sig=0x4654, size=5, remaining=4 [ 165.294883][T13271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.294909][T13271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.350739][T13378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.355892][T13271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.374575][T13378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.384787][T13271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.540136][T13271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.561065][ T3879] IPVS: stop unused estimator thread 0... [ 165.572668][T13386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3587'. [ 165.593992][T13384] FAULT_INJECTION: forcing a failure. [ 165.593992][T13384] name failslab, interval 1, probability 0, space 0, times 0 [ 165.606654][T13384] CPU: 1 UID: 0 PID: 13384 Comm: syz.5.3586 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 165.606682][T13384] Tainted: [W]=WARN [ 165.606688][T13384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 165.606697][T13384] Call Trace: [ 165.606702][T13384] [ 165.606709][T13384] __dump_stack+0x1d/0x30 [ 165.606727][T13384] dump_stack_lvl+0xe8/0x140 [ 165.606818][T13384] dump_stack+0x15/0x1b [ 165.606836][T13384] should_fail_ex+0x265/0x280 [ 165.606856][T13384] should_failslab+0x8c/0xb0 [ 165.607005][T13384] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 165.607034][T13384] ? __alloc_skb+0x101/0x320 [ 165.607062][T13384] __alloc_skb+0x101/0x320 [ 165.607148][T13384] ? audit_log_start+0x342/0x720 [ 165.607166][T13384] audit_log_start+0x3a0/0x720 [ 165.607217][T13384] ? kstrtouint+0x76/0xc0 [ 165.607246][T13384] audit_seccomp+0x48/0x100 [ 165.607339][T13384] ? __seccomp_filter+0x82d/0x1250 [ 165.607362][T13384] __seccomp_filter+0x83e/0x1250 [ 165.607429][T13384] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 165.607457][T13384] ? vfs_write+0x7e8/0x960 [ 165.607479][T13384] ? __rcu_read_unlock+0x4f/0x70 [ 165.607503][T13384] ? __fget_files+0x184/0x1c0 [ 165.607612][T13384] __secure_computing+0x82/0x150 [ 165.607638][T13384] syscall_trace_enter+0xcf/0x1e0 [ 165.607661][T13384] do_syscall_64+0xac/0x200 [ 165.607682][T13384] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 165.607704][T13384] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 165.607742][T13384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.607760][T13384] RIP: 0033:0x7fb50429f749 [ 165.607773][T13384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.607869][T13384] RSP: 002b:00007fb502d07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 165.607890][T13384] RAX: ffffffffffffffda RBX: 00007fb5044f5fa0 RCX: 00007fb50429f749 [ 165.607923][T13384] RDX: 0000000000000000 RSI: 00000000000000fc RDI: 0000000000000000 [ 165.607937][T13384] RBP: 00007fb502d07090 R08: 0000000000000000 R09: 0000000000000000 [ 165.607993][T13384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.608006][T13384] R13: 00007fb5044f6038 R14: 00007fb5044f5fa0 R15: 00007ffd8140ab38 [ 165.608024][T13384] [ 165.611153][T13386] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.691037][T13392] netlink: 'syz.5.3589': attribute type 13 has an invalid length. [ 165.851971][T13390] vlan0: entered allmulticast mode [ 165.857124][T13390] bond1: entered allmulticast mode [ 165.917743][T13392] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.924948][T13392] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.936495][T13392] batman_adv: batadv0: Interface deactivated: dummy0 [ 165.995042][T13392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.017013][T13392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.102766][T13392] batman_adv: batadv0: Interface deactivated: macvtap1 [ 166.118446][T13392] veth0_to_batadv: left allmulticast mode [ 166.147424][ T29] kauditd_printk_skb: 495 callbacks suppressed [ 166.147438][ T29] audit: type=1326 audit(1764495453.130:21337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13391 comm="syz.5.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50429f749 code=0x7ffc0000 [ 166.177255][ T29] audit: type=1326 audit(1764495453.130:21338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13391 comm="syz.5.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50429f749 code=0x7ffc0000 [ 166.204949][T13271] hsr_slave_0: entered promiscuous mode [ 166.210982][T13271] hsr_slave_1: entered promiscuous mode [ 166.216783][T13271] debugfs: 'hsr0' already exists in 'hsr' [ 166.222538][T13271] Cannot create hsr debugfs directory [ 166.242076][T13402] tipc: Enabling of bearer rejected, failed to enable media [ 166.258960][ T58] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.288839][ T58] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.316832][ T58] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.340242][T13412] FAULT_INJECTION: forcing a failure. [ 166.340242][T13412] name failslab, interval 1, probability 0, space 0, times 0 [ 166.352900][T13412] CPU: 0 UID: 0 PID: 13412 Comm: syz.1.3597 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 166.352999][T13412] Tainted: [W]=WARN [ 166.353004][T13412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 166.353013][T13412] Call Trace: [ 166.353018][T13412] [ 166.353024][T13412] __dump_stack+0x1d/0x30 [ 166.353041][T13412] dump_stack_lvl+0xe8/0x140 [ 166.353056][T13412] dump_stack+0x15/0x1b [ 166.353116][T13412] should_fail_ex+0x265/0x280 [ 166.353131][T13412] should_failslab+0x8c/0xb0 [ 166.353160][T13412] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 166.353182][T13412] ? __alloc_skb+0x101/0x320 [ 166.353252][T13412] __alloc_skb+0x101/0x320 [ 166.353271][T13412] ? audit_log_start+0x342/0x720 [ 166.353288][T13412] audit_log_start+0x3a0/0x720 [ 166.353303][T13412] ? kstrtouint+0x76/0xc0 [ 166.353326][T13412] audit_seccomp+0x48/0x100 [ 166.353348][T13412] ? __seccomp_filter+0x82d/0x1250 [ 166.353368][T13412] __seccomp_filter+0x83e/0x1250 [ 166.353488][T13412] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 166.353516][T13412] ? vfs_write+0x7e8/0x960 [ 166.353533][T13412] ? __rcu_read_unlock+0x4f/0x70 [ 166.353570][T13412] ? __fget_files+0x184/0x1c0 [ 166.353592][T13412] __secure_computing+0x82/0x150 [ 166.353611][T13412] syscall_trace_enter+0xcf/0x1e0 [ 166.353673][T13412] do_syscall_64+0xac/0x200 [ 166.353725][T13412] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 166.353787][T13412] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 166.353810][T13412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.353826][T13412] RIP: 0033:0x7f94a2f3f749 [ 166.353871][T13412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.353884][T13412] RSP: 002b:00007f94a199f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 166.353900][T13412] RAX: ffffffffffffffda RBX: 00007f94a3195fa0 RCX: 00007f94a2f3f749 [ 166.353910][T13412] RDX: 0000000000000000 RSI: 00000000000000fc RDI: 0000000000000000 [ 166.353991][T13412] RBP: 00007f94a199f090 R08: 0000000000000000 R09: 0000000000000000 [ 166.354001][T13412] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 166.354010][T13412] R13: 00007f94a3196038 R14: 00007f94a3195fa0 R15: 00007ffe5a945148 [ 166.354025][T13412] [ 166.354036][T13412] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64 [ 166.355804][T13414] selinux_netlink_send: 2 callbacks suppressed [ 166.355817][T13414] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13414 comm=syz.5.3598 [ 166.365420][T13412] audit: out of memory in audit_log_start [ 166.370562][ T58] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.385829][ T29] audit: type=1326 audit(1764495453.330:21339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.1.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a2f3f749 code=0x7ffc0000 [ 166.399827][T13416] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3599'. [ 166.403510][ T29] audit: type=1326 audit(1764495453.330:21340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.1.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a2f3f749 code=0x7ffc0000 [ 166.418136][T13414] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13414 comm=syz.5.3598 [ 166.418648][ T29] audit: type=1326 audit(1764495453.330:21341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.1.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94a2f3df90 code=0x7ffc0000 [ 166.711770][ T29] audit: type=1326 audit(1764495453.330:21342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.1.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f94a2f3e1ff code=0x7ffc0000 [ 166.735503][ T29] audit: type=1326 audit(1764495453.440:21343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13418 comm="syz.5.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50429f749 code=0x7ffc0000 [ 166.759152][ T29] audit: type=1326 audit(1764495453.450:21344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13418 comm="syz.5.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fb50429f749 code=0x7ffc0000 [ 166.799869][T13271] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 166.809745][T13271] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 166.826977][T13271] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 166.854824][T13271] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 166.862049][T13431] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3602'. [ 166.870869][T13426] loop4: detected capacity change from 0 to 8192 [ 166.885714][T13431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=13431 comm=syz.2.3602 [ 166.921468][T13271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.938006][T13431] loop2: detected capacity change from 0 to 512 [ 166.955552][T13271] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.963032][T13444] tipc: Enabling of bearer rejected, already enabled [ 166.974033][T13431] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 166.982786][T13431] EXT4-fs (loop2): orphan cleanup on readonly fs [ 166.990353][ T3867] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.997412][ T3867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.007354][T13431] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.3602: corrupted inode contents [ 167.022366][T13448] FAULT_INJECTION: forcing a failure. [ 167.022366][T13448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.035441][T13448] CPU: 1 UID: 0 PID: 13448 Comm: syz.4.3609 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 167.035491][T13448] Tainted: [W]=WARN [ 167.035498][T13448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 167.035507][T13448] Call Trace: [ 167.035512][T13448] [ 167.035519][T13448] __dump_stack+0x1d/0x30 [ 167.035539][T13448] dump_stack_lvl+0xe8/0x140 [ 167.035558][T13448] dump_stack+0x15/0x1b [ 167.035575][T13448] should_fail_ex+0x265/0x280 [ 167.035595][T13448] should_fail+0xb/0x20 [ 167.035611][T13448] should_fail_usercopy+0x1a/0x20 [ 167.035663][T13448] _copy_from_iter+0xd2/0xe80 [ 167.035682][T13448] ? alloc_pages_mpol+0x217/0x260 [ 167.035701][T13448] copy_page_from_iter+0x178/0x2a0 [ 167.035767][T13448] tun_get_user+0x679/0x26e0 [ 167.035793][T13448] ? ref_tracker_alloc+0x1f2/0x2f0 [ 167.035824][T13448] tun_chr_write_iter+0x15e/0x210 [ 167.035893][T13448] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 167.035917][T13448] vfs_write+0x52a/0x960 [ 167.035945][T13448] ksys_write+0xda/0x1a0 [ 167.035967][T13448] __x64_sys_write+0x40/0x50 [ 167.035997][T13448] x64_sys_call+0x2802/0x3000 [ 167.036015][T13448] do_syscall_64+0xd2/0x200 [ 167.036033][T13448] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 167.036130][T13448] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 167.036161][T13448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.036180][T13448] RIP: 0033:0x7f26c267e1ff [ 167.036214][T13448] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 167.036229][T13448] RSP: 002b:00007f26c10e7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 167.036247][T13448] RAX: ffffffffffffffda RBX: 00007f26c28d5fa0 RCX: 00007f26c267e1ff [ 167.036260][T13448] RDX: 0000000000000042 RSI: 00002000000010c0 RDI: 00000000000000c8 [ 167.036272][T13448] RBP: 00007f26c10e7090 R08: 0000000000000000 R09: 0000000000000000 [ 167.036285][T13448] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000001 [ 167.036295][T13448] R13: 00007f26c28d6038 R14: 00007f26c28d5fa0 R15: 00007ffc21933248 [ 167.036312][T13448] [ 167.039268][ T3867] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.139924][T13431] EXT4-fs (loop2): Remounting filesystem read-only [ 167.140274][ T3867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.171714][T13431] EXT4-fs (loop2): 1 truncate cleaned up [ 167.195822][ T3867] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 167.284027][ T3867] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 167.303052][ T3867] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 167.315005][T13431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.343439][T13455] loop4: detected capacity change from 0 to 256 [ 167.354921][T13458] loop5: detected capacity change from 0 to 2048 [ 167.362016][T11850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.376176][T13461] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3614'. [ 167.379341][T13458] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 167.414713][T13271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.423382][T13455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3611'. [ 167.459832][T13470] syz.2.3616 (13470): /proc/13469/oom_adj is deprecated, please use /proc/13469/oom_score_adj instead. [ 167.480839][T13472] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3611'. [ 167.489240][T13470] usb usb8: usbfs: process 13470 (syz.2.3616) did not claim interface 0 before use [ 167.508561][T13455] program syz.4.3611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.575242][T13485] loop5: detected capacity change from 0 to 512 [ 167.611822][T13485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.630065][T13271] veth0_vlan: entered promiscuous mode [ 167.638028][T13271] veth1_vlan: entered promiscuous mode [ 167.657449][T13485] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.658624][T13271] veth0_macvtap: entered promiscuous mode [ 167.675498][T13271] veth1_macvtap: entered promiscuous mode [ 167.686607][T13271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.700526][T13271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.711956][ T3867] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.805993][ T3867] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.831312][ T3867] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.866222][ T3867] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.866673][T11532] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.096637][ T3876] Bluetooth: hci0: Frame reassembly failed (-84) [ 168.122890][ T3876] Bluetooth: hci1: Frame reassembly failed (-84) [ 168.162230][T13518] loop2: detected capacity change from 0 to 512 [ 168.202523][T13518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.220421][T13518] ext4 filesystem being mounted at /128/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.236904][T13518] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.3630: corrupted inode contents [ 168.250466][T13518] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.3630: mark_inode_dirty error [ 168.262180][T13518] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.3630: corrupted inode contents [ 168.274697][T13518] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.3630: mark_inode_dirty error [ 168.283533][T13526] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13526 comm=syz.5.3631 [ 168.299918][T13526] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13526 comm=syz.5.3631 [ 168.443079][T13541] loop5: detected capacity change from 0 to 512 [ 168.452927][T13542] EXT4-fs error (device loop2): ext4_lookup:1784: inode #18: comm syz.2.3630: 'file0' linked to parent dir [ 168.470944][T13541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.483683][T13541] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.495178][T13541] FAULT_INJECTION: forcing a failure. [ 168.495178][T13541] name failslab, interval 1, probability 0, space 0, times 0 [ 168.507844][T13541] CPU: 0 UID: 0 PID: 13541 Comm: syz.5.3636 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 168.507876][T13541] Tainted: [W]=WARN [ 168.507883][T13541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 168.507895][T13541] Call Trace: [ 168.507901][T13541] [ 168.507909][T13541] __dump_stack+0x1d/0x30 [ 168.507935][T13541] dump_stack_lvl+0xe8/0x140 [ 168.508031][T13541] dump_stack+0x15/0x1b [ 168.508048][T13541] should_fail_ex+0x265/0x280 [ 168.508130][T13541] should_failslab+0x8c/0xb0 [ 168.508169][T13541] __kmalloc_noprof+0xa5/0x570 [ 168.508196][T13541] ? ext4_find_extent+0x16b/0x7a0 [ 168.508282][T13541] ext4_find_extent+0x16b/0x7a0 [ 168.508303][T13541] ? get_page_from_freelist+0x13d7/0x1430 [ 168.508325][T13541] ext4_ext_map_blocks+0x11f/0x38a0 [ 168.508393][T13541] ? should_fail_ex+0x30/0x280 [ 168.508413][T13541] ? xas_load+0x413/0x430 [ 168.508432][T13541] ext4_map_query_blocks+0xa8/0x480 [ 168.508464][T13541] ext4_map_blocks+0x330/0xd00 [ 168.508559][T13541] ? filemap_write_and_wait_range+0x2f9/0x340 [ 168.508585][T13541] ? __rcu_read_unlock+0x4f/0x70 [ 168.508607][T13541] ext4_iomap_begin+0x16d/0xe00 [ 168.508628][T13541] ? refill_obj_stock+0x254/0x2e0 [ 168.508655][T13541] ? obj_cgroup_charge_account+0xba/0x1a0 [ 168.508676][T13541] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 168.508696][T13541] iomap_iter+0x332/0x730 [ 168.508719][T13541] __iomap_dio_rw+0x705/0x1240 [ 168.508811][T13541] ? selinux_file_open+0x2df/0x330 [ 168.508850][T13541] iomap_dio_rw+0x40/0x90 [ 168.508956][T13541] ext4_file_read_iter+0x20f/0x290 [ 168.508978][T13541] do_iter_readv_writev+0x4a1/0x540 [ 168.509007][T13541] vfs_readv+0x1ea/0x690 [ 168.509087][T13541] __se_sys_preadv2+0xfc/0x1c0 [ 168.509111][T13541] __x64_sys_preadv2+0x67/0x80 [ 168.509133][T13541] x64_sys_call+0xe0d/0x3000 [ 168.509153][T13541] do_syscall_64+0xd2/0x200 [ 168.509233][T13541] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 168.509317][T13541] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 168.509400][T13541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.509420][T13541] RIP: 0033:0x7fb50429f749 [ 168.509434][T13541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.509474][T13541] RSP: 002b:00007fb502d07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 168.509494][T13541] RAX: ffffffffffffffda RBX: 00007fb5044f5fa0 RCX: 00007fb50429f749 [ 168.509507][T13541] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000004 [ 168.509521][T13541] RBP: 00007fb502d07090 R08: 0000000000000000 R09: 0000000000000000 [ 168.509533][T13541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.509595][T13541] R13: 00007fb5044f6038 R14: 00007fb5044f5fa0 R15: 00007ffd8140ab38 [ 168.509611][T13541] [ 168.833019][T11532] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.019337][T11850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.174651][T13559] loop5: detected capacity change from 0 to 2048 [ 169.181364][T13559] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 169.237377][T13556] lo speed is unknown, defaulting to 1000 [ 169.238630][T13570] serio: Serial port ttyS3 [ 169.287692][T13556] chnl_net:caif_netlink_parms(): no params data found [ 169.328466][T13556] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.335574][T13556] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.342801][T13556] bridge_slave_0: entered allmulticast mode [ 169.349518][T13556] bridge_slave_0: entered promiscuous mode [ 169.356198][T13556] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.363285][T13556] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.370694][T13556] bridge_slave_1: entered allmulticast mode [ 169.377036][T13556] bridge_slave_1: entered promiscuous mode [ 169.393778][T13556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.404133][T13556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.430420][T13556] team0: Port device team_slave_0 added [ 169.438896][T13556] team0: Port device team_slave_1 added [ 169.466131][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.475325][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.484376][ T58] bond0 (unregistering): Released all slaves [ 169.491954][T13556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.498915][T13556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.524863][T13556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.536385][T13556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.539866][T13582] netlink: 'syz.5.3647': attribute type 21 has an invalid length. [ 169.543343][T13556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.577023][T13556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.600344][ T58] hsr_slave_0: left promiscuous mode [ 169.605783][T13582] loop5: detected capacity change from 0 to 164 [ 169.612074][ T58] hsr_slave_1: left promiscuous mode [ 169.617843][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.617861][T13582] Unable to read rock-ridge attributes [ 169.618275][T13582] Unable to read rock-ridge attributes [ 169.636367][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.636512][T13582] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 169.672048][ T58] team0 (unregistering): Port device team_slave_1 removed [ 169.681695][ T58] team0 (unregistering): Port device team_slave_0 removed [ 169.715465][T13556] hsr_slave_0: entered promiscuous mode [ 169.721951][T13556] hsr_slave_1: entered promiscuous mode [ 169.727701][T13556] debugfs: 'hsr0' already exists in 'hsr' [ 169.733442][T13556] Cannot create hsr debugfs directory [ 169.794457][T13556] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 169.803096][T13556] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 169.811730][T13556] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 169.820344][T13556] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 169.836087][T13556] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.843190][T13556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.850557][T13556] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.857570][T13556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.889590][T13556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.902450][ T3877] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.915663][ T3877] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.928028][T13556] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.939389][ T3877] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.946445][ T3877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.959604][ T3877] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.966720][ T3877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.025823][T13556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.108465][T11623] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 170.123983][T13556] veth0_vlan: entered promiscuous mode [ 170.132228][T13556] veth1_vlan: entered promiscuous mode [ 170.138452][T13612] bridge_slave_0: left allmulticast mode [ 170.144197][T13612] bridge_slave_0: left promiscuous mode [ 170.149873][T13612] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.157824][T13612] bridge_slave_1: left allmulticast mode [ 170.163573][T13612] bridge_slave_1: left promiscuous mode [ 170.169280][T13612] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.177532][T13612] bond0: (slave bond_slave_0): Releasing backup interface [ 170.185463][T13612] bond0: (slave bond_slave_1): Releasing backup interface [ 170.185492][T13613] netlink: 'syz.2.3650': attribute type 10 has an invalid length. [ 170.185504][T13613] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3650'. [ 170.192648][T12062] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 170.217267][T13612] team0: Port device team_slave_0 removed [ 170.223803][T13612] team0: Port device team_slave_1 removed [ 170.229824][T13612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.237511][T13614] 9pnet_fd: Insufficient options for proto=fd [ 170.244033][T13612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.251736][T13612] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 170.267811][T13616] loop5: detected capacity change from 0 to 764 [ 170.268780][T13613] veth1_vlan: left promiscuous mode [ 170.279465][T13616] rock: directory entry would overflow storage [ 170.280097][T13613] batman_adv: batadv0: Adding interface: veth1_vlan [ 170.285625][T13616] rock: sig=0x4654, size=5, remaining=4 [ 170.292208][T13613] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.323402][T13613] batman_adv: batadv0: Interface activated: veth1_vlan [ 170.337328][T13618] pim6reg: entered allmulticast mode [ 170.344249][T13618] pim6reg: left allmulticast mode [ 170.354967][T13556] veth0_macvtap: entered promiscuous mode [ 170.362315][T13556] veth1_macvtap: entered promiscuous mode [ 170.372388][T13556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.383043][T13556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.394139][ T3867] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.410045][ T3867] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.421281][ T3867] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.441914][ T3867] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.455834][T13622] sch_tbf: burst 2 is lower than device macvtap0 mtu (1514) ! [ 170.539867][T13627] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3643'. [ 170.772711][T13645] loop4: detected capacity change from 0 to 1024 [ 170.775637][T13647] loop6: detected capacity change from 0 to 764 [ 170.884165][T13648] loop2: detected capacity change from 0 to 1024 [ 171.180877][ T29] kauditd_printk_skb: 565 callbacks suppressed [ 171.180902][ T29] audit: type=1326 audit(1764495458.170:21904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13637 comm="syz.2.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac1d8f749 code=0x7ffc0000 [ 171.210851][T13648] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 171.210994][T13647] rock: directory entry would overflow storage [ 171.226902][T13647] rock: sig=0x4654, size=5, remaining=4 [ 171.233000][T13648] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 171.244115][T13648] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 171.254587][T13648] JBD2: no valid journal superblock found [ 171.260356][T13648] EXT4-fs (loop2): Could not load journal inode [ 171.268240][ T29] audit: type=1326 audit(1764495458.170:21905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13637 comm="syz.2.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac1d8f749 code=0x7ffc0000 [ 171.291965][ T29] audit: type=1326 audit(1764495458.250:21906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13637 comm="syz.2.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ac1d8df90 code=0x7ffc0000 [ 171.315790][ T29] audit: type=1326 audit(1764495458.250:21907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13637 comm="syz.2.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ac1d8f34b code=0x7ffc0000 [ 171.339422][ T29] audit: type=1326 audit(1764495458.250:21908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13637 comm="syz.2.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7ac1d8e3aa code=0x7ffc0000 [ 171.367301][ T29] audit: type=1326 audit(1764495458.250:21909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13637 comm="syz.2.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac1d8f749 code=0x7ffc0000 [ 171.391083][ T29] audit: type=1326 audit(1764495458.250:21910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13637 comm="syz.2.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac1d8f749 code=0x7ffc0000 [ 171.417507][T13651] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3663'. [ 171.431353][T13645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 171.451954][T13645] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.462764][ T29] audit: type=1326 audit(1764495458.380:21911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13637 comm="syz.2.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7ac1dc2005 code=0x7ffc0000 [ 171.486378][ T29] audit: type=1326 audit(1764495458.380:21912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13637 comm="syz.2.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7ac1dc2005 code=0x7ffc0000 [ 171.510099][ T29] audit: type=1326 audit(1764495458.380:21913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13637 comm="syz.2.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7ac1dc2005 code=0x7ffc0000 [ 171.519643][T13658] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3664'. [ 171.543544][T13657] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.3662: Freeing blocks not in datazone - block = 0, count = 16 [ 171.602364][T13654] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 171.612091][T13654] FAULT_INJECTION: forcing a failure. [ 171.612091][T13654] name failslab, interval 1, probability 0, space 0, times 0 [ 171.624797][T13654] CPU: 0 UID: 0 PID: 13654 Comm: wÞ£ÿ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 171.624837][T13654] Tainted: [W]=WARN [ 171.624843][T13654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 171.624856][T13654] Call Trace: [ 171.624940][T13654] [ 171.624948][T13654] __dump_stack+0x1d/0x30 [ 171.624967][T13654] dump_stack_lvl+0xe8/0x140 [ 171.624993][T13654] dump_stack+0x15/0x1b [ 171.625011][T13654] should_fail_ex+0x265/0x280 [ 171.625030][T13654] ? audit_log_d_path+0x8d/0x150 [ 171.625068][T13654] should_failslab+0x8c/0xb0 [ 171.625092][T13654] __kmalloc_cache_noprof+0x4c/0x4a0 [ 171.625117][T13654] audit_log_d_path+0x8d/0x150 [ 171.625134][T13654] audit_log_d_path_exe+0x42/0x70 [ 171.625224][T13654] audit_log_task+0x1e9/0x250 [ 171.625254][T13654] ? kstrtouint+0x76/0xc0 [ 171.625283][T13654] audit_seccomp+0x61/0x100 [ 171.625309][T13654] ? __seccomp_filter+0x82d/0x1250 [ 171.625351][T13654] __seccomp_filter+0x83e/0x1250 [ 171.625375][T13654] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 171.625399][T13654] ? vfs_write+0x7e8/0x960 [ 171.625471][T13654] ? __rcu_read_unlock+0x4f/0x70 [ 171.625492][T13654] ? __fget_files+0x184/0x1c0 [ 171.625547][T13654] __secure_computing+0x82/0x150 [ 171.625572][T13654] syscall_trace_enter+0xcf/0x1e0 [ 171.625598][T13654] do_syscall_64+0xac/0x200 [ 171.625616][T13654] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 171.625708][T13654] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 171.625752][T13654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.625771][T13654] RIP: 0033:0x7f54f65af749 [ 171.625787][T13654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.625802][T13654] RSP: 002b:00007f54f500f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.625817][T13654] RAX: ffffffffffffffda RBX: 00007f54f6805fa0 RCX: 00007f54f65af749 [ 171.625828][T13654] RDX: 0000000000000000 RSI: 0000200000005840 RDI: 0000000000000004 [ 171.625839][T13654] RBP: 00007f54f500f090 R08: 0000000000000000 R09: 0000000000000000 [ 171.625849][T13654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.625860][T13654] R13: 00007f54f6806038 R14: 00007f54f6805fa0 R15: 00007fffdb5edcc8 [ 171.625877][T13654] [ 171.870339][ T58] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 112: padding at end of block bitmap is not set [ 171.886343][ T58] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 171.898708][ T58] EXT4-fs (loop4): This should not happen!! Data will be lost [ 171.898708][ T58] [ 171.909065][T13664] FAULT_INJECTION: forcing a failure. [ 171.909065][T13664] name failslab, interval 1, probability 0, space 0, times 0 [ 171.921758][T13664] CPU: 1 UID: 0 PID: 13664 Comm: syz.7.3667 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 171.921895][T13664] Tainted: [W]=WARN [ 171.921902][T13664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 171.921914][T13664] Call Trace: [ 171.921920][T13664] [ 171.921926][T13664] __dump_stack+0x1d/0x30 [ 171.921946][T13664] dump_stack_lvl+0xe8/0x140 [ 171.921987][T13664] dump_stack+0x15/0x1b [ 171.922002][T13664] should_fail_ex+0x265/0x280 [ 171.922020][T13664] should_failslab+0x8c/0xb0 [ 171.922090][T13664] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 171.922117][T13664] ? __alloc_skb+0x101/0x320 [ 171.922141][T13664] __alloc_skb+0x101/0x320 [ 171.922183][T13664] netlink_alloc_large_skb+0xbf/0xf0 [ 171.922269][T13664] netlink_sendmsg+0x3cf/0x6b0 [ 171.922289][T13664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.922381][T13664] __sock_sendmsg+0x145/0x180 [ 171.922405][T13664] ____sys_sendmsg+0x31e/0x4e0 [ 171.922426][T13664] ___sys_sendmsg+0x17b/0x1d0 [ 171.922495][T13664] __x64_sys_sendmsg+0xd4/0x160 [ 171.922518][T13664] x64_sys_call+0x191e/0x3000 [ 171.922582][T13664] do_syscall_64+0xd2/0x200 [ 171.922603][T13664] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 171.922629][T13664] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 171.922677][T13664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.922698][T13664] RIP: 0033:0x7f2b6ef5f749 [ 171.922722][T13664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.922740][T13664] RSP: 002b:00007f2b6d9bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.922760][T13664] RAX: ffffffffffffffda RBX: 00007f2b6f1b5fa0 RCX: 00007f2b6ef5f749 [ 171.922796][T13664] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 0000000000000003 [ 171.922809][T13664] RBP: 00007f2b6d9bf090 R08: 0000000000000000 R09: 0000000000000000 [ 171.922822][T13664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.922834][T13664] R13: 00007f2b6f1b6038 R14: 00007f2b6f1b5fa0 R15: 00007ffe8ef15718 [ 171.922851][T13664] [ 171.923827][T11261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 172.152060][T13669] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3670'. [ 172.163760][T13669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=13669 comm=syz.7.3670 [ 172.179293][T13669] loop7: detected capacity change from 0 to 512 [ 172.190079][T13674] loop6: detected capacity change from 0 to 128 [ 172.200439][T13674] bio_check_eod: 110 callbacks suppressed [ 172.200450][T13674] syz.6.3672: attempt to access beyond end of device [ 172.200450][T13674] loop6: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 172.221005][T13674] syz.6.3672: attempt to access beyond end of device [ 172.221005][T13674] loop6: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 172.227124][T13669] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 172.234966][T13674] syz.6.3672: attempt to access beyond end of device [ 172.234966][T13674] loop6: rw=2049, sector=150, nr_sectors = 2 limit=128 [ 172.255836][T13674] buffer_io_error: 68 callbacks suppressed [ 172.255850][T13674] Buffer I/O error on dev loop6, logical block 75, lost async page write [ 172.261810][T13669] EXT4-fs (loop7): orphan cleanup on readonly fs [ 172.270475][T13674] syz.6.3672: attempt to access beyond end of device [ 172.270475][T13674] loop6: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 172.287104][T13669] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.3670: corrupted inode contents [ 172.289951][T13674] Buffer I/O error on dev loop6, logical block 76, lost async page write [ 172.302559][T13669] EXT4-fs (loop7): Remounting filesystem read-only [ 172.313866][T13674] syz.6.3672: attempt to access beyond end of device [ 172.313866][T13674] loop6: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 172.332362][T13674] syz.6.3672: attempt to access beyond end of device [ 172.332362][T13674] loop6: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 172.345831][T13674] Buffer I/O error on dev loop6, logical block 87, lost async page write [ 172.365970][T13680] loop2: detected capacity change from 0 to 1024 [ 172.374415][T13674] syz.6.3672: attempt to access beyond end of device [ 172.374415][T13674] loop6: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 172.387841][T13674] Buffer I/O error on dev loop6, logical block 88, lost async page write [ 172.397146][T13674] syz.6.3672: attempt to access beyond end of device [ 172.397146][T13674] loop6: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 172.411873][T13674] syz.6.3672: attempt to access beyond end of device [ 172.411873][T13674] loop6: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 172.425374][T13674] Buffer I/O error on dev loop6, logical block 91, lost async page write [ 172.437128][T13674] syz.6.3672: attempt to access beyond end of device [ 172.437128][T13674] loop6: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 172.450636][T13674] Buffer I/O error on dev loop6, logical block 92, lost async page write [ 172.462558][T13674] Buffer I/O error on dev loop6, logical block 103, lost async page write [ 172.471186][T13674] Buffer I/O error on dev loop6, logical block 104, lost async page write [ 172.480838][T13674] Buffer I/O error on dev loop6, logical block 107, lost async page write [ 172.489771][T13674] Buffer I/O error on dev loop6, logical block 108, lost async page write [ 172.507514][T13669] EXT4-fs (loop7): 1 truncate cleaned up [ 172.607606][T13687] loop4: detected capacity change from 0 to 256 [ 172.645842][T13687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3674'. [ 172.676315][T13687] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3674'. [ 172.764731][T13688] program syz.4.3674 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.815947][T13690] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3677'. [ 173.020380][ T58] bridge_slave_1: left allmulticast mode [ 173.026048][ T58] bridge_slave_1: left promiscuous mode [ 173.031794][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.119469][ T58] bridge_slave_0: left allmulticast mode [ 173.125176][ T58] bridge_slave_0: left promiscuous mode [ 173.130883][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.267243][ T3879] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 173.277977][ T3879] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 173.289343][T13680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.308140][T13680] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.3671: missing EA_INODE flag [ 173.325385][T13680] EXT4-fs (loop2): Remounting filesystem read-only [ 173.332122][T13680] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1226: inode #18: comm syz.2.3671: ea_inode dec ref err=-30 [ 173.344996][T13680] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 173.367742][ T3879] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 173.391774][ T58] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.417975][ T58] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.437208][T13669] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 173.493390][ T58] .` (unregistering): Released all slaves [ 173.550851][T13694] lo speed is unknown, defaulting to 1000 [ 173.562781][T13556] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.624744][T13713] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3682'. [ 173.689009][ T58] hsr_slave_0: left promiscuous mode [ 173.699408][ T58] hsr_slave_1: left promiscuous mode [ 173.711162][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.727289][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.738367][T13716] loop6: detected capacity change from 0 to 128 [ 173.750285][ T58] batman_adv: batadv0: Removing interface: macvtap1 [ 173.782036][ T58] batman_adv: batadv0: Removing interface: dummy0 [ 173.825423][T13720] FAULT_INJECTION: forcing a failure. [ 173.825423][T13720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.838541][T13720] CPU: 1 UID: 0 PID: 13720 Comm: syz.4.3685 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 173.838570][T13720] Tainted: [W]=WARN [ 173.838575][T13720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.838585][T13720] Call Trace: [ 173.838591][T13720] [ 173.838597][T13720] __dump_stack+0x1d/0x30 [ 173.838619][T13720] dump_stack_lvl+0xe8/0x140 [ 173.838715][T13720] dump_stack+0x15/0x1b [ 173.838733][T13720] should_fail_ex+0x265/0x280 [ 173.838753][T13720] should_fail+0xb/0x20 [ 173.838779][T13720] should_fail_usercopy+0x1a/0x20 [ 173.838801][T13720] _copy_from_user+0x1c/0xb0 [ 173.838822][T13720] kstrtouint_from_user+0x69/0xf0 [ 173.838846][T13720] ? 0xffffffff81000000 [ 173.838857][T13720] ? selinux_file_permission+0x1e4/0x320 [ 173.838992][T13720] proc_fail_nth_write+0x50/0x160 [ 173.839021][T13720] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 173.839050][T13720] vfs_write+0x269/0x960 [ 173.839072][T13720] ? vfs_read+0x4e6/0x770 [ 173.839125][T13720] ? __rcu_read_unlock+0x4f/0x70 [ 173.839164][T13720] ? __fget_files+0x184/0x1c0 [ 173.839216][T13720] ksys_write+0xda/0x1a0 [ 173.839236][T13720] __x64_sys_write+0x40/0x50 [ 173.839315][T13720] x64_sys_call+0x2802/0x3000 [ 173.839337][T13720] do_syscall_64+0xd2/0x200 [ 173.839415][T13720] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 173.839442][T13720] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 173.839526][T13720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.839548][T13720] RIP: 0033:0x7f26c267e1ff [ 173.839563][T13720] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 173.839630][T13720] RSP: 002b:00007f26c10e7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 173.839646][T13720] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f26c267e1ff [ 173.839659][T13720] RDX: 0000000000000001 RSI: 00007f26c10e70a0 RDI: 0000000000000009 [ 173.839672][T13720] RBP: 00007f26c10e7090 R08: 0000000000000000 R09: 0000000000000000 [ 173.839685][T13720] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 173.839716][T13720] R13: 00007f26c28d6038 R14: 00007f26c28d5fa0 R15: 00007ffc21933248 [ 173.839736][T13720] [ 174.070159][T11850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.099777][ T58] team0 (unregistering): Port device team_slave_1 removed [ 174.109167][ T58] team0 (unregistering): Port device team_slave_0 removed [ 174.166685][T13729] loop7: detected capacity change from 0 to 256 [ 174.171951][T13727] bond1: entered promiscuous mode [ 174.178046][T13727] bond1: entered allmulticast mode [ 174.189180][T13727] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.205744][T13694] chnl_net:caif_netlink_parms(): no params data found [ 174.243188][T13738] FAULT_INJECTION: forcing a failure. [ 174.243188][T13738] name failslab, interval 1, probability 0, space 0, times 0 [ 174.255893][T13738] CPU: 1 UID: 0 PID: 13738 Comm: syz.2.3691 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 174.255974][T13738] Tainted: [W]=WARN [ 174.255981][T13738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.255993][T13738] Call Trace: [ 174.255998][T13738] [ 174.256004][T13738] __dump_stack+0x1d/0x30 [ 174.256048][T13738] dump_stack_lvl+0xe8/0x140 [ 174.256069][T13738] dump_stack+0x15/0x1b [ 174.256087][T13738] should_fail_ex+0x265/0x280 [ 174.256135][T13738] should_failslab+0x8c/0xb0 [ 174.256227][T13738] __kvmalloc_node_noprof+0x12e/0x670 [ 174.256256][T13738] ? io_alloc_cache_init+0x36/0xb0 [ 174.256282][T13738] io_alloc_cache_init+0x36/0xb0 [ 174.256315][T13738] io_ring_ctx_alloc+0x2a3/0x670 [ 174.256340][T13738] io_uring_create+0x134/0x630 [ 174.256363][T13738] __se_sys_io_uring_setup+0x1f7/0x210 [ 174.256409][T13738] __x64_sys_io_uring_setup+0x31/0x40 [ 174.256555][T13738] x64_sys_call+0x2b25/0x3000 [ 174.256577][T13738] do_syscall_64+0xd2/0x200 [ 174.256631][T13738] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 174.256653][T13738] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 174.256684][T13738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.256837][T13738] RIP: 0033:0x7f7ac1d8f749 [ 174.256849][T13738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.256864][T13738] RSP: 002b:00007f7ac07eefc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 174.256884][T13738] RAX: ffffffffffffffda RBX: 00007f7ac1fe5fa0 RCX: 00007f7ac1d8f749 [ 174.256900][T13738] RDX: 0000200000000040 RSI: 0000200000000280 RDI: 0000000000001113 [ 174.256913][T13738] RBP: 0000200000000280 R08: 0000000000000000 R09: 0000200000000040 [ 174.256927][T13738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.256938][T13738] R13: 0000200000000000 R14: 0000000000001113 R15: 0000200000000040 [ 174.256954][T13738] [ 174.484221][T13694] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.491358][T13694] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.501087][T13694] bridge_slave_0: entered allmulticast mode [ 174.507723][T13694] bridge_slave_0: entered promiscuous mode [ 174.520514][T13694] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.527579][T13694] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.534852][T13748] FAULT_INJECTION: forcing a failure. [ 174.534852][T13748] name failslab, interval 1, probability 0, space 0, times 0 [ 174.547551][T13748] CPU: 0 UID: 0 PID: 13748 Comm: syz.2.3696 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 174.547654][T13748] Tainted: [W]=WARN [ 174.547660][T13748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.547671][T13748] Call Trace: [ 174.547677][T13748] [ 174.547683][T13748] __dump_stack+0x1d/0x30 [ 174.547705][T13748] dump_stack_lvl+0xe8/0x140 [ 174.547721][T13748] dump_stack+0x15/0x1b [ 174.547736][T13748] should_fail_ex+0x265/0x280 [ 174.547751][T13748] ? audit_log_d_path+0x8d/0x150 [ 174.547768][T13748] should_failslab+0x8c/0xb0 [ 174.547793][T13748] __kmalloc_cache_noprof+0x4c/0x4a0 [ 174.547910][T13748] audit_log_d_path+0x8d/0x150 [ 174.547930][T13748] audit_log_d_path_exe+0x42/0x70 [ 174.547951][T13748] audit_log_task+0x1e9/0x250 [ 174.548017][T13748] audit_seccomp+0x61/0x100 [ 174.548069][T13748] ? __seccomp_filter+0x82d/0x1250 [ 174.548147][T13748] __seccomp_filter+0x83e/0x1250 [ 174.548181][T13748] __secure_computing+0x82/0x150 [ 174.548232][T13748] syscall_trace_enter+0xcf/0x1e0 [ 174.548332][T13748] do_syscall_64+0xac/0x200 [ 174.548380][T13748] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 174.548421][T13748] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 174.548457][T13748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.548475][T13748] RIP: 0033:0x7f7ac1d8e15c [ 174.548490][T13748] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 174.548549][T13748] RSP: 002b:00007f7ac07ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.548568][T13748] RAX: ffffffffffffffda RBX: 00007f7ac1fe5fa0 RCX: 00007f7ac1d8e15c [ 174.548581][T13748] RDX: 000000000000000f RSI: 00007f7ac07ef0a0 RDI: 0000000000000008 [ 174.548594][T13748] RBP: 00007f7ac07ef090 R08: 0000000000000000 R09: 0000000000000000 [ 174.548607][T13748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 174.548620][T13748] R13: 00007f7ac1fe6038 R14: 00007f7ac1fe5fa0 R15: 00007ffc69362b18 [ 174.548702][T13748] [ 174.748597][T13694] bridge_slave_1: entered allmulticast mode [ 174.750940][T13746] 9p: Unknown access argument ²ì7;ÓþÇ‹ÌD: -22 [ 174.755149][T13694] bridge_slave_1: entered promiscuous mode [ 174.796159][T13694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.806759][T13694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.825792][T13757] loop4: detected capacity change from 0 to 1024 [ 174.839021][T13694] team0: Port device team_slave_0 added [ 174.844832][T13757] EXT4-fs (loop4): blocks per group (131072) and clusters per group (1110) inconsistent [ 174.855506][T13694] team0: Port device team_slave_1 added [ 174.878998][T13761] loop7: detected capacity change from 0 to 128 [ 174.895209][T13694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.902207][T13694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.928243][T13694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.941012][T13694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.947954][T13694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.973937][T13694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.984868][T13755] hsr0: entered promiscuous mode [ 174.994882][T13755] hsr_slave_0: left promiscuous mode [ 175.005284][T13755] hsr_slave_1: left promiscuous mode [ 175.014158][T13769] loop4: detected capacity change from 0 to 256 [ 175.020909][T13755] hsr0 (unregistering): left promiscuous mode [ 175.049486][T13694] hsr_slave_0: entered promiscuous mode [ 175.055747][T13694] hsr_slave_1: entered promiscuous mode [ 175.061754][T13694] debugfs: 'hsr0' already exists in 'hsr' [ 175.067471][T13694] Cannot create hsr debugfs directory [ 175.131846][T13763] lo speed is unknown, defaulting to 1000 [ 175.172600][T13784] FAULT_INJECTION: forcing a failure. [ 175.172600][T13784] name failslab, interval 1, probability 0, space 0, times 0 [ 175.185278][T13784] CPU: 1 UID: 0 PID: 13784 Comm: syz.4.3707 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 175.185329][T13784] Tainted: [W]=WARN [ 175.185336][T13784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.185348][T13784] Call Trace: [ 175.185354][T13784] [ 175.185362][T13784] __dump_stack+0x1d/0x30 [ 175.185383][T13784] dump_stack_lvl+0xe8/0x140 [ 175.185403][T13784] dump_stack+0x15/0x1b [ 175.185463][T13784] should_fail_ex+0x265/0x280 [ 175.185482][T13784] ? audit_log_d_path+0x8d/0x150 [ 175.185502][T13784] should_failslab+0x8c/0xb0 [ 175.185525][T13784] __kmalloc_cache_noprof+0x4c/0x4a0 [ 175.185601][T13784] audit_log_d_path+0x8d/0x150 [ 175.185623][T13784] audit_log_d_path_exe+0x42/0x70 [ 175.185649][T13784] audit_log_task+0x1e9/0x250 [ 175.185676][T13784] ? kstrtouint+0x76/0xc0 [ 175.185706][T13784] audit_seccomp+0x61/0x100 [ 175.185730][T13784] ? __seccomp_filter+0x82d/0x1250 [ 175.185752][T13784] __seccomp_filter+0x83e/0x1250 [ 175.185853][T13784] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 175.185882][T13784] ? vfs_write+0x7e8/0x960 [ 175.185975][T13784] __secure_computing+0x82/0x150 [ 175.185997][T13784] syscall_trace_enter+0xcf/0x1e0 [ 175.186095][T13784] do_syscall_64+0xac/0x200 [ 175.186116][T13784] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 175.186142][T13784] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 175.186245][T13784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.186262][T13784] RIP: 0033:0x7f26c267f749 [ 175.186276][T13784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.186293][T13784] RSP: 002b:00007f26c10e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000043 [ 175.186313][T13784] RAX: ffffffffffffffda RBX: 00007f26c28d5fa0 RCX: 00007f26c267f749 [ 175.186378][T13784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.186390][T13784] RBP: 00007f26c10e7090 R08: 0000000000000000 R09: 0000000000000000 [ 175.186403][T13784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.186415][T13784] R13: 00007f26c28d6038 R14: 00007f26c28d5fa0 R15: 00007ffc21933248 [ 175.186434][T13784] [ 175.203518][T13787] FAULT_INJECTION: forcing a failure. [ 175.203518][T13787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.306562][T13791] __nla_validate_parse: 6 callbacks suppressed [ 175.306576][T13791] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3710'. [ 175.310349][T13787] CPU: 0 UID: 0 PID: 13787 Comm: syz.7.3708 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 175.310378][T13787] Tainted: [W]=WARN [ 175.310385][T13787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.310394][T13787] Call Trace: [ 175.310400][T13787] [ 175.310407][T13787] __dump_stack+0x1d/0x30 [ 175.310487][T13787] dump_stack_lvl+0xe8/0x140 [ 175.310506][T13787] dump_stack+0x15/0x1b [ 175.310522][T13787] should_fail_ex+0x265/0x280 [ 175.310557][T13787] should_fail+0xb/0x20 [ 175.310577][T13787] should_fail_usercopy+0x1a/0x20 [ 175.310597][T13787] _copy_from_user+0x1c/0xb0 [ 175.310647][T13787] ___sys_sendmsg+0xc1/0x1d0 [ 175.310678][T13787] __x64_sys_sendmsg+0xd4/0x160 [ 175.310789][T13787] x64_sys_call+0x191e/0x3000 [ 175.310810][T13787] do_syscall_64+0xd2/0x200 [ 175.310829][T13787] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 175.310906][T13787] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 175.310936][T13787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.310957][T13787] RIP: 0033:0x7f2b6ef5f749 [ 175.310972][T13787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.310988][T13787] RSP: 002b:00007f2b6d9bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.311032][T13787] RAX: ffffffffffffffda RBX: 00007f2b6f1b5fa0 RCX: 00007f2b6ef5f749 [ 175.311045][T13787] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 175.311136][T13787] RBP: 00007f2b6d9bf090 R08: 0000000000000000 R09: 0000000000000000 [ 175.311148][T13787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.311160][T13787] R13: 00007f2b6f1b6038 R14: 00007f2b6f1b5fa0 R15: 00007ffe8ef15718 [ 175.311200][T13787] [ 175.363035][T13793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=13793 comm=syz.4.3710 [ 175.481516][T13799] loop4: detected capacity change from 0 to 512 [ 175.632290][ T58] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.643963][T13799] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 175.655811][T13799] EXT4-fs (loop4): orphan cleanup on readonly fs [ 175.667331][T13804] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 175.673848][T13804] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 175.675659][T13799] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.3710: corrupted inode contents [ 175.682016][T13804] vhci_hcd vhci_hcd.0: Device attached [ 175.694039][T13799] EXT4-fs (loop4): Remounting filesystem read-only [ 175.721727][ T58] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.732182][T13799] EXT4-fs (loop4): 1 truncate cleaned up [ 175.737923][ T3862] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 175.748478][ T3862] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 175.759099][ T3862] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 175.771155][T13694] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 175.778740][T13799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 175.779808][T13694] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 175.802807][T13763] chnl_net:caif_netlink_parms(): no params data found [ 175.814031][ T58] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.824821][T11261] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.834051][T13694] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 175.846240][T13694] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 175.859482][T13812] loop4: detected capacity change from 0 to 128 [ 175.872352][ T58] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.903639][T13805] vhci_hcd: connection closed [ 175.903858][ T3862] vhci_hcd: stop threads [ 175.912845][ T3862] vhci_hcd: release socket [ 175.917263][ T3862] vhci_hcd: disconnect device [ 175.928145][T13763] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.935221][T13763] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.942325][T13763] bridge_slave_0: entered allmulticast mode [ 175.948845][T13763] bridge_slave_0: entered promiscuous mode [ 175.955918][T13763] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.963124][T13763] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.970209][ T4777] usb 16-1: enqueue for inactive port 0 [ 175.970349][T13763] bridge_slave_1: entered allmulticast mode [ 175.982843][T13763] bridge_slave_1: entered promiscuous mode [ 176.012158][T13823] netlink: 'syz.2.3715': attribute type 32 has an invalid length. [ 176.012906][T13763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.038300][T13763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.070467][ T58] bridge_slave_1: left allmulticast mode [ 176.076113][ T58] bridge_slave_1: left promiscuous mode [ 176.081797][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.089677][ T58] bridge_slave_0: left allmulticast mode [ 176.095310][ T58] bridge_slave_0: left promiscuous mode [ 176.100978][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.135744][T13831] loop2: detected capacity change from 0 to 128 [ 176.142922][T13831] FAT-fs (loop2): bogus number of directory entries (390) [ 176.150093][T13831] FAT-fs (loop2): Can't find a valid FAT filesystem [ 176.186023][ T4777] usb 16-1: enqueue for inactive port 0 [ 176.284490][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.298457][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.307614][ T58] bond0 (unregistering): Released all slaves [ 176.315883][T13763] team0: Port device team_slave_0 added [ 176.322135][T13831] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3719'. [ 176.331468][T13834] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3720'. [ 176.346516][T13694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.362682][T13763] team0: Port device team_slave_1 added [ 176.384402][ T58] hsr_slave_0: left promiscuous mode [ 176.392112][ T58] hsr_slave_1: left promiscuous mode [ 176.397529][T13842] loop4: detected capacity change from 0 to 256 [ 176.397668][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.411265][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.422399][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.429793][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.442089][T13842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3724'. [ 176.453351][ T58] veth1_macvtap: left promiscuous mode [ 176.458902][ T58] veth0_macvtap: left promiscuous mode [ 176.464531][ T58] veth1_vlan: left promiscuous mode [ 176.470127][ T58] veth0_vlan: left promiscuous mode [ 176.496994][T13852] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3724'. [ 176.522425][T13852] program syz.4.3724 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.542518][T13854] FAULT_INJECTION: forcing a failure. [ 176.542518][T13854] name failslab, interval 1, probability 0, space 0, times 0 [ 176.555221][T13854] CPU: 0 UID: 0 PID: 13854 Comm: syz.2.3729 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 176.555248][T13854] Tainted: [W]=WARN [ 176.555255][T13854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 176.555265][T13854] Call Trace: [ 176.555270][T13854] [ 176.555278][T13854] __dump_stack+0x1d/0x30 [ 176.555299][T13854] dump_stack_lvl+0xe8/0x140 [ 176.555367][T13854] dump_stack+0x15/0x1b [ 176.555383][T13854] should_fail_ex+0x265/0x280 [ 176.555446][T13854] should_failslab+0x8c/0xb0 [ 176.555483][T13854] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 176.555520][T13854] ? __request_module+0x1df/0x3e0 [ 176.555552][T13854] ? should_failslab+0x8c/0xb0 [ 176.555613][T13854] kstrdup+0x3e/0xd0 [ 176.555633][T13854] __request_module+0x1df/0x3e0 [ 176.555660][T13854] blk_request_module+0x108/0x1e0 [ 176.555682][T13854] blkdev_get_no_open+0x4b/0x100 [ 176.555770][T13854] bdev_file_open_by_dev+0xa5/0x250 [ 176.555789][T13854] swsusp_check+0x3f/0x290 [ 176.555814][T13854] software_resume+0x41/0x2f0 [ 176.555902][T13854] resume_store+0x2d9/0x3d0 [ 176.555925][T13854] ? __pfx_resume_store+0x10/0x10 [ 176.555950][T13854] kobj_attr_store+0x4a/0x70 [ 176.556022][T13854] ? __pfx_kobj_attr_store+0x10/0x10 [ 176.556047][T13854] sysfs_kf_write+0xfe/0x120 [ 176.556070][T13854] ? __pfx_sysfs_kf_write+0x10/0x10 [ 176.556093][T13854] kernfs_fop_write_iter+0x1eb/0x300 [ 176.556176][T13854] iter_file_splice_write+0x666/0xa60 [ 176.556205][T13854] ? __pfx_iter_file_splice_write+0x10/0x10 [ 176.556228][T13854] direct_splice_actor+0x156/0x2a0 [ 176.556251][T13854] ? shmem_file_splice_read+0x1/0x600 [ 176.556350][T13854] splice_direct_to_actor+0x312/0x680 [ 176.556372][T13854] ? __pfx_direct_splice_actor+0x10/0x10 [ 176.556394][T13854] do_splice_direct+0xda/0x150 [ 176.556412][T13854] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 176.556449][T13854] do_sendfile+0x380/0x650 [ 176.556479][T13854] __x64_sys_sendfile64+0x105/0x150 [ 176.556516][T13854] x64_sys_call+0x2bb4/0x3000 [ 176.556561][T13854] do_syscall_64+0xd2/0x200 [ 176.556578][T13854] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 176.556601][T13854] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 176.556653][T13854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.556675][T13854] RIP: 0033:0x7f7ac1d8f749 [ 176.556691][T13854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.556776][T13854] RSP: 002b:00007f7ac07ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 176.556794][T13854] RAX: ffffffffffffffda RBX: 00007f7ac1fe5fa0 RCX: 00007f7ac1d8f749 [ 176.556805][T13854] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 176.556815][T13854] RBP: 00007f7ac07ef090 R08: 0000000000000000 R09: 0000000000000000 [ 176.556893][T13854] R10: 00008000fffffffc R11: 0000000000000246 R12: 0000000000000002 [ 176.556906][T13854] R13: 00007f7ac1fe6038 R14: 00007f7ac1fe5fa0 R15: 00007ffc69362b18 [ 176.556926][T13854] [ 176.850287][ T58] team0 (unregistering): Port device team_slave_1 removed [ 176.862334][ T58] team0 (unregistering): Port device team_slave_0 removed [ 176.896045][T13763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.903106][T13763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.929191][T13763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.946504][T13694] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.953915][T13763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.960944][T13763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.987003][T13763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.039846][ T3862] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.046909][ T3862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.062357][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 177.062371][ T29] audit: type=1326 audit(1764495464.040:22175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13879 comm="syz.7.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6ef5f749 code=0x7ffc0000 [ 177.092249][ T29] audit: type=1326 audit(1764495464.040:22176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13879 comm="syz.7.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6ef5f749 code=0x7ffc0000 [ 177.115910][ T29] audit: type=1326 audit(1764495464.040:22177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13879 comm="syz.7.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b6ef5f749 code=0x7ffc0000 [ 177.139473][ T29] audit: type=1326 audit(1764495464.040:22178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13879 comm="syz.7.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6ef5f749 code=0x7ffc0000 [ 177.163069][ T29] audit: type=1326 audit(1764495464.040:22179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13879 comm="syz.7.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b6ef5f749 code=0x7ffc0000 [ 177.186630][ T29] audit: type=1326 audit(1764495464.040:22180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13879 comm="syz.7.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6ef5f749 code=0x7ffc0000 [ 177.210232][ T29] audit: type=1326 audit(1764495464.040:22181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13879 comm="syz.7.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b6ef5f749 code=0x7ffc0000 [ 177.233821][ T29] audit: type=1326 audit(1764495464.040:22182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13879 comm="syz.7.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6ef5f749 code=0x7ffc0000 [ 177.257400][ T29] audit: type=1326 audit(1764495464.040:22183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13879 comm="syz.7.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f2b6ef5f749 code=0x7ffc0000 [ 177.288655][ T29] audit: type=1326 audit(1764495464.120:22184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13879 comm="syz.7.3732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6ef5f749 code=0x7ffc0000 [ 177.299766][T13882] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3733'. [ 177.329960][ T3879] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.337164][ T3879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.360114][T13763] hsr_slave_0: entered promiscuous mode [ 177.368705][T13763] hsr_slave_1: entered promiscuous mode [ 177.374724][T13763] debugfs: 'hsr0' already exists in 'hsr' [ 177.380497][T13763] Cannot create hsr debugfs directory [ 177.400186][T13880] lo speed is unknown, defaulting to 1000 [ 177.410029][T13890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3735'. [ 177.412668][T13694] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.420823][T13890] FAULT_INJECTION: forcing a failure. [ 177.420823][T13890] name failslab, interval 1, probability 0, space 0, times 0 [ 177.429473][T13694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.452493][T13890] CPU: 1 UID: 0 PID: 13890 Comm: syz.4.3735 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 177.452547][T13890] Tainted: [W]=WARN [ 177.452554][T13890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 177.452567][T13890] Call Trace: [ 177.452575][T13890] [ 177.452583][T13890] __dump_stack+0x1d/0x30 [ 177.452670][T13890] dump_stack_lvl+0xe8/0x140 [ 177.452690][T13890] dump_stack+0x15/0x1b [ 177.452708][T13890] should_fail_ex+0x265/0x280 [ 177.452727][T13890] should_failslab+0x8c/0xb0 [ 177.452816][T13890] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 177.452842][T13890] ? __alloc_skb+0x101/0x320 [ 177.452895][T13890] __alloc_skb+0x101/0x320 [ 177.452919][T13890] netlink_ack+0xfd/0x500 [ 177.452948][T13890] netlink_rcv_skb+0x192/0x220 [ 177.453034][T13890] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 177.453088][T13890] nfnetlink_rcv+0x167/0x16c0 [ 177.453108][T13890] ? kmem_cache_free+0xe4/0x3d0 [ 177.453133][T13890] ? __kfree_skb+0x109/0x150 [ 177.453164][T13890] ? nlmon_xmit+0x4f/0x60 [ 177.453194][T13890] ? consume_skb+0x49/0x150 [ 177.453273][T13890] ? nlmon_xmit+0x4f/0x60 [ 177.453295][T13890] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 177.453324][T13890] ? __dev_queue_xmit+0x1200/0x2000 [ 177.453339][T13890] ? __dev_queue_xmit+0x182/0x2000 [ 177.453360][T13890] ? ref_tracker_free+0x37d/0x3e0 [ 177.453460][T13890] ? __netlink_deliver_tap+0x4dc/0x500 [ 177.453479][T13890] netlink_unicast+0x5c0/0x690 [ 177.453508][T13890] netlink_sendmsg+0x58b/0x6b0 [ 177.453652][T13890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.453684][T13890] __sock_sendmsg+0x145/0x180 [ 177.453708][T13890] ____sys_sendmsg+0x31e/0x4e0 [ 177.453730][T13890] ___sys_sendmsg+0x17b/0x1d0 [ 177.453762][T13890] __x64_sys_sendmsg+0xd4/0x160 [ 177.453839][T13890] x64_sys_call+0x191e/0x3000 [ 177.453857][T13890] do_syscall_64+0xd2/0x200 [ 177.453877][T13890] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 177.453904][T13890] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 177.453957][T13890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.453978][T13890] RIP: 0033:0x7f26c267f749 [ 177.453994][T13890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.454049][T13890] RSP: 002b:00007f26c10e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.454069][T13890] RAX: ffffffffffffffda RBX: 00007f26c28d5fa0 RCX: 00007f26c267f749 [ 177.454082][T13890] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000a [ 177.454095][T13890] RBP: 00007f26c10e7090 R08: 0000000000000000 R09: 0000000000000000 [ 177.454107][T13890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.454120][T13890] R13: 00007f26c28d6038 R14: 00007f26c28d5fa0 R15: 00007ffc21933248 [ 177.454139][T13890] [ 177.551047][ T4777] usb usb16-port1: attempt power cycle [ 177.771288][T13898] loop4: detected capacity change from 0 to 128 [ 177.785584][T13694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.830484][T13763] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 177.841851][T13763] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 177.852858][T13763] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 177.862758][T13763] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 177.901725][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 177.909280][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 177.916693][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 177.924223][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 177.931693][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 177.932599][T13912] loop2: detected capacity change from 0 to 256 [ 177.939241][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 177.952923][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 177.960359][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 177.967793][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 177.975276][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 177.993195][T13912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3741'. [ 178.008980][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 178.035627][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3742'. [ 178.045560][T13925] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3741'. [ 178.067339][T13912] program syz.2.3741 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.091691][T13763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.128195][T13763] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.141419][ T3862] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.148496][ T3862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.170710][ T3862] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.177790][ T3862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.199927][T13694] veth0_vlan: entered promiscuous mode [ 178.206318][T13929] Cannot find del_set index 0 as target [ 178.221465][T13929] netlink: 'syz.7.3743': attribute type 1 has an invalid length. [ 178.230767][T13694] veth1_vlan: entered promiscuous mode [ 178.274204][T13944] loop2: detected capacity change from 0 to 512 [ 178.289910][T13694] veth0_macvtap: entered promiscuous mode [ 178.299804][T13944] EXT4-fs: Ignoring removed nobh option [ 178.309239][T13694] veth1_macvtap: entered promiscuous mode [ 178.329452][T13694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.340109][T13944] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.3746: corrupted inode contents [ 178.359681][T13694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.362756][T13944] EXT4-fs (loop2): Remounting filesystem read-only [ 178.388757][T13763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.398744][T13944] EXT4-fs (loop2): 1 truncate cleaned up [ 178.404853][T13944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.437193][T13944] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.443919][ T3862] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.492506][ T3862] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.514901][ T3862] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.553978][ T3862] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.554678][T13965] FAULT_INJECTION: forcing a failure. [ 178.554678][T13965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.575869][T13965] CPU: 0 UID: 0 PID: 13965 Comm: syz.8.3678 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 178.575902][T13965] Tainted: [W]=WARN [ 178.575909][T13965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 178.575922][T13965] Call Trace: [ 178.575927][T13965] [ 178.575935][T13965] __dump_stack+0x1d/0x30 [ 178.575967][T13965] dump_stack_lvl+0xe8/0x140 [ 178.576019][T13965] dump_stack+0x15/0x1b [ 178.576036][T13965] should_fail_ex+0x265/0x280 [ 178.576055][T13965] should_fail+0xb/0x20 [ 178.576072][T13965] should_fail_usercopy+0x1a/0x20 [ 178.576093][T13965] _copy_from_user+0x1c/0xb0 [ 178.576173][T13965] kstrtouint_from_user+0x69/0xf0 [ 178.576250][T13965] ? 0xffffffff81000000 [ 178.576261][T13965] ? selinux_file_permission+0x1e4/0x320 [ 178.576356][T13965] proc_fail_nth_write+0x50/0x160 [ 178.576386][T13965] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 178.576470][T13965] vfs_write+0x269/0x960 [ 178.576491][T13965] ? vfs_read+0x4e6/0x770 [ 178.576513][T13965] ? __rcu_read_unlock+0x4f/0x70 [ 178.576567][T13965] ? __fget_files+0x184/0x1c0 [ 178.576593][T13965] ksys_write+0xda/0x1a0 [ 178.576618][T13965] __x64_sys_write+0x40/0x50 [ 178.576641][T13965] x64_sys_call+0x2802/0x3000 [ 178.576714][T13965] do_syscall_64+0xd2/0x200 [ 178.576731][T13965] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 178.576798][T13965] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 178.576887][T13965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.576940][T13965] RIP: 0033:0x7f4d8c48e1ff [ 178.577027][T13965] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 178.577055][T13965] RSP: 002b:00007f4d8aeef030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 178.577072][T13965] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4d8c48e1ff [ 178.577085][T13965] RDX: 0000000000000001 RSI: 00007f4d8aeef0a0 RDI: 0000000000000005 [ 178.577098][T13965] RBP: 00007f4d8aeef090 R08: 0000000000000000 R09: 0000000000000000 [ 178.577112][T13965] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 178.577125][T13965] R13: 00007f4d8c6e6038 R14: 00007f4d8c6e5fa0 R15: 00007ffd4fc2af08 [ 178.577211][T13965] [ 178.577585][T11850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.676093][T13968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13968 comm=syz.8.3750 [ 178.708183][T13763] veth0_vlan: entered promiscuous mode [ 178.871718][T13975] loop2: detected capacity change from 0 to 128 [ 178.901708][T13975] bio_check_eod: 150 callbacks suppressed [ 178.901724][T13975] syz.2.3749: attempt to access beyond end of device [ 178.901724][T13975] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 178.941190][T13975] syz.2.3749: attempt to access beyond end of device [ 178.941190][T13975] loop2: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 178.970656][T13763] veth1_vlan: entered promiscuous mode [ 178.978794][T13975] syz.2.3749: attempt to access beyond end of device [ 178.978794][T13975] loop2: rw=2049, sector=150, nr_sectors = 2 limit=128 [ 178.992312][T13975] buffer_io_error: 94 callbacks suppressed [ 178.992325][T13975] Buffer I/O error on dev loop2, logical block 75, lost async page write [ 179.000790][T13763] veth0_macvtap: entered promiscuous mode [ 179.012568][T13981] FAULT_INJECTION: forcing a failure. [ 179.012568][T13981] name failslab, interval 1, probability 0, space 0, times 0 [ 179.014116][T13763] veth1_macvtap: entered promiscuous mode [ 179.025173][T13981] CPU: 1 UID: 0 PID: 13981 Comm: syz.8.3752 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 179.025206][T13981] Tainted: [W]=WARN [ 179.025211][T13981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 179.025221][T13981] Call Trace: [ 179.025227][T13981] [ 179.025233][T13981] __dump_stack+0x1d/0x30 [ 179.025258][T13981] dump_stack_lvl+0xe8/0x140 [ 179.025385][T13981] dump_stack+0x15/0x1b [ 179.025402][T13981] should_fail_ex+0x265/0x280 [ 179.025420][T13981] should_failslab+0x8c/0xb0 [ 179.025469][T13981] kmem_cache_alloc_noprof+0x50/0x480 [ 179.025544][T13981] ? xfrm_state_alloc+0x2c/0x190 [ 179.025567][T13981] xfrm_state_alloc+0x2c/0x190 [ 179.025589][T13981] pfkey_add+0x3e5/0x12e0 [ 179.025658][T13981] pfkey_sendmsg+0x718/0x900 [ 179.025721][T13981] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 179.025767][T13981] __sock_sendmsg+0x145/0x180 [ 179.025864][T13981] ____sys_sendmsg+0x31e/0x4e0 [ 179.025882][T13981] ___sys_sendmsg+0x17b/0x1d0 [ 179.025974][T13981] __x64_sys_sendmsg+0xd4/0x160 [ 179.025996][T13981] x64_sys_call+0x191e/0x3000 [ 179.026016][T13981] do_syscall_64+0xd2/0x200 [ 179.026036][T13981] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 179.026100][T13981] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 179.026129][T13981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.026148][T13981] RIP: 0033:0x7f4d8c48f749 [ 179.026164][T13981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.026180][T13981] RSP: 002b:00007f4d8aeef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.026227][T13981] RAX: ffffffffffffffda RBX: 00007f4d8c6e5fa0 RCX: 00007f4d8c48f749 [ 179.026240][T13981] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 179.026258][T13981] RBP: 00007f4d8aeef090 R08: 0000000000000000 R09: 0000000000000000 [ 179.026270][T13981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.026282][T13981] R13: 00007f4d8c6e6038 R14: 00007f4d8c6e5fa0 R15: 00007ffd4fc2af08 [ 179.026300][T13981] [ 179.105769][T13975] syz.2.3749: attempt to access beyond end of device [ 179.105769][T13975] loop2: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 179.121809][T13763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.123351][T13975] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 179.132280][T13763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.283457][T13987] loop8: detected capacity change from 0 to 2048 [ 179.293085][T13975] syz.2.3749: attempt to access beyond end of device [ 179.293085][T13975] loop2: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 179.303779][T13989] lo speed is unknown, defaulting to 1000 [ 179.307122][T13975] syz.2.3749: attempt to access beyond end of device [ 179.307122][T13975] loop2: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 179.325620][T13975] Buffer I/O error on dev loop2, logical block 87, lost async page write [ 179.334821][T13975] syz.2.3749: attempt to access beyond end of device [ 179.334821][T13975] loop2: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 179.348244][T13975] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 179.358914][T13975] syz.2.3749: attempt to access beyond end of device [ 179.358914][T13975] loop2: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 179.373194][T13975] syz.2.3749: attempt to access beyond end of device [ 179.373194][T13975] loop2: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 179.386694][T13975] Buffer I/O error on dev loop2, logical block 91, lost async page write [ 179.395954][T13975] syz.2.3749: attempt to access beyond end of device [ 179.395954][T13975] loop2: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 179.409398][T13975] Buffer I/O error on dev loop2, logical block 92, lost async page write [ 179.440694][ T58] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.449610][ T58] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.475985][ T3408] ================================================================== [ 179.484081][ T3408] BUG: KCSAN: data-race in wg_index_hashtable_insert / wg_index_hashtable_lookup [ 179.493204][ T3408] [ 179.495525][ T3408] write to 0xffff88810a8c8dec of 4 bytes by task 3421 on cpu 0: [ 179.503143][ T3408] wg_index_hashtable_insert+0xe3/0x2b0 [ 179.508701][ T3408] wg_noise_handshake_create_response+0x52c/0x5e0 [ 179.515118][ T3408] wg_packet_send_handshake_response+0x6d/0x120 [ 179.521354][ T3408] wg_packet_handshake_receive_worker+0x3d2/0x5e0 [ 179.527761][ T3408] process_scheduled_works+0x4ce/0x9d0 [ 179.533216][ T3408] worker_thread+0x582/0x770 [ 179.537790][ T3408] kthread+0x489/0x510 [ 179.541850][ T3408] ret_from_fork+0x122/0x1b0 [ 179.546422][ T3408] ret_from_fork_asm+0x1a/0x30 [ 179.551173][ T3408] [ 179.553481][ T3408] read to 0xffff88810a8c8dec of 4 bytes by task 3408 on cpu 1: [ 179.561000][ T3408] wg_index_hashtable_lookup+0x6b/0x130 [ 179.566537][ T3408] wg_noise_handshake_consume_response+0x12a/0x800 [ 179.573021][ T3408] wg_packet_handshake_receive_worker+0x3e0/0x5e0 [ 179.579423][ T3408] process_scheduled_works+0x4ce/0x9d0 [ 179.584871][ T3408] worker_thread+0x582/0x770 [ 179.589440][ T3408] kthread+0x489/0x510 [ 179.593492][ T3408] ret_from_fork+0x122/0x1b0 [ 179.598067][ T3408] ret_from_fork_asm+0x1a/0x30 [ 179.602813][ T3408] [ 179.605118][ T3408] value changed: 0x30008f50 -> 0x1ace8c2b [ 179.610812][ T3408] [ 179.613116][ T3408] Reported by Kernel Concurrency Sanitizer on: [ 179.619248][ T3408] CPU: 1 UID: 0 PID: 3408 Comm: kworker/1:4 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 179.630600][ T3408] Tainted: [W]=WARN [ 179.634390][ T3408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 179.644427][ T3408] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker [ 179.651615][ T3408] ================================================================== [ 179.678625][ T4777] usb usb16-port1: unable to enumerate USB device [ 179.685381][ T58] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.700731][ T58] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.715736][T13975] Buffer I/O error on dev loop2, logical block 103, lost async page write [ 179.732548][T13989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13989 comm=syz.7.3754 [ 179.735929][T13975] Buffer I/O error on dev loop2, logical block 104, lost async page write