last executing test programs: 2.997825769s ago: executing program 0 (id=68): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8000) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x2000800, &(0x7f0000000040)=ANY=[], 0x1, 0x2e0, &(0x7f0000000640)="$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") r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x5}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffe000000000002, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="00004000070000001d0000002b1eca30e60819fb485f5ff33f277ac80a7a11d0f7caed5dabb91eabf508f866c0dbeba1fa389da5ba79eacf617c7b839ef4839507442ec311698f1ba0c187c4513be61cfa7d139656ad"]) r4 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x2, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xf}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x7}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff2d29}]}, 0x48}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0xdb) setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x16, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0xb, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000c080}, 0x10000800) r7 = socket$tipc(0x1e, 0x5, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x200004}}, 0x10) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x22) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.760211703s ago: executing program 3 (id=75): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000015000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x15, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x82}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8004}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000380)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000700)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYRES8, @ANYRES64, @ANYRES8=0x0, @ANYRES64, @ANYRES8], 0x0, 0x0, &(0x7f0000000080)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), 0x0, 0x3, r4}, 0x38) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x800, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000140)="c0", 0x1, 0x40050c4, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) 2.560539733s ago: executing program 3 (id=77): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xff2e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$binfmt_script(r5, &(0x7f0000000180)={'#! ', './file0'}, 0xb) r6 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.stat\x00', 0x5000000, 0x0) sendfile(r3, r6, 0x0, 0xc486) write$binfmt_register(r6, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x9, 0x3a, '}:+-}*&*-]^', 0x3a, '\\', 0x3a, './file0', 0x3a, [0x0, 0x4f, 0x43, 0x43, 0x4f]}, 0x38) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18, "0040001e1d113c812e5d6000"}) syz_open_pts(0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x15}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r8, 0x0, 0x1}, 0x18) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000a00)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r11, 0x0, 0x10000001}, 0x18) 2.49233533s ago: executing program 3 (id=78): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) 2.343759154s ago: executing program 0 (id=79): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x433, &(0x7f0000000e00)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file2\x00', &(0x7f00000000c0), &(0x7f0000000280)=ANY=[], 0xfe37, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x194, 0x0, &(0x7f0000000780)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) sync_file_range(r1, 0x6, 0x9fd, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006d2000/0x1000)=nil, 0x1000, 0x100000e, 0x8, 0x1) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3f, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c00"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000000100000"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r4, 0x6c0ea000) pidfd_getfd(0xffffffffffffffff, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='ext4_journal_start_reserved\x00', r0}, 0x18) ioprio_set$pid(0x3, 0x0, 0x2007) r5 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r6, 0x2, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r5, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2, r5}]) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 1.876940191s ago: executing program 0 (id=85): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, 0x0, 0x0) 1.796664779s ago: executing program 0 (id=88): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0xa, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x400000, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x40}}, 0x0) 1.745841354s ago: executing program 0 (id=89): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0x20000000002}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT=r2], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x73ce}}, './file0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xcd46, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4008891}, 0x10) r11 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r11, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000ff0f00000029000000390000002c00020100000000"], 0x18}, 0x24040841) syz_emit_ethernet(0x4f, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffe00000000086dd6c2d01000019840100000000000000000002000000010102fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r12}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r7, r8, 0x25, 0x4, @val=@tcx}, 0x1c) lsm_set_self_attr(0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000009c0)={0xfffffff9}, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r7, r6, 0xc, 0x0, @void}, 0x10) 1.624596296s ago: executing program 3 (id=92): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x579b, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18010d5693231f00000018000000021811000000000000003ee7b07da4748f2aba71dd7429e4da176b3246819bd78e07ceebca722b4f744e35247dc64dcdbe8e5dcb68f1ed207ccc664fb642d95a317738472d6bd99f7045b597b702cb765547c33fac060b4472a90a7c9f3519929736cdf3aab42453f80fe55096b88946554ca4beadf7670fdc02a79f2894608a61ee4729f203ab95d747b5", @ANYRES32, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80080}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}], 0x1, 0x4000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0xffffff5b, 0x0, 0x0, 0x0, r0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1.558737713s ago: executing program 3 (id=93): setfsuid(0xee00) 1.556114744s ago: executing program 0 (id=94): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) connect$unix(0xffffffffffffffff, 0x0, 0x0) mq_unlink(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r2, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000), 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8) 1.473684832s ago: executing program 3 (id=95): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) connect$unix(0xffffffffffffffff, 0x0, 0x0) mq_unlink(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r2, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000), 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8) 1.269901982s ago: executing program 2 (id=99): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(0x0, 0x10b, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x441, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xff2e) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000800, 0x300) r3 = eventfd2(0xffffffff, 0x1) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000001800)={{r3}, "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"}) write$eventfd(r3, &(0x7f0000000080)=0xffffffff00000000, 0x8) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)={0x4}) read$eventfd(r3, &(0x7f0000000040), 0x8) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff000000027110b7000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb512}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) syz_open_pts(r1, 0x0) 1.168187552s ago: executing program 1 (id=101): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_timeval(r2, 0x1, 0xa, &(0x7f0000000200), &(0x7f0000000400)=0x10) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0x1, 0x0, 0x0, 0x727c45cd4283345, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$BLKTRACESETUP(r6, 0x1276, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r4}, 0x18) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) rmdir(0x0) recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) io_uring_register$IORING_REGISTER_CLOCK(r3, 0x1d, &(0x7f00000000c0)={0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd8}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'xfrm0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 852.319144ms ago: executing program 4 (id=103): syz_io_uring_setup(0x18d6, 0x0, &(0x7f0000ffe000), 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000000401000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x5c}) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010001f00000100a6da9156de6ea16a00", @ANYRES32=0x0, @ANYBLOB="0000000008440000240012800b00010067656e65766500001400028005000c0001000000050009000100000008000a00", @ANYRES32, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 813.709808ms ago: executing program 1 (id=104): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 812.689968ms ago: executing program 1 (id=105): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0xfff1, 0xf}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x17}, @TCA_PIE_ALPHA={0x8, 0x4, 0x1b}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xe, 0x8, 0x8, 0x1, 0x9, 0x2}}, {0x4}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800060000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000190000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xbef, 0x0, 0x0, 0x41100, 0x12, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = gettid() r7 = getpgrp(0xffffffffffffffff) tgkill(r6, r7, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r11, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r12}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=r12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) 603.686399ms ago: executing program 1 (id=106): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) semget$private(0x0, 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500000000090000000002008008"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 453.630174ms ago: executing program 1 (id=107): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000191401"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000030601040000000000000000070000020500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) r6 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2, 0x0, 0x56}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x56f, &(0x7f0000000140)="$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") r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x28200, 0x3) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r10, 0xc0185879, &(0x7f0000000000)={@id={0x2, 0x0, @d}}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 415.837228ms ago: executing program 4 (id=108): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0x0, 0xfffffffd}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000040)={0x5, 0x6, 0x2, 0x6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) syz_io_uring_setup(0xd0, &(0x7f0000000480)={0x0, 0x2cab, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000001400)='sched_switch\x00', r7}, 0x18) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[@ANYBLOB="1d000000040000000200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000000000000000000000000000000070000000000"], 0x50) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x10000003}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r9, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x10, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x3, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r14, r15, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r13, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) 412.992068ms ago: executing program 2 (id=109): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x2, 0x0, 0x2}, 0x1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r5 = socket$inet6(0xa, 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r6, r7, 0xfffffffffffffc01, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x80000000, 0x4e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x10, 0x7, 0x0, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r9}, 0x18) r10 = syz_io_uring_setup(0x5a90, &(0x7f0000001cc0)={0x0, 0x8, 0x400, 0x40000, 0x101}, &(0x7f0000000400)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1000}, {&(0x7f0000000440)=""/107}, {&(0x7f0000000500)=""/193}, {&(0x7f00000003c0)=""/18}, {&(0x7f0000000700)=""/148}, {&(0x7f0000002840)=""/245}, {&(0x7f0000002940)=""/226}], 0x11b, 0x1d}) socket(0xa, 0x3, 0x40) io_uring_enter(r10, 0x8aa, 0x0, 0x0, 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f00000003c0)='kfree\x00', r13, 0x0, 0x2}, 0x18) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRESDEC=r4, @ANYRES32=r6, @ANYRESDEC=r13], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r14}, 0x4) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r14, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kfree\x00', r15, 0x0, 0x4000000080000000}, 0x18) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r16) sendmsg$BATADV_CMD_TP_METER(r16, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 294.55757ms ago: executing program 4 (id=110): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_timeval(r2, 0x1, 0xa, &(0x7f0000000200), &(0x7f0000000400)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x47, 0x0, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r6}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd8}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'xfrm0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 293.14097ms ago: executing program 2 (id=111): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1018, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x40000008, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x6011, r2, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff47}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000004000000000100000104000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000018c95509a1b9121000"/29], 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) unshare(0xa000200) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) 246.402305ms ago: executing program 4 (id=112): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 192.14646ms ago: executing program 2 (id=113): openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) 191.20121ms ago: executing program 4 (id=114): getuid() socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x101000, 0x0, 0xc}, 0x18) mkdirat(r1, &(0x7f0000000280)='./file0\x00', 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4005) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 125.963327ms ago: executing program 1 (id=115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) inotify_init1(0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) sendfile(r2, r3, 0x0, 0x200) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) r4 = open(&(0x7f0000000140)='./file1\x00', 0x200, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000080000000000000005000000152000000000defffb05b49a546d6ff307"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='rpcgss_svc_seqno_low\x00', r4}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) socket(0x10, 0x3, 0x0) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94}, 0x8808) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) 125.359037ms ago: executing program 2 (id=116): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) semget$private(0x0, 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500000000090000000002008008"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 6.978399ms ago: executing program 2 (id=117): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) connect$unix(0xffffffffffffffff, 0x0, 0x0) mq_unlink(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r2, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000), 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8) 0s ago: executing program 4 (id=118): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001114210100002907fedbdf2508004b00e1ec3e6428400000"], 0x18}, 0x1, 0x0, 0x0, 0x2000}, 0x4000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000000000000000000500000a28000000000a030000000000001c00000a0000070800024000000002090001ff73797a31000000002c000000030a010101000000000000000a0000070900010073797a31000000000900030010c8a3cf6cac73641400000011b87a6d27d9"], 0x7c}, 0x1, 0x0, 0x0, 0x4044}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100da"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xe, 0x5, &(0x7f0000000180)=ANY=[@ANYRES16=r3], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) r6 = getpgrp(0x0) fcntl$lock(r1, 0x24, &(0x7f0000000140)={0x2, 0x1, 0x7ff, 0x0, r6}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1018, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r8, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) close_range(r7, 0xffffffffffffffff, 0x400000000000000) open(&(0x7f00000003c0)='./file0\x00', 0x62700, 0xf0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r9) kernel console output (not intermixed with test programs): [ 20.343403][ T29] audit: type=1400 audit(1763112227.588:60): avc: denied { rlimitinh } for pid=3191 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.346223][ T29] audit: type=1400 audit(1763112227.588:61): avc: denied { siginh } for pid=3191 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts. [ 28.149241][ T29] audit: type=1400 audit(1763112235.408:62): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.172227][ T29] audit: type=1400 audit(1763112235.428:63): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.173175][ T3303] cgroup: Unknown subsys name 'net' [ 28.200004][ T29] audit: type=1400 audit(1763112235.458:64): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.359581][ T3303] cgroup: Unknown subsys name 'cpuset' [ 28.365913][ T3303] cgroup: Unknown subsys name 'rlimit' [ 28.476015][ T29] audit: type=1400 audit(1763112235.728:65): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.499271][ T29] audit: type=1400 audit(1763112235.728:66): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.519761][ T29] audit: type=1400 audit(1763112235.728:67): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.540268][ T29] audit: type=1400 audit(1763112235.728:68): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.560588][ T29] audit: type=1400 audit(1763112235.728:69): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.568706][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.585379][ T29] audit: type=1400 audit(1763112235.728:70): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.617151][ T29] audit: type=1400 audit(1763112235.858:71): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.657111][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.854369][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 29.906664][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 29.940090][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 29.960300][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.967378][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.974583][ T3314] bridge_slave_0: entered allmulticast mode [ 29.981060][ T3314] bridge_slave_0: entered promiscuous mode [ 29.993138][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 30.006720][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.013950][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.021132][ T3314] bridge_slave_1: entered allmulticast mode [ 30.027438][ T3314] bridge_slave_1: entered promiscuous mode [ 30.069166][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.091076][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.113973][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.121086][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.128220][ T3318] bridge_slave_0: entered allmulticast mode [ 30.134637][ T3318] bridge_slave_0: entered promiscuous mode [ 30.141418][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.148474][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.155712][ T3318] bridge_slave_1: entered allmulticast mode [ 30.162082][ T3318] bridge_slave_1: entered promiscuous mode [ 30.196772][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.203880][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.211039][ T3313] bridge_slave_0: entered allmulticast mode [ 30.217419][ T3313] bridge_slave_0: entered promiscuous mode [ 30.229506][ T3314] team0: Port device team_slave_0 added [ 30.244746][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.251883][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.259042][ T3313] bridge_slave_1: entered allmulticast mode [ 30.265528][ T3313] bridge_slave_1: entered promiscuous mode [ 30.271734][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.278789][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.285953][ T3320] bridge_slave_0: entered allmulticast mode [ 30.292307][ T3320] bridge_slave_0: entered promiscuous mode [ 30.299472][ T3314] team0: Port device team_slave_1 added [ 30.306132][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.318655][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.338467][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.345767][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.352886][ T3320] bridge_slave_1: entered allmulticast mode [ 30.359324][ T3320] bridge_slave_1: entered promiscuous mode [ 30.380723][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.400879][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.407829][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.433787][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.445298][ T3318] team0: Port device team_slave_0 added [ 30.451860][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.465900][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 30.474647][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.481661][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.507589][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.521461][ T3318] team0: Port device team_slave_1 added [ 30.532783][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.563006][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.572636][ T3313] team0: Port device team_slave_0 added [ 30.586416][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.593386][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.619350][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.635541][ T3313] team0: Port device team_slave_1 added [ 30.648465][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.655537][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.681463][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.711433][ T3314] hsr_slave_0: entered promiscuous mode [ 30.717634][ T3314] hsr_slave_1: entered promiscuous mode [ 30.724349][ T3320] team0: Port device team_slave_0 added [ 30.746121][ T3320] team0: Port device team_slave_1 added [ 30.757644][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.764630][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.790548][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.806277][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.813425][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.820577][ T3316] bridge_slave_0: entered allmulticast mode [ 30.826975][ T3316] bridge_slave_0: entered promiscuous mode [ 30.843629][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.850606][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.876550][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.896656][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.903828][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.911108][ T3316] bridge_slave_1: entered allmulticast mode [ 30.917434][ T3316] bridge_slave_1: entered promiscuous mode [ 30.926238][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.933211][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.959187][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.970343][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.977299][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.003348][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.024986][ T3318] hsr_slave_0: entered promiscuous mode [ 31.031023][ T3318] hsr_slave_1: entered promiscuous mode [ 31.036788][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 31.042536][ T3318] Cannot create hsr debugfs directory [ 31.071777][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.082520][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.108807][ T3313] hsr_slave_0: entered promiscuous mode [ 31.114950][ T3313] hsr_slave_1: entered promiscuous mode [ 31.120866][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 31.126590][ T3313] Cannot create hsr debugfs directory [ 31.143974][ T3316] team0: Port device team_slave_0 added [ 31.170775][ T3316] team0: Port device team_slave_1 added [ 31.185152][ T3320] hsr_slave_0: entered promiscuous mode [ 31.191190][ T3320] hsr_slave_1: entered promiscuous mode [ 31.197015][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 31.202785][ T3320] Cannot create hsr debugfs directory [ 31.226285][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.233464][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.259378][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.270610][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.277559][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.303488][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.384450][ T3316] hsr_slave_0: entered promiscuous mode [ 31.390724][ T3316] hsr_slave_1: entered promiscuous mode [ 31.396673][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 31.402447][ T3316] Cannot create hsr debugfs directory [ 31.468990][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.484488][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.497529][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.517301][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.553237][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.561859][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.571612][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.580694][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.620447][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.637479][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.647690][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.657112][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.670656][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.693059][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.707050][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.719851][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.730379][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.741568][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.764303][ T2936] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.771424][ T2936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.783413][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.792960][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.802078][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.811126][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.828826][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.835920][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.847322][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.871630][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.884300][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.894728][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.930821][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.937921][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.946920][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.954164][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.984609][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.995049][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.034558][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.047302][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.066478][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.075674][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.085653][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.109604][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.116762][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.130427][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.139912][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.147006][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.164944][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.180282][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.198142][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.205271][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.217315][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.224404][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.233333][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.240403][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.254492][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.261617][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.295964][ T3314] veth0_vlan: entered promiscuous mode [ 32.308228][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.318659][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.357210][ T3314] veth1_vlan: entered promiscuous mode [ 32.410621][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.418422][ T3318] veth0_vlan: entered promiscuous mode [ 32.428339][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.445359][ T3318] veth1_vlan: entered promiscuous mode [ 32.464072][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.491946][ T3314] veth0_macvtap: entered promiscuous mode [ 32.500154][ T3318] veth0_macvtap: entered promiscuous mode [ 32.512938][ T3314] veth1_macvtap: entered promiscuous mode [ 32.521175][ T3318] veth1_macvtap: entered promiscuous mode [ 32.545397][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.555504][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.573917][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.582944][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.610310][ T999] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.624520][ T3313] veth0_vlan: entered promiscuous mode [ 32.635690][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.644544][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.653984][ T3320] veth0_vlan: entered promiscuous mode [ 32.660451][ T3313] veth1_vlan: entered promiscuous mode [ 32.671193][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.680232][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.689296][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.698052][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.713250][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.722945][ T3320] veth1_vlan: entered promiscuous mode [ 32.747314][ T3316] veth0_vlan: entered promiscuous mode [ 32.776502][ T3316] veth1_vlan: entered promiscuous mode [ 32.785561][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.790893][ T3320] veth0_macvtap: entered promiscuous mode [ 32.807606][ T3320] veth1_macvtap: entered promiscuous mode [ 32.817391][ T3313] veth0_macvtap: entered promiscuous mode [ 32.830723][ T3313] veth1_macvtap: entered promiscuous mode [ 32.850473][ T3484] mmap: syz.3.4 (3484) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.862382][ T3316] veth0_macvtap: entered promiscuous mode [ 32.874316][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.885510][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.903908][ T3316] veth1_macvtap: entered promiscuous mode [ 32.919349][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.927275][ T3488] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6'. [ 32.928046][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.950376][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.965990][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.975275][ T3488] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR [ 32.977793][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.986738][ T3484] loop3: detected capacity change from 0 to 512 [ 33.016756][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.025528][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.056570][ T3494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7'. [ 33.068697][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.084766][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.096117][ T3484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.101394][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.117748][ T3494] loop4: detected capacity change from 0 to 128 [ 33.126559][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.135606][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.140389][ T3494] FAT-fs (loop4): Directory bread(block 414) failed [ 33.144642][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.159790][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.168499][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.177874][ T3494] FAT-fs (loop4): Directory bread(block 415) failed [ 33.184912][ T3484] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.189468][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.195123][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 33.195144][ T29] audit: type=1400 audit(1763112240.448:186): avc: denied { mount } for pid=3483 comm="syz.3.4" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.238080][ T3494] FAT-fs (loop4): Directory bread(block 416) failed [ 33.244829][ T3494] FAT-fs (loop4): Directory bread(block 417) failed [ 33.254952][ T29] audit: type=1326 audit(1763112240.508:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f729cfadf10 code=0x7ffc0000 [ 33.275455][ T3494] FAT-fs (loop4): Directory bread(block 418) failed [ 33.278158][ T29] audit: type=1326 audit(1763112240.508:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f729cfae417 code=0x7ffc0000 [ 33.298929][ T3494] FAT-fs (loop4): Directory bread(block 419) failed [ 33.307702][ T29] audit: type=1326 audit(1763112240.508:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f729cfadf10 code=0x7ffc0000 [ 33.337352][ T29] audit: type=1326 audit(1763112240.508:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729cfaf6c9 code=0x7ffc0000 [ 33.359093][ T3494] FAT-fs (loop4): Directory bread(block 420) failed [ 33.360451][ T29] audit: type=1326 audit(1763112240.508:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729cfaf6c9 code=0x7ffc0000 [ 33.367175][ T3494] FAT-fs (loop4): Directory bread(block 421) failed [ 33.396862][ T29] audit: type=1326 audit(1763112240.518:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3483 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f729cfaf6c9 code=0x7ffc0000 [ 33.420086][ T29] audit: type=1400 audit(1763112240.518:193): avc: denied { add_name } for pid=3483 comm="syz.3.4" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.440278][ T29] audit: type=1400 audit(1763112240.518:194): avc: denied { create } for pid=3483 comm="syz.3.4" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.462028][ T29] audit: type=1400 audit(1763112240.548:195): avc: denied { compute_member } for pid=3503 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 33.487636][ T3511] loop1: detected capacity change from 0 to 512 [ 33.502044][ T3511] EXT4-fs (loop1): fragment/cluster size (2048) != block size (4096) [ 33.542081][ T3513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 33.550790][ T3513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9'. [ 33.571680][ T3513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 33.580359][ T3513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9'. [ 33.601577][ T3513] Zero length message leads to an empty skb [ 33.632330][ T3515] loop4: detected capacity change from 0 to 8192 [ 33.644956][ T3515] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.695714][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.755639][ T3522] netlink: 'syz.2.12': attribute type 1 has an invalid length. [ 34.068303][ T3529] netlink: 340 bytes leftover after parsing attributes in process `syz.2.14'. [ 34.077447][ T3529] netlink: 340 bytes leftover after parsing attributes in process `syz.2.14'. [ 34.092589][ T3529] ucma_write: process 8 (syz.2.14) changed security contexts after opening file descriptor, this is not allowed. [ 34.214500][ T3531] loop2: detected capacity change from 0 to 2048 [ 34.259860][ T3534] loop0: detected capacity change from 0 to 512 [ 34.282838][ T3532] Alternate GPT is invalid, using primary GPT. [ 34.289300][ T3532] loop2: p2 p3 p7 [ 34.330043][ T3534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.387213][ T3525] syz.1.9 (3525) used greatest stack depth: 10160 bytes left [ 34.399958][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.429720][ T3527] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 34.512541][ T3539] SELinux: failed to load policy [ 34.783700][ T3531] Alternate GPT is invalid, using primary GPT. [ 34.790209][ T3531] loop2: p2 p3 p7 [ 34.935450][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 34.950488][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 34.962842][ T3532] udevd[3532]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 35.013946][ T3549] loop2: detected capacity change from 0 to 2048 [ 35.061080][ T3552] Alternate GPT is invalid, using primary GPT. [ 35.067508][ T3552] loop2: p2 p3 p7 [ 35.208362][ T3549] Alternate GPT is invalid, using primary GPT. [ 35.215063][ T3549] loop2: p2 p3 p7 [ 35.354477][ T3004] Alternate GPT is invalid, using primary GPT. [ 35.361027][ T3004] loop2: p2 p3 p7 [ 35.701584][ T3577] netlink: 332 bytes leftover after parsing attributes in process `syz.3.26'. [ 35.776527][ T3575] process 'syz.4.24' launched '/dev/fd/11' with NULL argv: empty string added [ 35.884593][ T3586] loop3: detected capacity change from 0 to 164 [ 35.910398][ T3552] udevd[3552]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 35.921828][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 35.969641][ T3586] syz.3.28: attempt to access beyond end of device [ 35.969641][ T3586] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 35.989073][ T3586] syz.3.28: attempt to access beyond end of device [ 35.989073][ T3586] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 36.019937][ T3552] udevd[3552]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 36.064440][ T3601] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.181641][ T3611] netlink: 123 bytes leftover after parsing attributes in process `syz.3.39'. [ 36.224481][ C1] hrtimer: interrupt took 38193 ns [ 36.303280][ T3611] ======================================================= [ 36.303280][ T3611] WARNING: The mand mount option has been deprecated and [ 36.303280][ T3611] and is ignored by this kernel. Remove the mand [ 36.303280][ T3611] option from the mount to silence this warning. [ 36.303280][ T3611] ======================================================= [ 36.431607][ T3625] loop0: detected capacity change from 0 to 1024 [ 36.480368][ T3630] FAULT_INJECTION: forcing a failure. [ 36.480368][ T3630] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.493717][ T3630] CPU: 0 UID: 0 PID: 3630 Comm: syz.3.46 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.493757][ T3630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 36.493773][ T3630] Call Trace: [ 36.493780][ T3630] [ 36.493789][ T3630] __dump_stack+0x1d/0x30 [ 36.493817][ T3630] dump_stack_lvl+0xe8/0x140 [ 36.493843][ T3630] dump_stack+0x15/0x1b [ 36.493866][ T3630] should_fail_ex+0x265/0x280 [ 36.493962][ T3630] should_fail+0xb/0x20 [ 36.493983][ T3630] should_fail_usercopy+0x1a/0x20 [ 36.494020][ T3630] _copy_from_user+0x1c/0xb0 [ 36.494048][ T3630] __sys_bpf+0x183/0x7c0 [ 36.494091][ T3630] __x64_sys_bpf+0x41/0x50 [ 36.494243][ T3630] x64_sys_call+0x2aee/0x3000 [ 36.494269][ T3630] do_syscall_64+0xd2/0x200 [ 36.494294][ T3630] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 36.494324][ T3630] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 36.494392][ T3630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.494414][ T3630] RIP: 0033:0x7f729cfaf6c9 [ 36.494431][ T3630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.494452][ T3630] RSP: 002b:00007f729ba0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 36.494479][ T3630] RAX: ffffffffffffffda RBX: 00007f729d205fa0 RCX: 00007f729cfaf6c9 [ 36.494506][ T3630] RDX: 0000000000000020 RSI: 0000200000001680 RDI: 000000000000001c [ 36.494579][ T3630] RBP: 00007f729ba0f090 R08: 0000000000000000 R09: 0000000000000000 [ 36.494592][ T3630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.494606][ T3630] R13: 00007f729d206038 R14: 00007f729d205fa0 R15: 00007ffc1e908178 [ 36.494628][ T3630] [ 36.667870][ T3625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.828987][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.906063][ T3640] FAULT_INJECTION: forcing a failure. [ 36.906063][ T3640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.919182][ T3640] CPU: 1 UID: 0 PID: 3640 Comm: syz.2.49 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.919250][ T3640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 36.919263][ T3640] Call Trace: [ 36.919274][ T3640] [ 36.919282][ T3640] __dump_stack+0x1d/0x30 [ 36.919308][ T3640] dump_stack_lvl+0xe8/0x140 [ 36.919362][ T3640] dump_stack+0x15/0x1b [ 36.919377][ T3640] should_fail_ex+0x265/0x280 [ 36.919396][ T3640] should_fail+0xb/0x20 [ 36.919414][ T3640] should_fail_usercopy+0x1a/0x20 [ 36.919497][ T3640] _copy_from_user+0x1c/0xb0 [ 36.919588][ T3640] do_sock_getsockopt+0xf1/0x240 [ 36.919627][ T3640] __x64_sys_getsockopt+0x11e/0x1a0 [ 36.919668][ T3640] x64_sys_call+0x2bca/0x3000 [ 36.919692][ T3640] do_syscall_64+0xd2/0x200 [ 36.919773][ T3640] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 36.919849][ T3640] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 36.919943][ T3640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.919966][ T3640] RIP: 0033:0x7f192b74f6c9 [ 36.919982][ T3640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.920008][ T3640] RSP: 002b:00007f192a1b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 36.920025][ T3640] RAX: ffffffffffffffda RBX: 00007f192b9a5fa0 RCX: 00007f192b74f6c9 [ 36.920035][ T3640] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000006 [ 36.920044][ T3640] RBP: 00007f192a1b7090 R08: 0000200000000140 R09: 0000000000000000 [ 36.920095][ T3640] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 36.920108][ T3640] R13: 00007f192b9a6038 R14: 00007f192b9a5fa0 R15: 00007ffed12ff168 [ 36.920128][ T3640] [ 36.932527][ T3642] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 37.315784][ T3668] loop1: detected capacity change from 0 to 512 [ 37.340154][ T3668] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.353424][ T3668] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 37.407292][ T3668] loop1: detected capacity change from 0 to 128 [ 37.544723][ T3676] batman_adv: batadv0: Adding interface: dummy0 [ 37.551066][ T3676] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.609045][ T3676] batman_adv: batadv0: Interface activated: dummy0 [ 37.618103][ T3677] batadv0: mtu less than device minimum [ 37.624195][ T3677] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 37.634969][ T3677] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 37.645637][ T3677] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 37.656354][ T3677] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 37.667223][ T3677] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 37.677915][ T3677] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 37.688666][ T3677] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 37.699372][ T3677] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 37.710107][ T3677] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 37.862997][ T3679] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 38.006097][ T3681] __nla_validate_parse: 4 callbacks suppressed [ 38.006114][ T3681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'. [ 38.117616][ T3686] loop0: detected capacity change from 0 to 512 [ 38.146776][ T3686] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.166157][ T3688] netlink: 32 bytes leftover after parsing attributes in process `syz.2.70'. [ 38.186985][ T3688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.70'. [ 38.200838][ T29] kauditd_printk_skb: 483 callbacks suppressed [ 38.200851][ T29] audit: type=1326 audit(1763112245.458:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7406e8f6c9 code=0x7ffc0000 [ 38.210817][ T3686] program syz.0.68 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.286798][ T29] audit: type=1326 audit(1763112245.468:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7406e8f6c9 code=0x7ffc0000 [ 38.310083][ T29] audit: type=1326 audit(1763112245.468:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7406e8f6c9 code=0x7ffc0000 [ 38.335528][ T29] audit: type=1326 audit(1763112245.538:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7406e8f6c9 code=0x7ffc0000 [ 38.358811][ T29] audit: type=1326 audit(1763112245.538:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7406e8f6c9 code=0x7ffc0000 [ 38.382083][ T29] audit: type=1326 audit(1763112245.558:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7406e8f6c9 code=0x7ffc0000 [ 38.405302][ T29] audit: type=1326 audit(1763112245.558:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7406e8f6c9 code=0x7ffc0000 [ 38.428508][ T29] audit: type=1326 audit(1763112245.558:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7406e8f6c9 code=0x7ffc0000 [ 38.451576][ T29] audit: type=1326 audit(1763112245.558:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7406e8f6c9 code=0x7ffc0000 [ 38.474731][ T29] audit: type=1326 audit(1763112245.558:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7406e8f6c9 code=0x7ffc0000 [ 38.516205][ T3698] loop2: detected capacity change from 0 to 1024 [ 38.529603][ T3628] Bluetooth: hci0: command 0x1003 tx timeout [ 38.535754][ T3516] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.535958][ T3702] SELinux: failed to load policy [ 38.628200][ T3698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.693820][ T3712] loop0: detected capacity change from 0 to 512 [ 38.702415][ T3712] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.715274][ T3712] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.743983][ T3712] EXT4-fs (loop0): 1 truncate cleaned up [ 38.750041][ T3712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.788375][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.891243][ T3719] loop2: detected capacity change from 0 to 512 [ 38.909292][ T3719] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.931424][ T3719] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.951926][ T3719] EXT4-fs (loop2): 1 truncate cleaned up [ 38.962249][ T3719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.021649][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.196441][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.230875][ T3731] netlink: 123 bytes leftover after parsing attributes in process `syz.2.86'. [ 39.385130][ T3743] netlink: 32 bytes leftover after parsing attributes in process `syz.2.91'. [ 39.399954][ T3745] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 39.410718][ T3745] SELinux: failed to load policy [ 39.496666][ T3746] syz.0.89 (3746) used greatest stack depth: 9720 bytes left [ 39.522934][ T3749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.91'. [ 39.534150][ T999] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.555460][ T3749] loop2: detected capacity change from 0 to 1024 [ 39.586574][ T3749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.625864][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.671168][ T3767] netlink: 123 bytes leftover after parsing attributes in process `syz.2.97'. [ 39.984541][ T3783] FAULT_INJECTION: forcing a failure. [ 39.984541][ T3783] name failslab, interval 1, probability 0, space 0, times 1 [ 39.997275][ T3783] CPU: 0 UID: 0 PID: 3783 Comm: syz.4.102 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.997316][ T3783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 39.997329][ T3783] Call Trace: [ 39.997336][ T3783] [ 39.997344][ T3783] __dump_stack+0x1d/0x30 [ 39.997364][ T3783] dump_stack_lvl+0xe8/0x140 [ 39.997387][ T3783] dump_stack+0x15/0x1b [ 39.997405][ T3783] should_fail_ex+0x265/0x280 [ 39.997478][ T3783] should_failslab+0x8c/0xb0 [ 39.997548][ T3783] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 39.997573][ T3783] ? __alloc_skb+0x101/0x320 [ 39.997670][ T3783] __alloc_skb+0x101/0x320 [ 39.997702][ T3783] netlink_alloc_large_skb+0xbf/0xf0 [ 39.997731][ T3783] netlink_sendmsg+0x3cf/0x6b0 [ 39.997748][ T3783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 39.997804][ T3783] __sock_sendmsg+0x145/0x180 [ 39.997902][ T3783] ____sys_sendmsg+0x31e/0x4e0 [ 39.997966][ T3783] ___sys_sendmsg+0x17b/0x1d0 [ 39.998002][ T3783] __x64_sys_sendmsg+0xd4/0x160 [ 39.998100][ T3783] x64_sys_call+0x191e/0x3000 [ 39.998126][ T3783] do_syscall_64+0xd2/0x200 [ 39.998227][ T3783] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 39.998262][ T3783] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 39.998354][ T3783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.998436][ T3783] RIP: 0033:0x7f9084e8f6c9 [ 39.998449][ T3783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.998464][ T3783] RSP: 002b:00007f90838f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.998482][ T3783] RAX: ffffffffffffffda RBX: 00007f90850e5fa0 RCX: 00007f9084e8f6c9 [ 39.998492][ T3783] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 39.998540][ T3783] RBP: 00007f90838f7090 R08: 0000000000000000 R09: 0000000000000000 [ 39.998550][ T3783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.998560][ T3783] R13: 00007f90850e6038 R14: 00007f90850e5fa0 R15: 00007fff6a62b498 [ 39.998606][ T3783] [ 40.246850][ T3785] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.317689][ T3790] bond1: entered promiscuous mode [ 40.322893][ T3790] bond1: entered allmulticast mode [ 40.340151][ T3790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.359468][ T3790] bond1 (unregistering): Released all slaves [ 40.381802][ T3785] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.442407][ T3785] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.484179][ T3795] netlink: 32 bytes leftover after parsing attributes in process `syz.1.106'. [ 40.501647][ T3785] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.556110][ T999] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.567545][ T999] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.582090][ T999] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.603262][ T999] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.634958][ T3797] netlink: 32 bytes leftover after parsing attributes in process `syz.1.107'. [ 40.680999][ T3797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 40.779353][ T3804] blktrace: Concurrent blktraces are not allowed on loop9 [ 40.786659][ T3802] loop1: detected capacity change from 0 to 1024 [ 40.866306][ T3802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.935727][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.114001][ T3824] team0 (unregistering): Port device team_slave_0 removed [ 41.154612][ T3824] team0 (unregistering): Port device team_slave_1 removed [ 41.185564][ T3826] pim6reg: entered allmulticast mode [ 41.258203][ T3820] ================================================================== [ 41.266328][ T3820] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 41.274149][ T3820] [ 41.276465][ T3820] write to 0xffffea0004cfa998 of 8 bytes by task 3768 on cpu 1: [ 41.284080][ T3820] __filemap_remove_folio+0x1a5/0x2a0 [ 41.289449][ T3820] filemap_remove_folio+0x6d/0x1d0 [ 41.294557][ T3820] truncate_inode_folio+0x42/0x50 [ 41.299576][ T3820] shmem_undo_range+0x244/0xa80 [ 41.304427][ T3820] shmem_evict_inode+0x134/0x520 [ 41.309361][ T3820] evict+0x2e3/0x550 [ 41.313267][ T3820] iput+0x4ed/0x650 [ 41.317088][ T3820] dentry_unlink_inode+0x24f/0x260 [ 41.322187][ T3820] __dentry_kill+0x18d/0x4b0 [ 41.326791][ T3820] dput+0x5e/0xd0 [ 41.330434][ T3820] __fput+0x444/0x650 [ 41.334400][ T3820] ____fput+0x1c/0x30 [ 41.338373][ T3820] task_work_run+0x131/0x1a0 [ 41.342961][ T3820] do_exit+0x483/0x15c0 [ 41.347107][ T3820] do_group_exit+0xff/0x140 [ 41.351613][ T3820] get_signal+0xe58/0xf70 [ 41.355932][ T3820] arch_do_signal_or_restart+0x96/0x440 [ 41.361469][ T3820] irqentry_exit_to_user_mode+0x5b/0xa0 [ 41.367024][ T3820] irqentry_exit+0x12/0x50 [ 41.371450][ T3820] exc_general_protection+0x15b/0x1f0 [ 41.376812][ T3820] asm_exc_general_protection+0x26/0x30 [ 41.382350][ T3820] [ 41.384666][ T3820] read to 0xffffea0004cfa998 of 8 bytes by task 3820 on cpu 0: [ 41.392196][ T3820] folio_mapping+0xa1/0xe0 [ 41.396634][ T3820] evict_folios+0xe05/0x3590 [ 41.401220][ T3820] try_to_shrink_lruvec+0x5b5/0x950 [ 41.406421][ T3820] shrink_lruvec+0x22e/0x1b50 [ 41.411094][ T3820] shrink_node+0x686/0x2120 [ 41.415594][ T3820] do_try_to_free_pages+0x3f6/0xcd0 [ 41.420781][ T3820] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 41.426678][ T3820] try_charge_memcg+0x383/0xa10 [ 41.431535][ T3820] obj_cgroup_charge_pages+0xa6/0x150 [ 41.436895][ T3820] __memcg_kmem_charge_page+0x9f/0x170 [ 41.442342][ T3820] __alloc_frozen_pages_noprof+0x188/0x360 [ 41.448135][ T3820] alloc_pages_mpol+0xb3/0x260 [ 41.452890][ T3820] alloc_pages_noprof+0x90/0x130 [ 41.457826][ T3820] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 41.463644][ T3820] __kvmalloc_node_noprof+0x483/0x670 [ 41.469015][ T3820] ip_set_alloc+0x24/0x30 [ 41.473342][ T3820] hash_netiface_create+0x282/0x740 [ 41.478539][ T3820] ip_set_create+0x3cc/0x970 [ 41.483119][ T3820] nfnetlink_rcv_msg+0x4c6/0x590 [ 41.488050][ T3820] netlink_rcv_skb+0x123/0x220 [ 41.492820][ T3820] nfnetlink_rcv+0x167/0x16c0 [ 41.497494][ T3820] netlink_unicast+0x5c0/0x690 [ 41.502254][ T3820] netlink_sendmsg+0x58b/0x6b0 [ 41.507003][ T3820] __sock_sendmsg+0x145/0x180 [ 41.511672][ T3820] ____sys_sendmsg+0x31e/0x4e0 [ 41.516439][ T3820] ___sys_sendmsg+0x17b/0x1d0 [ 41.521106][ T3820] __x64_sys_sendmsg+0xd4/0x160 [ 41.525960][ T3820] x64_sys_call+0x191e/0x3000 [ 41.530645][ T3820] do_syscall_64+0xd2/0x200 [ 41.535137][ T3820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.541017][ T3820] [ 41.543326][ T3820] value changed: 0xffff88810459dc18 -> 0x0000000000000000 [ 41.550414][ T3820] [ 41.552724][ T3820] Reported by Kernel Concurrency Sanitizer on: [ 41.558861][ T3820] CPU: 0 UID: 0 PID: 3820 Comm: syz.1.115 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.568479][ T3820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 41.578523][ T3820] ================================================================== [ 41.587097][ T3762] Bluetooth: hci0: command 0x1003 tx timeout [ 41.588604][ T3516] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.649030][ T3628] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 42.040555][ T3820] syz.1.115 (3820) used greatest stack depth: 6424 bytes left