last executing test programs: 2m35.287404569s ago: executing program 4 (id=47): r0 = socket$nl_route(0x10, 0x3, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=rdma']) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 2m35.237071953s ago: executing program 4 (id=48): set_mempolicy(0x2002, &(0x7f0000000000)=0x40000006, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x101, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x101, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2404c801, &(0x7f0000000040)={0xa, 0x4e22, 0x200003, @loopback, 0xfffffff7}, 0x21) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) (async) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1f, 0x4000fe, 0x8, 0x100002, 0x2000, 0xffffffffffffffff, 0x84, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x1, 0x2}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f00000004c0)=""/111, 0x6f, 0x0, &(0x7f0000000540)=""/73, 0x49}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=r4, 0x4) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000080)=0x0) quotactl_fd$Q_QUOTAON(r5, 0xffffffff80000200, r6, &(0x7f0000000300)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x10, 0x8000, 0x100, 0x8, {{0x8, 0x4, 0x1, 0x21, 0x20, 0x65, 0x0, 0x1f, 0x4, 0x0, @remote, @remote, {[@ssrr={0x89, 0xb, 0x7c, [@private=0xa010100, @local]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x10, 0x8000, 0x100, 0x8, {{0x8, 0x4, 0x1, 0x21, 0x20, 0x65, 0x0, 0x1f, 0x4, 0x0, @remote, @remote, {[@ssrr={0x89, 0xb, 0x7c, [@private=0xa010100, @local]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6tnl0\x00', r9, 0x4, 0x9, 0x93, 0x0, 0x0, @local, @remote, 0x1, 0x80, 0x2800000, 0x1000}}) pipe(&(0x7f0000000240)) (async) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r10, 0x0, 0x8000f28, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x7ff, 0x2, 0x0, 0x10c25, r3, 0xd, '\x00', 0x0, r5, 0x3, 0x5, 0x0, 0x2, @void, @value, @value=r10}, 0x50) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f00000000c0)) 2m34.742249449s ago: executing program 4 (id=54): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) unshare(0x22020400) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) (async) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00'}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) (async) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0) (async) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x4e21, 0x48e, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@loopback, {0x0, 0x0, 0xfffffffffffffffd, 0x8000000008, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x4}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x20}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d5854797120dbba200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) 2m34.654501157s ago: executing program 4 (id=56): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, 0x0, 0x183042, 0x15) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f00000005c0)={'veth1_to_bond\x00', 0x1}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6f, 0x2}, 0x10, 0x10000, 0x0, 0x6, 0xda54, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r3, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x19, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bind$xdp(r4, &(0x7f0000000580)={0x2c, 0xa, r7, 0x27}, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000bc0)={'wpan1\x00'}) 2m34.398293271s ago: executing program 4 (id=58): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x3, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x7, 0x8031, r0, 0x6554b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r4, &(0x7f0000000040)='./file0/../file0\x00', 0x8800, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x2}, {0x0, 0x4}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x4000080) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000000000000000000b087191ad16ab16c37a2ef371c5bd23388da64b9ba0efc446a93bbbcb8efb27b6934f8a54770a99a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000001f0800850000001b000000b700000000000000b60a87db23ff2a08efcdb9962fb140ae49e82f672f17cb917960c2733d9261bcfdcfc87826b888d5c1426167613b9cea48c97a8ae80c495def308fc235df592c00a30ac8e00a12056e14b84638530916dba1ba3a29a868bd6664bc628593352fa503b666e2bd387390c7b18fa7f7349adebe3d230e44dd57b8a099028475f071dadb7165e101a4b169f71c4252a7a8f475f8269ab6e742cfdac597d469c3d5c2f8b92db08b64253ef8e00725bc23c68f9c82c6d5b0c35a2aaf56fdd973df57c587162331375f00b79e191e5d5a7bec0db1920b942236a0338b35dab8e622c192ae112b"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='sched_switch\x00'}, 0x18) unshare(0x62040200) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r9) 2m33.189984682s ago: executing program 4 (id=68): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x40) r0 = socket(0x2, 0x3, 0x7) setsockopt(r0, 0xff, 0x6, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000240), 0x6}, 0x1004, 0x0, 0x80000001, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x7, 0x0, 0x0, 0x0, 0x4, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0xd9a, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$isdn(0x22, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d00000002000000040000000640000005000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000002000000000000000000"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', &(0x7f00000007c0), 0x4000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) syz_io_uring_setup(0x5c8, 0x0, 0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x2a200) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) 2m33.180076283s ago: executing program 32 (id=68): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x40) r0 = socket(0x2, 0x3, 0x7) setsockopt(r0, 0xff, 0x6, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000240), 0x6}, 0x1004, 0x0, 0x80000001, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x7, 0x0, 0x0, 0x0, 0x4, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0xd9a, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$isdn(0x22, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d00000002000000040000000640000005000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000002000000000000000000"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', &(0x7f00000007c0), 0x4000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) syz_io_uring_setup(0x5c8, 0x0, 0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x2a200) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) 2m20.007106097s ago: executing program 0 (id=226): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {@abort}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) shmget(0x0, 0x1000, 0x2c000400, &(0x7f0000ffe000/0x1000)=nil) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f00000001c0)=0xb8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x4006, 0x0, 0x0, 0x7ffc0002}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9\xd3F\xaa\xa2fUk@\xeb\xb5~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1, 0x0, 0x1}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) getsockname$packet(r3, 0x0, &(0x7f0000000280)) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000340)={0x3, &(0x7f0000000000)=[{0xd, 0x27, 0xff, 0x8001}, {0x8, 0x8, 0x3, 0x5}, {0x6, 0x3, 0x0, 0x9}]}, 0x10) sendmsg$kcm(r2, &(0x7f00000006c0)={&(0x7f00000002c0)=@ll={0x11, 0xf6}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000001b40)="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", 0xa98}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x240088c0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x20000000}, 0x18) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000700)='global_dirty_state\x00', r1, 0x0, 0x400}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='debug_want_extra_isize') r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="00000000000001f600000000000000007b8a7809bfa20000fdffffff07020000f8ffffe8db5ae400062befd909bc398b46ca8d85d031000000b7040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r9) 2m19.714119994s ago: executing program 0 (id=231): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/17, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) socket$kcm(0x10, 0x2, 0x4) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x4e302, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0xd10, 0x10}, 0xc) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x2f, 0x7f, 0x7f, 0x8, 0x0, @private2, @mcast2, 0x8, 0x7800, 0x80000000, 0x2}}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x30bd27, 0x4000005, {0x0, 0x0, 0x42c, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x101, 0x3, 0xc, 0x13}, {0x7, 0x2, 0x8001, 0x200, 0x2, 0x7}, 0xffffff80, 0x947, 0xe03}}, @TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x6, 0x6b16, 0x7, 0xfffffffd, 0x8, 0x8, 0x3, 0x7, 0xb, 0x5, 0x0, 0x80, 0x9, 0x30, 0x8, 0x81, 0x9, 0x2, 0x8, 0x40, 0x8, 0x80000001, 0x80, 0x10000400, 0x7a2, 0x5, 0x400, 0x3, 0xfffffffa, 0x6, 0x6, 0xaf8, 0x1, 0x3, 0x3ff, 0x9, 0x2, 0x3, 0x10001, 0x1, 0x5, 0x10001, 0x3, 0x59, 0x3, 0xd54e, 0x40, 0x6, 0xd, 0x0, 0x28, 0x9, 0xa4800000, 0x3, 0xa0, 0xad4, 0x7, 0x4, 0x1, 0x7, 0x4, 0x102, 0x5, 0x4, 0x402, 0x3, 0xf6a5, 0x7fffffff, 0x8, 0x2, 0xcff, 0xfffffacf, 0x0, 0x4, 0x10001, 0xa, 0x1, 0x2, 0x8002, 0x5, 0x5, 0x5, 0xfffffffb, 0x5, 0x0, 0x4, 0x4edcaeea, 0x2, 0xe, 0xe, 0xfff, 0x4, 0x496c01fc, 0x4, 0x7fffffff, 0x9, 0x8, 0x12, 0x9, 0x80000001, 0x325b, 0x7, 0x0, 0x80000006, 0x2, 0xffffffff, 0x5, 0x1, 0x18001, 0x5, 0x94, 0x2, 0x9, 0x2fcb, 0x3, 0x5, 0x7, 0x1, 0xffffffff, 0x4, 0x0, 0x4, 0x3, 0x4, 0x5, 0xa993, 0x200, 0x6847adf1, 0x6, 0x9, 0x81, 0x7, 0x5, 0x5, 0x7fffffff, 0x8, 0xc, 0xd, 0x2, 0x1, 0x7fffffff, 0x8, 0x0, 0x8, 0x8, 0x91e, 0x4, 0xe, 0x8001, 0x8, 0x40000, 0x0, 0x9, 0xd, 0x5, 0x8, 0xfe, 0x8, 0x0, 0x1, 0x2, 0x9, 0x6, 0x3ff, 0x5, 0x1, 0xf682, 0x40, 0x6, 0x8, 0x3, 0x1fffe, 0xfffdfffe, 0x5, 0x1, 0xfffffff8, 0xa608, 0x23972b48, 0x407, 0x2, 0x0, 0xd, 0x4, 0xa, 0x5, 0x6, 0x10, 0x5, 0x5, 0x10, 0x41, 0x9, 0x76, 0x3, 0xfffffffa, 0x7, 0x2, 0x20004, 0x40, 0x9, 0x6, 0x2ef, 0xfffffffb, 0xcf30, 0x8, 0x4, 0xffffff8a, 0x0, 0x4, 0x80000000, 0x4, 0x2, 0x0, 0x2, 0x6, 0xfff, 0x4, 0x1, 0x40, 0x5, 0x9, 0x5, 0x8, 0x80000000, 0x0, 0x3, 0xeff, 0x6, 0x8001, 0x8, 0xc, 0x3, 0x1, 0x0, 0x5, 0x8, 0x6c67, 0x800, 0xffffff59, 0x9, 0x0, 0x303, 0x7, 0x1, 0x2, 0x6, 0x6561, 0x7, 0x4, 0xc, 0x42, 0x3c04, 0x5f, 0x5fa, 0x1]}]}}]}, 0x45c}}, 0x8000) (async) r6 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000280)=""/219, 0xdb, 0x0, &(0x7f0000000200)=""/15, 0xf}}, 0x10) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r2, 0xffffff80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x10, &(0x7f0000000000)=@raw=[@alu={0x0, 0x0, 0x7, 0x1, 0x1, 0xfffffffffffffff4, 0x4}, @alu={0x4, 0x0, 0x9, 0x6, 0x1, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10200, 0x0, 0x0, 0x0, 0xff}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000080)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41000, 0x22, '\x00', r5, @fallback=0x10, r7, 0x8, &(0x7f0000000180)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x4, 0x9, 0x400}, 0x10, r8, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[r9], &(0x7f0000000540), 0x10, 0x59}, 0x94) (async) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r13 = socket(0x10, 0x803, 0x0) (async) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r13, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x88, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r15, {0xc, 0xc}, {}, {0x5, 0xf}}, [@TCA_RATE={0x5, 0x5, {0x9, 0x7}}, @filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_ACT={0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x81, 0x8, 0xfff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}}, 0x20040054) (async) dup(r10) 2m19.633040431s ago: executing program 0 (id=233): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x6e8, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x618, 0x618, 0x618, 0xffffffff, 0x4, &(0x7f00000003c0), {[{{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ipv6header={{0x28}, {0x4, 0xb0}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff000000, 0xffffffff, 0x0, 0xffffff00], 0x4e23, 0x4e24, 0x4e22, 0x4e24, 0x1, 0x1, 0x88, 0xfffffffb, 0x6}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xffffffff, 0xff, 0xffffffff, 0xffffff00], 'ip6erspan0\x00', 'veth0_vlan\x00', {}, {}, 0x0, 0xed, 0x2, 0x60}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'team0\x00', {0xfffffffffffffff8, 0xc02e, 0x5, 0x68, 0x100, 0x0, 0x8, 0x0, 0x88, 0x78}, {0x2}}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x270, 0x298, 0x0, {}, [@common=@srh1={{0x90}, {0x84, 0x6, 0x41, 0x6, 0x7e, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @rand_addr=' \x01\x00', [0xffffff00, 0xff000000, 0xff, 0xffffffff], [0xff, 0x0, 0x0, 0xffffff00], [0xff000000, 0x0, 0xffffffff, 0xff000000], 0x600, 0x13e0}}, @common=@rt={{0x138}, {0xfffff801, [0x3, 0x1e3], 0x7, 0x8, 0x4, [@private0, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @dev={0xfe, 0x80, '\x00', 0x1b}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x8}, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private1, @mcast1, @loopback]}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x748) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x800, 0x0, 0x3, 0x1, 0x40}, 0x20) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140f, 0x400, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xfa8bbe62d3498b00}, 0x20000000) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') preadv2(r4, &(0x7f0000000380)=[{&(0x7f0000000300)=""/103, 0x67}, {&(0x7f0000001600)=""/239, 0xef}], 0x2, 0x5, 0x101, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xc9}}}, &(0x7f0000000200)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 2m19.54232719s ago: executing program 0 (id=234): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r1, 0xa, 0x0, 0x1000f4) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="520002010e"], 0x5) sendfile(r1, r1, 0x0, 0x800000a1e) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r3 = syz_clone(0x500000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000}) migrate_pages(r3, 0x6, 0x0, 0x0) openat2(r2, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)={0x280040, 0x20, 0x23}, 0x18) 2m19.374149855s ago: executing program 0 (id=237): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r1, 0x4) fchown(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffffffffffe9, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_open_procfs$userns(r2, &(0x7f0000000140)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_clone(0x41004080, 0x0, 0x0, 0x0, 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x8, 0x700000000000000) socket$nl_generic(0x10, 0x3, 0x10) 2m16.863328457s ago: executing program 0 (id=253): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x4044080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r5, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000012000000", 0x8) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r9, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0xffffffffffffffe5, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r9}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r10, 0x0, 0xfffffffffffffffe}, 0x18) ptrace(0x10, r8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000540)=ANY=[], 0x9) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x2) 2m16.798095503s ago: executing program 33 (id=253): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x4044080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r5, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000012000000", 0x8) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r9, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0xffffffffffffffe5, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r9}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r10, 0x0, 0xfffffffffffffffe}, 0x18) ptrace(0x10, r8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000540)=ANY=[], 0x9) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x2) 2m12.259991921s ago: executing program 2 (id=289): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000021c0)={{0x0, 0x4, 0x9, 0x3, 0x8, 0x1, 0xfffffffffffffffc, 0x0, 0x7, 0xd8, 0x7, 0x3, 0x7ad510ae, 0x7fff, 0xa8}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000001c0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}], 0x7, "a08a147356cbe7"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000011c0)={r3, 0x0, "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", "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"}) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x18) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x28) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000000080)={0x1, 0xe74e, 0x80000006, 0x10009, 0x9, 0xed}) 2m11.825516681s ago: executing program 2 (id=295): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000070000000180000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001100"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000c80)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) read$eventfd(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x1, 0x0, [{0x5, 0x8, 0x8, '\x00', 0x2}]}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000001280)=ANY=[@ANYBLOB="8701000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03b1d1ca4cb3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc391a65c674a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b450ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bcab12fcc661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc0284c5a5d51f0e115ab159e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6dde4ab67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b418528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03e0d3ab2b71d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac00000000000080014573789425c4c22da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767c0700783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c4d885723734a3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac809c227aa25842f75981bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f1009b7f185f51606918eaa0ab6"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f0000000080), 0x81, 0x633, &(0x7f0000000600)="$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") (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53f, &(0x7f0000000480)="$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") (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32], 0x48) (async) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) io_destroy(0x0) (async) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) 2m11.40077637s ago: executing program 2 (id=303): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0xe0}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x220}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000f00)=ANY=[]) 2m11.089480789s ago: executing program 2 (id=304): syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000c80)='./file1\x00', 0x1004491, &(0x7f0000000000)=ANY=[], 0x2, 0x838, &(0x7f0000000cc0)="$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") r0 = socket(0x3703b11994d72f68, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000080)={0x6, 'dvmrp0\x00', {0x2}, 0x6}) setuid(0xee00) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(r2, r2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x3, 0x0, 0x894, 0x1ff, 0x2, 0xfffffffe}}) r3 = syz_open_dev$loop(&(0x7f0000000300), 0x80, 0x60bc0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r5) sendmsg$NFC_CMD_DEV_DOWN(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="210026bd7000fddbdf2503"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac000000000000000000fb8800", "90be8b1c5512406c7f00", [0x4, 0xa]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000b020000000000000001000005000000000000000001"], 0x0, 0x3e, 0x0, 0xa}, 0x28) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x4) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00082bbd7000ffdbdf25070000000c001600755ab2240000000005000d000000000005000d000100000006000e0009000000"], 0x38}}, 0x40000) creat(&(0x7f0000000040)='./bus\x00', 0x0) 2m10.718060703s ago: executing program 2 (id=306): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6_vti0\x00', r1, 0x0, 0x0, 0x0, 0xb0ea, 0x1e, @private2, @loopback, 0x40, 0x7800, 0xfffffffc}}) 2m10.397636543s ago: executing program 2 (id=313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0x31}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 2m10.328883129s ago: executing program 34 (id=313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0x31}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 2m4.738288824s ago: executing program 7 (id=364): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) geteuid() bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xb, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000500000073117e000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) 2m4.732359255s ago: executing program 7 (id=365): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x45, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xa7, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4, 0x0, 0x8}, 0x18) execve(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000cc0)={0xb9, "8e8381c277d2447ed98f39cb8005bf9065ede1b17ff1d69bc62263c770d0e7d6937402ac492c3da15c529e761bea08e4466f29f568104b90b8688f8e075a65a3"}) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000d40)={r4, 0xffffffffffffffff, 0x11, 0x0, @void}, 0x10) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f0000000d80)) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) sendto(0xffffffffffffffff, &(0x7f0000000f80)="424625be6ba3eb9c1bd2d0f1f50cdf328bd99e3de044ba76df197786db91c44d0c211e2f2a0805a1671aa07284575ac741cf65e8f4a1e9d7dc81e07d95126be1cfbeabb825fb94f7e9760e06895efd82e96962c89adb255a240e7390dc74136309eca2da3a8679ebf2dea16eec32a02829a6c4872a3bf31bdf5fb131f19cdd0a6404bb028066fd0a3e4b71c75d844e7a0081b295ee1067b312811f78bc7841832ac3d6936522fbd66e4416b5ef005da1f1209e38d6923794d6d9154888234880a0b14cb7e81b6450205aa70adaec7b591b91fb14dd06b32d764fbb143b5a959041d226a5ba8665e90dd90944d5f9e7e319bd625fefaf79eeb269f24388d70abda05e1cad3e6c8fdef127d4fc7f782ad2e62f177e985e25d70160843e4a2b4a9a7c1178544ccbc12d432d3afa2e9d60b897de4313811d3852fbf33df7f6d8601f9e48fbf326a2f7ec5d2be6e9981bf3c257899feb045e988aa1fee4dffbb5bbbb9090de7866d89dca97a073452561ed33b61a63382d494eb408e98831a57eabf536c1d4289dea0853d69c266d1f2753b2c13b324e84b37d112e8226c893c5c5b211d6f0605fd2835733379947de65988f7b9a7a7c70bb4be1382d195610827c22fe237b0dc5535bda225a5db1dc0a14b619557d5a0b135ef2d3a11c1edc1f6b55e9555c7c199c97191a57003a0512f55bb3a49a9675a25cf85e10855271129b4436b8347d4af793bf5edb5f5a53d367c2262fed2308a40fb68b46bf97682f6a7e01b23b6d5e4c18b3b3a81ef41457049e16467fe348dc42916b6065e27e6d8fb5df22917b3c85f340225e2b36884769a69362d016fdc13c1f1b9ad139e2ff3a35097d480b8eeffab45d72efd9ebdae846952ecebebd204f7de30e264fd7e9aff955d4498d4132eab5cea85b0d880045ecc49ba9c8c987c1e4d4b61abb7f8a0823706df4584a18ab66883d89b0269048ae1c739f8b3b842da866a6c775bcf2c8a17b1d74b402eaa63ec0d99c0588b0aba6c8c2aba648b96e3b39d48c4e4eba1478bad558fdc0081e9d3e45697aa32b996bd69beb4a8d8050a99a3ad0bcb34695201f8938ffb97178cb3d75c57552cfb48c64d4f00a10818c69997324e77d9b54077372e6d53f6cf42f1032509984e388860ffdc7187312798f026ebc594fa9e746713cec396aadc6506a74a53bdc6551a8724282812ab673a6aa14a2b40d93040904b0100f838d9f2d47f09651b20cd2206420fbe069b4c7fc15e2b13905357565580d821b8a7e4d92aa1e0955ec37a146d898e8cbaa7985e6a80ca051e6e91fe435bf8fcf6bc1731f10bba0b3d7734d60ac1058f8b6e3a34c656c1c8465e24cd83ffbec0563d94ec449d9ececd7a9257ebbde55a2fe509eae27480b418434a6e1679ceb4991500c44d85f41ab75a26cd6b4ed23dcb03e1a4d1f650dfc3f68deab42c7fb4a1d10d883e03382af214bd510ba9905a9ba0553b1f956cbd5f8cff1b2b0e0e1b65d6c5bafc4f62500f192526d5df0ccf2e99d5fc8d12d512db8ef3972db6b79e1b50a2b94e702a9c16b45059beb0bd361dcc7a62460f0c7164d77aa8760a6c0cc79bd76d181096ff58875552a39f2d419b392432a740687fe801d8bd3d3a08d5a2d81677aa433d7c5910ad48bacd7f1cbf7cd10b9f3100087c27cec81696a1324509ebaa744d44229984f8fb34706d68c90a8e18fb9e2f583b312a956ddf41be7e7b19700bf5546085f4e29e1060ebaa926b25632d36f28c3d586a37a53056c96d4e8056d5782559441c9206a7d1065b5d05335e1fbf31bc1367dc5dd43a8466df45ca5a28aa815348c8817fb1ee25237ce4ab93e29a8a93ea1eaed512e2f4e08936143138a955c5486a475ba755c862a6fcba89583504573ba060a0c42b5ee8dfa073a9e0d3aa7f459525b0f0dc6b5066205b3c5cfb7bf5c0701652424240a8cd35493e49a256519e502040f5b50b0d14e05270f45a5f1ed91dc7cc99d20c81486a8c2545dc59f0be208a39bd09ab9006ca71169e8608c266f795045c898115c79be1d7b2d984bdced14245fc3eceb3ddac44464bce6884fbc9d5894645715591930d6287f5033a79085330e77d9d5849baeadace2708f4b3ed4b481ef8929452873440150ddc515fb77cd7b133bd1171059ceae79f7d43b7d61ad552a0ce0d1774472459d9ba6f33583dd71ed9ca0fd5198a80b0fa62d7a16d96057f60be7b5101c0f0218169480e8c669a93083d14c5932106a5c96d7e0882c86dc5760a5187a7b1080f4c5fcba1627dcbefa66929fcb14545a031b36e75d38fe9ed70910d3173a8994f85167e1a7dd111fbd2acdc59126058c3a65fb5ee9d7b5b5ef3d060d3eaab5eb066ba6e37fe349daba6912b1b2e5709481aff258fa1b7b7f064a7b6f0a983bf86b9122f76b74143c519bfaed231fe37d6bf4ae9954989b850583b964fb5196c56e2cdc11c411c891863871c9ec5d5b4a2e064eb3c41b5806ae05330206032952dfb9352055125f6059e0542112382c381250658791e8f937e5276021b5ca011383bb206d8b0c15f45c0198717958d32b27921f5905dedaba66098488aee899676056af8cc93fba6765b0b40d67674fe37241da6a078b41bcae9c1aa5355fa067edb12a19aaa99603edbd15766bb05d0b7310863237db04206640d387fb71b7df03184fc36f75331c802940df1dd079b23ca19008cb952f3f4f0c326027d539902197ba81025e922a11766776d9e63f383c4bdf60e98af08c90a8f70cb8ed847ecf29a44cab552b8845bc50de75be5d0bb02bed29f9d09838605c28cd42b6037da3d00e949b59a7f7d6b655076a2360dc6b5f196ded41da65b14e4cf771afb1b90fce1231bc68b629a16805a0aa176c11b26ce0a599a65828f96b3dcddf30b35ad05d2d539cb647bc23d0653be6f92fbdf90c0bdc0be3a0794c715ab2a14f81537c5a3aafde39ec51943c8e20375c957bd7efa1ed607dc1aaf18ef5dc81ac699fc13757d6e2d40654f77fb42bff030e1a5ec1eda77b58ffc10fcd8e8cbaddf5faa71a03bcb6154df2bd073d241fa47cc7863093669cd0cc2a2768de51fc2dd391c9d12278cf353e5fc320588c93373f9526f97842ad883be98bb68ee1f1ea6734fd3806f588c648eaf22247c3210d47879905110184a9f30292568f6818fe52565d170c95070bf056622d21baf447433ee39e2ff86b500e9734dcc493b11f0f674711429951361c94cfc4fffedde243336802270d4d37e7bd731dd71038e610d8a2d4644b19aee2a9c3f35960edc2ae1e4f7ff782eb373c4c40dd35608c7cbf9de9d61dd0edd47526b2bd3b4710fd99af5aca0effca373f9b56c73f942360ae75350d0ff700c0dd1b8b46af0815aee47bf026bfe8bedb0cec7b57a169f5011691d67e2f78b4904d5bc2a83e08e58e091d8dc673099a90d0b4fc4190ec0db80bdc1d35bc5ca5573831dadc7546b94b1145d2a43b290311f1edfcdec68dec339e2c47501222ec448b28a7a12cf9914ff6da44846b3dd08ce6af2bc6a94234d9ec4a9fe9c98176b8c6742cd335ad3891b18ff8ed20d82a364b3f62958e498f2dd864d59d1f3156fd7b1f0d9b529d79f1574bb326722c2341c3ac3dc6d1b8eb6160125d0d4ed36279c02d79c4fb4ccf95f1c00390fe5d1cb2e74305ebc19b17f04051ef5e1393db932e120395e49f83ec592afd03430a12c83a2775ffb5acf6c1b6a97e6cfcca688160e0035c67e9ac907261e115b3a99e58e8d786c8138f38c809b5d91e795b9f05972fbde093886325be109de15a3a5c540a9acd1d5ae05766e18578c875514287e164f08a62c848a334e3ccbf221dda670129c0d0b8f7f322ebd27c297a1dfd0a65e96db009c691fa4dfdee35f88d7beb069af5362ee7d787499ef4484121531d7fa4b769ebc9e6b1a0727b334f665243e2eedc0b2531db0b237a601a65ef0d69960e60bb222280cfc3fe5e4ee0cdb992e706d69c7d4488e0255584b91cfaf26b2cb5ce848af2c633e8fa186f0fd37c567c5284092c134a22ec4ed7102605680d08497127a5b5e35a2f23ef1e567ee3e92a63eec72896be9254a03c409c94412e5d09eb74fd928f3af51faca6794902503ed4feda6da0cfbc6815354661cc588102accadf280152e6e75834d0a06593db52d80df2411f0523c2a8e6bab2480ed17bbc5808646bddf1163b5086c740898223382c2f1f8629f7186af1dbb723deb8828d6f70d9cea6d89edcf93c1238f809f6e1410f1affc7a88b237b1daeac1ec846c843343e1375e1a4d7656851dbb123d17be64855f881f28dbea83890f5be8a74bdca5252de7dec51f51e9c446901ff5693ed26480e551ffb0b4f7070cc1245ba8fa802960f937ebb69daeff7ec87d91b577c78c7becbb27e88e3e2f1868b43caa826b9b765a5fbb1e43cf7e8513cb34d6bdf007135e3bbbf04c10f50ad7c5f0937fe4165a28715de07c7ae6cc0d604da9ad0bc2de9f3ef4c532dfb79dcc3c27db898f9263d36c17c6ba534a37e7f3fc408978c7b40f29238d7b748637cf8c1ed556ef191c50c5e4ec0ab2ac4c41148f8f0bb0db55b2c949b95a84c512fc1ea6326959419cc169b58fa80a485557cc78f095583ff1296af8e77fa7297b23e9039b3c1d4977d2485b92905d6570a01286313e69e14967a57661d9fdbba93639387c20648109e9bb6d6597dca566a5dbfb3358e8349450168bece1f99b9427366e8c443f6ecda08a31cea4048feecb818dfb0c5d6ea6d96dd1cb0b11b114a0a067ed2c16741ae6f6c25f9bc334843c96d31a6b34beb9271c87512ffa1e7f6bad2c2ad260122f204a7ba1d53a2dd093f6366dfd47b86ed83ac6b63c1e3a85f2b02baa91f5aaff31cdcea65c23ccef5323f1501c2c50c705f220f547ccc3a0c8b878936303d425e9a21b627f60dc747662224dc1d97874f5860fe8a0048bf05f36f52e465b99f449522b4473b2296538000be61010234e8897eb08e40e171ddd67e735ae97e8452f87e08c2479ad82a8d916947a503f39ca0e72e9fe3b81f65dc7ce5bb1c4b09f1889193b7a3671b431686ccb4f226cf3995b420c83534ed3422df4c23a56751ef1e9f44b70a32d2b24c69472ad35ef5b48294c79807eef51cb4ffe123e404ea604e3bb5811903f7c26edc82641b1660c2a1fd2acd324c2806cd3e2bfcf8052a697ec2be94ae430be8f51165afd46f0f7811ffb20a8ec36ef04efaf20ee26a8a1a6b3f164553b8d02f39475a3621e7197ba69a65cd47b3c25a38fde73cbb792ab16c11064b4c651d76bfd8f26836a172251a5a26783746ba43a66f5a231e82390f653768c6386c08950ace0923a192a39234e275e142b4fe5916fdb9575a273f6aa906ea56c2e35ff01d9b870be664be76e53155bf0aab17d1ec7be7d73836c8fffaeea7d9caa87d30aed46da1c8d1a6368623263b03f497dd2d79ad61480bf2e5d5edaea06cbb896afcb2e9a2a6a579e89fac163f2aa1e41043861d09ff6bdc1a3a3cbdcc6e5ef9f6451713c8c1f89a64b7b558545cd3975a56f69e89ad2bb5fc797757a79888b686c68173b980424b2bd13d90dd2e68857e4fded5a9a5c149181c2ee9f3538caf27092eaab8e4ccd821f888f0c7606403db36b71a1b9d629589e7cb94210190f68bc86aa39b87a70c9c7ae22306ed335bd7498285196a599376cdd477791a154ffaa70d4f2f9ea46fbdbbd09a29a9e1cc3498c477297e5085bf6f1e47371d11aa31992cff7b1c66989f8db95a6622fcefeb78a6d1b84928c259979b584bcdd1f27df3115804", 0x1000, 0x8811, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) write$P9_RREADLINK(r8, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) acct(&(0x7f0000000100)='./file1\x00') acct(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x82200, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000b80)={[{@usrquota}, {@resgid}], [{@seclabel}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") 2m4.162318847s ago: executing program 7 (id=370): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040), 0x2) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @multicast2}, 0x19, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='lo\x00', 0x2826, 0x7ff, 0x3}) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040), 0x2) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @multicast2}, 0x19, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='lo\x00', 0x2826, 0x7ff, 0x3}) (async) 2m3.947355457s ago: executing program 7 (id=375): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f0000000540)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@block_validity}, {@lazytime}, {@nombcache}, {@usrjquota}]}, 0x3, 0x446, &(0x7f0000000ec0)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f0000000240)=""/58, 0x3a) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0xf1) lstat(&(0x7f0000000400)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000001480)={0x0, @in6={{0xa, 0x4e23, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}}, 0x84) bind$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r4, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) unshare(0x6a040000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x5, 0x0) r10 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r10, 0x13) waitid(0x0, r10, 0x0, 0x2100000a, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000ff0100000a59feffff000a01030000000000000000010000000900010073797a310000000060000000030a010200000000000000000100000100000000030a010800000000000000000700000300000a400000000400000b4000000004000002400000000000000004000004800000030070696d36726567310000000000000000000007006e6174000000024000000000000000020000030073797a310000000000000480000002403823aa1a0000030073797a6b616c6c657231000000000000000003006d6163766c616e300000000000000000000002402ffdd9a600000c000385c8939d80cb9dd9089622637a2ae2cbab77c7090d89f7a04f8809f56fe91e55e2c6136945dd590e0000000000030073797a3200000000140000001100010000000000000000000000000a"], 0x100}}, 0x0) setresuid(r8, r8, 0x0) setresuid(r1, r7, r1) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) 2m3.428979305s ago: executing program 7 (id=383): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0x31}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=r0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_emit_ethernet(0x0, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) readlink(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) 2m2.098228067s ago: executing program 7 (id=404): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x7, &(0x7f0000000640)=ANY=[@ANYBLOB="0bce4d3e9b8249ff532800ed6773eb16e0af75a2073b2444213b59580500da", @ANYRES64=r0, @ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='wbt_step\x00', r1, 0x0, 0x10001}, 0x18) unshare(0x2a020400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f0000000b80)=""/241, &(0x7f0000000c80)="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", &(0x7f0000000a00)="65b0a1e5972e21f5734edb04e424210fd3f7ce8e6bd2340f4367a790cf4eebd807c6a678948fbc2cf61d778f2cae6dec7bc6a39e846d8f6a29fce8febbf4c285c90fca5f9f4260e051b09541714db18cfa7bfb0ad9fd6f8bd01e48f1fd400f8d9d1ab7a9f04e1c3c93693ffcb57e0ac441587d3c3e59a93ddb256058ce0cad071869af50cefb6ae989dc8b050c483f8543603c61ba5c746accbb1ece00f64703ec015471a6df309dc081fa55c100a093166978488c74d8e63f03f17344cd99184cf402f2e5f9202dc0e45f44bea7516dfde34603ebfb87e5ef31c130159f76f1fbec1b0fe1bc7ef8974c1ab8e365", 0xa7c, r2, 0x0, 0xfffe}, 0xfffffffffffffdd0) sendto$inet6(r0, &(0x7f00000006c0)="552aff45", 0x4, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x24, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x9, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES16=r5, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock=0x22, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000700)='cachefiles_ref\x00', r4}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) get_robust_list(0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r5, 0x0, 0x200000000000006}, 0x18) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r7, 0x0) connect$unix(r6, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r7, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xf0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2m2.092990838s ago: executing program 35 (id=404): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x7, &(0x7f0000000640)=ANY=[@ANYBLOB="0bce4d3e9b8249ff532800ed6773eb16e0af75a2073b2444213b59580500da", @ANYRES64=r0, @ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='wbt_step\x00', r1, 0x0, 0x10001}, 0x18) unshare(0x2a020400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f0000000b80)=""/241, &(0x7f0000000c80)="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", &(0x7f0000000a00)="65b0a1e5972e21f5734edb04e424210fd3f7ce8e6bd2340f4367a790cf4eebd807c6a678948fbc2cf61d778f2cae6dec7bc6a39e846d8f6a29fce8febbf4c285c90fca5f9f4260e051b09541714db18cfa7bfb0ad9fd6f8bd01e48f1fd400f8d9d1ab7a9f04e1c3c93693ffcb57e0ac441587d3c3e59a93ddb256058ce0cad071869af50cefb6ae989dc8b050c483f8543603c61ba5c746accbb1ece00f64703ec015471a6df309dc081fa55c100a093166978488c74d8e63f03f17344cd99184cf402f2e5f9202dc0e45f44bea7516dfde34603ebfb87e5ef31c130159f76f1fbec1b0fe1bc7ef8974c1ab8e365", 0xa7c, r2, 0x0, 0xfffe}, 0xfffffffffffffdd0) sendto$inet6(r0, &(0x7f00000006c0)="552aff45", 0x4, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x24, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x9, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES16=r5, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock=0x22, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000700)='cachefiles_ref\x00', r4}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) get_robust_list(0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r5, 0x0, 0x200000000000006}, 0x18) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r7, 0x0) connect$unix(r6, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r7, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xf0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2.241797594s ago: executing program 3 (id=2168): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x256581, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x4, &(0x7f0000000240), 0x0, 0x20009, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) unshare(0x64000680) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r6 = msgget$private(0x0, 0x8) msgrcv(r6, &(0x7f0000001080)={0x0, ""/1}, 0x9, 0x2, 0x3000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1000000000000b, 0x6f76, 0x7, 0xfffffffffffffffd, 0x1, 0x8, 0x7b, 0x3}) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080), 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000000000000000000900010073797a300000000006000240eb000000000400040205000300110000002ea1a101450570d7a9212db9bd857f59cea5df00840322000000000000a9f115629f2c77e4b46e8234c4016be70c565eeda00b542bbb19e85730c653d9a9e05fa6bc2ffea2c72a33"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1400000001080103000013b4f5fc39c5a7ce1d20"], 0x14}}, 0x0) 1.705023643s ago: executing program 8 (id=2180): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) read$ptp(0xffffffffffffffff, &(0x7f0000000080)=""/27, 0x1b) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x83e8}, 0x18) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) munlock(&(0x7f0000daf000/0x1000)=nil, 0x1000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0x0) 1.594158784s ago: executing program 8 (id=2181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="0900000007000000000000000a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000ac0)='GPL\x00', 0x8, 0x67, &(0x7f0000000b00)=""/103, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000cc0)={0x2, 0xa, 0xfffffffc, 0x3}, 0x10, 0x29bdf, 0xffffffffffffffff, 0x3, &(0x7f00000011c0)=[0xffffffffffffffff], &(0x7f0000001200)=[{0x3, 0x3, 0xa, 0x1}, {0x1, 0x1, 0x2, 0xb}, {0x1, 0x5, 0xb, 0x2}], 0x10, 0x6}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='(\"@]K@{.\"\x00') (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x105, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) unshare(0x20000400) (async) r6 = epoll_create1(0x0) epoll_pwait(r6, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES16=0x0, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (rerun: 32) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r5}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) syz_usb_connect(0x5, 0x24, &(0x7f0000000d40)=ANY=[@ANYBLOB="120150028154f25753ff66b153c8010203010902100001f70010af0904d100001b7b7805"], 0x0) (rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000100)) 1.548066588s ago: executing program 8 (id=2182): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1210090, &(0x7f0000000c40)={[{@barrier}, {@auto_da_alloc}, {@noquota}, {@barrier}, {@nodioread_nolock}, {@nodioread_nolock}, {@resuid}, {@dioread_lock}], [{@obj_user={'obj_user', 0x3d, ':+)'}}, {@context={'context', 0x3d, 'staff_u'}}, {@uid_lt}, {@fsmagic={'fsmagic', 0x3d, 0x4}}]}, 0x1, 0x59f, &(0x7f0000000d40)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x80000008, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x10, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000480)={0x0, 0x102d, 0x1fffffff}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0xc, 0x40}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000010001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd70000035000002000000500000000000000060001200726663343130362867636d28616573292900"/234, @ANYRES32], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f00000004c0), 0x8, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x0, r2}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1a, 0x21, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffff092}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0xe, 0x80, 0x4}, 0x10, 0x1df52, r1, 0x8, &(0x7f0000000500)=[r6], &(0x7f0000000900)=[{0x3, 0x2, 0xc, 0x2}, {0x4, 0x2, 0xf, 0xa}, {0x4, 0x2, 0xa, 0x8}, {0x0, 0x1, 0x7, 0xb}, {0x1, 0x5, 0x10, 0x5}, {0x3, 0x1, 0x5, 0x1}, {0x0, 0x1, 0x4, 0xa}, {0x0, 0x5, 0x6, 0x5}], 0x10, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000600)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) open(&(0x7f0000000080)='./file0\x00', 0xa080, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r9, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) 1.441488268s ago: executing program 8 (id=2184): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300800001d00200027bd7000ffdbdf2508001600070000cedfc6ca4f39a5d20008001f000300000008000b000004000008000c0003000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000100", @ANYRES16=r6, @ANYBLOB="210727bd7000fbdbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x40880) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180), 0x80, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r7, 0x2275, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$TIOCSBRK(r8, 0x5427) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) utimensat(r9, 0x0, &(0x7f0000000100)={{0x0, 0x3ffffffe}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x4, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x9c, r11, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x17}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x2000c011}, 0x81) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) 874.04375ms ago: executing program 3 (id=2193): r0 = socket(0x11, 0x2, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x63e, 0x4) sendmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000001c00)="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", 0xfdd}], 0x2}}], 0x1, 0x24044015) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/186, 0xba}], 0x1}, 0x80000001}], 0x1, 0x2002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x58, &(0x7f00000001c0)=0x0) dup3(r1, r2, 0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009180)=@newtaction={0x60, 0x30, 0x519, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffd, 0x0, 0x10000000, 0x40000008, 0xfffffbff}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000000)=0xc, 0x4) write(r1, 0x0, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e2200649078020000000300000001000000227df434a09a17136738e59641b8c413da6132d7e6deef81c451202c02000000ab74f8fdb7a24523383898bed84ed7d53a8c4933e11dbfea618d175f76fca313792d8b5f8fc60cb1319650c6e6c82eaf"], 0x0) 747.894272ms ago: executing program 3 (id=2199): r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) set_mempolicy_home_node(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0) r2 = syz_pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setns(r2, 0x24020000) syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58) 724.568343ms ago: executing program 3 (id=2200): r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000001500)='rxrpc_call\x00', r1, 0x0, 0x3}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='\\\xf7#^-+f%\'\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') read$ptp(r2, &(0x7f0000000080)=""/27, 0x1b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3, 0x0, 0x800000000000}, 0xfffffffffffffe4e) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000ff1004ce6be7fffbffffffffffffff00dbd2c23c24c280a46c52"], 0x50) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000008c0)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYRESDEC=r5], &(0x7f0000000000)='GPL\x00', 0xa}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff008500"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000780)='sctp_probe_path\x00', r5, 0x0, 0x5}, 0xc) r7 = syz_io_uring_setup(0xbc6, &(0x7f0000000100)={0x0, 0x1569, 0x10000, 0x2, 0x285}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r7, 0x29ab, 0xd480, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000001240)={[{@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mb_optimize_scan}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@noblock_validity}, {@minixdf}, {@data_err_abort}, {@resuid}, {@noauto_da_alloc}], [{@obj_role={'obj_role', 0x3d, 'noblock_validity'}}]}, 0x0, 0x509, &(0x7f0000000bc0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000740)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffb}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) munlock(&(0x7f0000daf000/0x1000)=nil, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) socket$netlink(0x10, 0x3, 0x0) 617.403964ms ago: executing program 5 (id=2206): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='vm_unmapped_area\x00', r0}, 0xfffffffffffffefd) io_setup(0x3, &(0x7f0000000340)) 522.214423ms ago: executing program 6 (id=2207): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)}], 0x1}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0xfff]}, 0x8) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x260, 0x0, 0xe8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff, 0x0, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xffffffff], 'lo\x00', 'team_slave_1\x00', {0xff}, {0x80}, 0x36, 0xd, 0x4, 0x21}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xf8, 0x2, {0x6}}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x2f, 0x3, 0x0, 0x4, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @mcast1, [0xff, 0xffffff00, 0xffffffff, 0xffffffff], [0xff, 0xff, 0xffffffff], [0xffffffff, 0xff], 0x2200, 0x3820}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xa9, 0x9f, {0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x44}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0xff, 0xffffff00], 'veth0_to_hsr\x00', 'nr0\x00', {0xff}, {}, 0xc, 0x2, 0x0, 0x1d}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0x9, 0x8000, 0x1, 0x0, "4c24e5125e4163da12c31efad3afcd711b94841a53981a3f73a8b017ceb25083f06f6e5006e9d77e0de3ffddf267bfe072c704cd6b7473c461841d14bb1cd5d5"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_open_dev$vcsa(&(0x7f00000001c0), 0x5, 0xc0040) r3 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) write(r4, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000080)={'pimreg1\x00', 0x400}) 506.672804ms ago: executing program 5 (id=2209): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40), 0x4, 0x4eb, &(0x7f0000000a80)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20000810) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000640)=@filename='./file1\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000940)=0xfce4) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffb000/0x3000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000000070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff010000000000000200130002"], 0x98}, 0x1, 0x7}, 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000005) sendto$inet6(r0, 0x0, 0x0, 0x20000010, &(0x7f0000000140)={0xa, 0x4e21, 0x1, @local, 0xe7}, 0x1c) r9 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f00000000c0)={0x60, 0x2, &(0x7f000000a000/0x4000)=nil, &(0x7f0000007000/0x4000)=nil, 0x7fffffffffffffff, &(0x7f0000000040)=[{0x4, 0x40, 0x4}, {0x401, 0x88ae, 0x3}, {0x8, 0x4, 0xf}, {0xc, 0x1}], 0x4, 0xffffffffffff8000, 0x4, 0x1, 0x13, 0x8}) 460.457748ms ago: executing program 8 (id=2210): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='sched_switch\x00', r1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='sched_switch\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="f9ffffff00e41ca58a59bb90bd4aff8fe01de4ab2649d1f9e25421f754d090ec5135a81a1f6da22b4048af2942ebc27f127698043de7be5228e257588adf61b9a938494d81d5dae53f8517b5da012153e811ce8d01c22ac207687dbe75941fe250c9afbd35462df1043e4e10eef0c7d909f435bb38a191172588164523568f400d1ccab780d99b", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0x8, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f0000000600)={0x9, 0x3, 0x1}) (async) ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f0000000600)={0x9, 0x3, 0x1}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x5, 0x6, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x700, 0x7800, 0x7, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x5, 0x6, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x700, 0x7800, 0x7, 0x8}}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@ifindex=r5, r1, 0xa, 0x10, r1, @void, @value=r1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/206, 0xce) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9, 0x0, 0x5}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x850}, 0xc7c) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x850}, 0xc7c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0401010000000000140003006970366772653000000000000000000008000a00", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0) times(&(0x7f0000000080)) (async) times(&(0x7f0000000080)) 414.000653ms ago: executing program 6 (id=2212): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x8, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2074, 0x3902, 0x43, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x176) (async) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f8f3c3e237ade16abcf089d415881491ba702f4b73d0a017dd8bf789155dfe700f118d1bc6da5bff844d9", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) removexattr(0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRESDEC=r5], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x20004441) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000060a010400000000000000000a00fffe0900010073797a300000000018000480140001800e000100636f6e6e6c696d69740000000900020073797a32000000000500074098000000140000001400010000000000000000000100000ae9dbf8ab8b1fd9b6762f87b296ff20e1b77ce56c24a04619b812dbdff73c"], 0x74}, 0x1, 0x0, 0x0, 0x850}, 0xc7c) (async) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x9) r9 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r9, 0x21, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) 402.895464ms ago: executing program 8 (id=2213): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket(0x10, 0x3, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_begin\x00', r2, 0x0, 0x1000000000000}, 0x18) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) tgkill(r3, r3, 0x1a) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, 0x0) sendfile(r0, r4, 0x0, 0x7fffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) io_uring_setup(0x6b9e, &(0x7f0000000240)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x4000159}) socket$rds(0x15, 0x5, 0x0) open(0x0, 0x143342, 0x2d) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan0\x00'}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x3dd3e387) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) socket$inet_udp(0x2, 0x2, 0x0) 354.263678ms ago: executing program 5 (id=2215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4051) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) syz_io_uring_setup(0x102, &(0x7f0000000300)={0x0, 0x2c46, 0x40, 0x3, 0x200008d}, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESOCT, @ANYRES64], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) 331.58705ms ago: executing program 1 (id=2216): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x7}, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) lseek(r1, 0xfffffffffffffff8, 0x1) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f00000000c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80c0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) getpid() (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 330.81575ms ago: executing program 5 (id=2217): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1020affff20c311df259149e300", 0x10) listen(r0, 0x0) (async) r1 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100, 0x2, 0x2e0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}}) (async) io_uring_enter(r1, 0x663e, 0x0, 0x2, 0x0, 0x0) (async) shutdown(r0, 0x1) (async) r4 = syz_io_uring_setup(0x2b4b, &(0x7f0000000040)={0x0, 0x636a, 0x400, 0x1, 0x9c}, &(0x7f00000000c0), &(0x7f0000000100)) dup(r4) 309.431712ms ago: executing program 6 (id=2218): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x1}}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x8084) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={r4}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000}, [@map_fd={0x18, 0x0, 0x2, 0x0, r4}, @ldst={0x1, 0x2, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2a3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r5, 0x0, 0x1034}, 0x18) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x18}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000900)=r7, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000e80)={0x0, 0x0}) fcntl$setownex(r6, 0xf, &(0x7f0000000240)={0x2, r10}) 237.873639ms ago: executing program 5 (id=2219): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000180)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x10007ffffffff}, 0x18) io_setup(0x400, &(0x7f0000000000)=0x0) io_destroy(r3) socket(0xa, 0x2, 0x0) 237.459739ms ago: executing program 1 (id=2220): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64], 0x48) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf, 0x1010, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000ec0)={r3, 0xc4, 0x20}, &(0x7f0000000f00)=0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) 236.138749ms ago: executing program 6 (id=2221): mkdir(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, 0x0, 0x8094) r1 = socket(0xa, 0x3, 0x3a) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000000008500000036000000c50000002a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r7, r6}, 0x40) syz_emit_ethernet(0xfe2a, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@can={0xc, {{0x4, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "79f551a12bf0a7b9"}}}}, 0x0) 235.686239ms ago: executing program 3 (id=2222): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) (async) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) (async) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f, 0x9}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1dc5dd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xc88, 0x5}, 0x6025, 0x4005, 0xb, 0x6, 0x1, 0xfffffffd, 0x71a, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000020000090900010073797a31000000007c000000030a01040000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400000006408000a40000000020b00070066696c7465720000280008"], 0xc4}, 0x1, 0x0, 0x0, 0x24004900}, 0x2000) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x7, 0xfa00, @id_tos={0x0, r5, 0x1000000, 0x3, 0x4000}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x7, 0xfa00, @id_tos={0x0, r5, 0x1000000, 0x3, 0x4000}}, 0x20) sendmmsg$inet(r3, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000ec0)={[{@nodelalloc}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000005}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x7e}}], [{@fowner_eq}]}, 0xfd, 0x573, &(0x7f0000000640)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpu.stat\x00', 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000001040)=[{{&(0x7f0000000e80)={0xa, 0x4e22, 0x201, @private0, 0x481}, 0xfffffffffffffd3c, 0x0}}], 0x1, 0x20000041) r8 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$EXT4_IOC_GROUP_ADD(r8, 0x40e8662e, &(0x7f0000000000)={0xc550, 0x40000000000002, 0x10, 0xb, 0x5, 0x1}) (async) ioctl$EXT4_IOC_GROUP_ADD(r8, 0x40e8662e, &(0x7f0000000000)={0xc550, 0x40000000000002, 0x10, 0xb, 0x5, 0x1}) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x2) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000140)) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) 191.427443ms ago: executing program 1 (id=2223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000000), 0xfd, 0x244, &(0x7f0000000680)="$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") r2 = creat(&(0x7f0000000f00)='./bus\x00', 0x8d) write$cgroup_type(r2, &(0x7f0000000240), 0xfb3f) creat(&(0x7f0000000000)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x6, &(0x7f0000000a80)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="a1ab0000ffff0000000032"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 191.008153ms ago: executing program 6 (id=2224): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000180), 0x1, 0x4f4, &(0x7f00000006c0)="$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") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xbd2, 0x6, 0xfffffffffffffffd, 0xb3, 0xfffffff9}) 93.903742ms ago: executing program 1 (id=2225): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018011e002020672500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702060000000000b7030000000000008500000070000000a8a14234bee6a0b17e1795f0f6587deb1a50cdaf87691e7e5861f00dc3faa618479e9977d4831c7210e62b2b01969e7e4f4edfe1a14113581559aa572b2187f1043686fd38e3f654111f2b4ec022508995cbef7128d6a2112412680ae2e8cbe46a48b66ee289fb45"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff6b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0}, 0x94) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000800)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000740, 0x0, 0x0, 0x200000000770, 0x2000000007a0], 0x0, &(0x7f0000000080), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x138) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r3, r3, 0x1a) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f00000001c0)=0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x64}}, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 93.638522ms ago: executing program 5 (id=2226): io_setup(0x700, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2004008, &(0x7f00000002c0)={[{@grpquota}, {@errors_remount}, {@dioread_nolock}, {@bsdgroups}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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") io_setup(0x4, &(0x7f0000000040)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/uevent_helper', 0x2000, 0x88) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x550, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0'}, 0xb) socket$netlink(0x10, 0x3, 0x10) ftruncate(0xffffffffffffffff, 0x200c17a) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r8, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x9}}}, 0x24}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100)=0x80, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r10, 0x0, 0xbc3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) 93.385902ms ago: executing program 6 (id=2227): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00120000009404006c0012800b00010062726964676500005c0002800c001e00000000000000000005002a00ff0000000500260001000000050019000000000008001a00d80300000c001f0000000000000000000500240000000000050024000100000008001a0007000000050007000700000008000a00", @ANYRES32=r2], 0x9c}}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00120000009404006c0012800b00010062726964676500005c0002800c001e00000000000000000005002a00ff0000000500260001000000050019000000000008001a00d80300000c001f0000000000000000000500240000000000050024000100000008001a0007000000050007000700000008000a00", @ANYRES32=r2], 0x9c}}, 0x40) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01"], 0x3c}}, 0x0) (async) 78.579703ms ago: executing program 1 (id=2228): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4051) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) syz_io_uring_setup(0x102, &(0x7f0000000300)={0x0, 0x2c46, 0x40, 0x3, 0x200008d}, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESOCT, @ANYRES64], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) 9.2437ms ago: executing program 3 (id=2229): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0xbb3, &(0x7f0000000180)={0x0, 0xa45d, 0xc000, 0xffffff81, 0x20002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000a000}, 0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) (async) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x4575, &(0x7f0000000080)={0x0, 0xa397, 0x40, 0xfffffffe, 0xfb}, &(0x7f0000000000), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f0000002300)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) 0s ago: executing program 1 (id=2230): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)=@ipv4_newnexthop={0x64, 0x68, 0x4, 0x70bd2c, 0x25dfdbfb, {0x2, 0x0, 0x1, 0x0, 0x22}, [@NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF={0x10, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG_NAME={0xc, 0x2, 'cgroup2\x00'}}}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xfffc}]}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc}}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20044041) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000031900850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sys_enter\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) memfd_secret(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x80010, 0xffffffffffffffff, 0xb53fb000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) unshare(0xa020480) r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x4) r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0) readv(r8, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4080, 0xff0}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") kernel console output (not intermixed with test programs): r after parsing attributes in process `syz.1.346'. [ 71.384683][ T5159] netlink: 'syz.5.344': attribute type 1 has an invalid length. [ 71.385594][ T5159] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 71.415925][ T5168] netlink: 92 bytes leftover after parsing attributes in process `syz.1.347'. [ 71.416207][ T5168] SELinux: failed to load policy [ 71.423526][ T5168] SELinux: Context Ü is not valid (left unmapped). [ 71.463841][ T4956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.508545][ T4631] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.525759][ T5176] autofs: Bad value for 'uid' [ 71.530504][ T5176] autofs: Bad value for 'uid' [ 71.560341][ T5184] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.580402][ T5187] netlink: 'syz.3.350': attribute type 4 has an invalid length. [ 71.588225][ T5187] netlink: 152 bytes leftover after parsing attributes in process `syz.3.350'. [ 71.621550][ T5187] .`: renamed from bond0 [ 71.627245][ T5187] netlink: 'syz.3.350': attribute type 4 has an invalid length. [ 71.634964][ T5187] netlink: 152 bytes leftover after parsing attributes in process `syz.3.350'. [ 71.653931][ T5187] netlink: 'syz.3.350': attribute type 4 has an invalid length. [ 71.661747][ T5187] netlink: 152 bytes leftover after parsing attributes in process `syz.3.350'. [ 71.673388][ T5184] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.698323][ T5203] program syz.1.353 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.716143][ T5187] netlink: 'syz.3.350': attribute type 4 has an invalid length. [ 71.723858][ T5187] netlink: 152 bytes leftover after parsing attributes in process `syz.3.350'. [ 71.748154][ T5184] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.802727][ T5187] netlink: 'syz.3.350': attribute type 4 has an invalid length. [ 71.810567][ T5187] netlink: 152 bytes leftover after parsing attributes in process `syz.3.350'. [ 71.828736][ T5184] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.864714][ T5187] netlink: 'syz.3.350': attribute type 4 has an invalid length. [ 71.872485][ T5187] netlink: 152 bytes leftover after parsing attributes in process `syz.3.350'. [ 71.885075][ T5221] netlink: 'syz.1.355': attribute type 12 has an invalid length. [ 71.910666][ T3866] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.926048][ T5187] netlink: 'syz.3.350': attribute type 4 has an invalid length. [ 71.933757][ T5187] netlink: 152 bytes leftover after parsing attributes in process `syz.3.350'. [ 71.950454][ T3866] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.967776][ T5218] loop5: detected capacity change from 0 to 8192 [ 71.979317][ T3866] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.987858][ T5187] netlink: 'syz.3.350': attribute type 4 has an invalid length. [ 71.995687][ T3866] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.005260][ T5185] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.006682][ T5218] msdos: Unknown parameter '000000000000000000000040000000000000000000000401777777777777777777777ÿÿÿÿ' [ 72.044217][ T4956] veth0_vlan: entered promiscuous mode [ 72.081086][ T5185] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.125458][ T4956] veth1_vlan: entered promiscuous mode [ 72.235916][ T5185] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.281365][ T5185] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.576579][ T4956] veth0_macvtap: entered promiscuous mode [ 72.584242][ T4956] veth1_macvtap: entered promiscuous mode [ 72.599529][ T4956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.620989][ T4956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.636850][ T3841] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.683097][ T3841] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.683146][ T3841] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.683196][ T3841] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.717170][ T5237] loop3: detected capacity change from 0 to 256 [ 72.745968][ T5237] FAT-fs (loop3): codepage cp1255 not found [ 72.749748][ T3382] IPVS: starting estimator thread 0... [ 72.834702][ T5244] IPVS: using max 2208 ests per chain, 110400 per kthread [ 72.888827][ T5243] loop1: detected capacity change from 0 to 8192 [ 72.908542][ T5255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.132678][ T10] Process accounting resumed [ 73.204083][ T5275] loop7: detected capacity change from 0 to 512 [ 73.325684][ T5275] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.362650][ T5283] IPVS: Error connecting to the multicast addr [ 73.405575][ T5275] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.485816][ T5249] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 73.569804][ T4956] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.731614][ T5318] ALSA: seq fatal error: cannot create timer (-19) [ 73.794424][ T5328] loop7: detected capacity change from 0 to 512 [ 73.815444][ T5328] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 73.826948][ T5328] EXT4-fs (loop7): 1 truncate cleaned up [ 73.833955][ T5328] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.089936][ T5345] loop3: detected capacity change from 0 to 512 [ 74.156842][ T5345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.236786][ T5345] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.309535][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.344368][ T5353] 9p: Bad value for 'port' [ 74.360776][ T4956] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 74.422059][ T4956] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 74.434232][ T5343] loop1: detected capacity change from 0 to 32768 [ 74.453109][ T5359] batman_adv: batadv0: Interface deactivated: dummy0 [ 74.455421][ T4956] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 74.459965][ T5359] batman_adv: batadv0: Removing interface: dummy0 [ 74.491505][ T5359] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 74.503878][ T5363] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 74.515977][ T5343] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 74.521431][ T5343] loop1: p1 start 460800 is beyond EOD, truncated [ 74.528049][ T5343] loop1: p2 size 83886080 extends beyond EOD, truncated [ 74.535425][ T5363] vhci_hcd vhci_hcd.2: invalid port number 96 [ 74.535445][ T5363] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 74.546632][ T5346] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.550964][ T5343] loop1: p5 start 460800 is beyond EOD, truncated [ 74.551003][ T5343] loop1: p6 size 83886080 extends beyond EOD, truncated [ 74.593168][ T5365] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 74.608991][ T5365] dvmrp1: persist enabled [ 74.638316][ T5365] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 74.643856][ T5365] dvmrp1: persist disabled [ 74.692563][ T5370] openvswitch: netlink: Missing key (keys=40, expected=100) [ 74.761378][ T5372] pimreg: entered allmulticast mode [ 74.774918][ T5373] pimreg: left allmulticast mode [ 74.790607][ T5164] udevd[5164]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 74.799361][ T3652] udevd[3652]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 74.807907][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 74.821913][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 74.849483][ T5372] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.863660][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 74.863677][ T29] audit: type=1326 audit(1767360918.447:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060aa8f749 code=0x7ffc0000 [ 74.898417][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 74.981562][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 74.993930][ T29] audit: type=1326 audit(1767360918.447:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f060aa8f749 code=0x7ffc0000 [ 74.995275][ T3600] udevd[3600]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 75.017583][ T29] audit: type=1326 audit(1767360918.467:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060aa8f749 code=0x7ffc0000 [ 75.050466][ T29] audit: type=1326 audit(1767360918.467:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f060aa8f749 code=0x7ffc0000 [ 75.073908][ T29] audit: type=1326 audit(1767360918.487:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060aa8f749 code=0x7ffc0000 [ 75.098497][ T29] audit: type=1326 audit(1767360918.497:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f060aa8f749 code=0x7ffc0000 [ 75.121901][ T29] audit: type=1326 audit(1767360918.497:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060aa8f749 code=0x7ffc0000 [ 75.145246][ T29] audit: type=1326 audit(1767360918.517:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f060aa8f749 code=0x7ffc0000 [ 75.168720][ T29] audit: type=1326 audit(1767360918.517:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060aa8f749 code=0x7ffc0000 [ 75.192104][ T29] audit: type=1326 audit(1767360918.517:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f060aa8f749 code=0x7ffc0000 [ 75.217155][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 75.303976][ T23] Process accounting resumed [ 75.345720][ T5416] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 75.352290][ T5416] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 75.359981][ T5416] vhci_hcd vhci_hcd.0: Device attached [ 75.376105][ T5417] vhci_hcd: connection closed [ 75.376321][ T37] vhci_hcd vhci_hcd.1: stop threads [ 75.386419][ T37] vhci_hcd vhci_hcd.1: release socket [ 75.391898][ T37] vhci_hcd vhci_hcd.1: disconnect device [ 75.438333][ T5432] loop5: detected capacity change from 0 to 512 [ 75.449484][ T5432] EXT4-fs warning (device loop5): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 75.528180][ T5443] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 75.540658][ T5443] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.547908][ T5443] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.558268][ T5443] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 75.612704][ T5450] SELinux: policydb version 1843612271 does not match my version range 15-35 [ 75.622161][ T5450] SELinux: failed to load policy [ 75.649697][ T3841] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.666291][ T5452] loop5: detected capacity change from 0 to 512 [ 75.679641][ T5452] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 75.698010][ T5452] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 75.706687][ T5452] System zones: 1-12 [ 75.711243][ T5452] EXT4-fs (loop5): 1 truncate cleaned up [ 75.717671][ T5452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.733647][ T3841] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.758235][ T3783] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.798190][ T3841] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.841200][ T5470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.851392][ T5470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.860503][ T3841] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.938382][ T5477] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 75.945021][ T5477] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 75.952839][ T5477] vhci_hcd vhci_hcd.0: Device attached [ 75.970603][ T5477] process 'syz.1.410' launched '/dev/fd/15' with NULL argv: empty string added [ 75.975457][ T3841] bridge_slave_1: left allmulticast mode [ 75.985582][ T3841] bridge_slave_1: left promiscuous mode [ 75.991258][ T3841] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.999204][ T3841] bridge_slave_0: left allmulticast mode [ 76.004950][ T3841] bridge_slave_0: left promiscuous mode [ 76.010692][ T3841] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.098105][ T3841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.108241][ T3841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.118068][ T3841] bond0 (unregistering): Released all slaves [ 76.124689][ T3693] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 76.131820][ T3841] bond1 (unregistering): Released all slaves [ 76.172375][ T5456] chnl_net:caif_netlink_parms(): no params data found [ 76.192716][ T3841] hsr_slave_0: left promiscuous mode [ 76.194732][ T3693] usb 3-1: new high-speed USB device number 2 using vhci_hcd [ 76.206397][ T3841] hsr_slave_1: left promiscuous mode [ 76.212202][ T3841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.219762][ T3841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.227878][ T3841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.235334][ T3841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.258375][ T3841] veth1_macvtap: left promiscuous mode [ 76.267712][ T3841] veth0_macvtap: left promiscuous mode [ 76.273402][ T3841] veth1_vlan: left promiscuous mode [ 76.280053][ T3841] veth0_vlan: left promiscuous mode [ 76.444432][ T5502] validate_nla: 27 callbacks suppressed [ 76.444447][ T5502] netlink: 'syz.5.412': attribute type 5 has an invalid length. [ 76.458028][ T5502] __nla_validate_parse: 44 callbacks suppressed [ 76.458042][ T5502] netlink: 168 bytes leftover after parsing attributes in process `syz.5.412'. [ 76.476707][ T3841] team0 (unregistering): Port device team_slave_1 removed [ 76.500726][ T3841] team0 (unregistering): Port device team_slave_0 removed [ 76.609046][ T3860] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.652421][ T3860] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.667274][ T5456] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.674430][ T5456] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.686073][ T5456] bridge_slave_0: entered allmulticast mode [ 76.692858][ T5456] bridge_slave_0: entered promiscuous mode [ 76.707944][ T3860] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.725211][ T5456] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.732328][ T5456] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.754526][ T5478] vhci_hcd: connection reset by peer [ 76.760567][ T584] vhci_hcd vhci_hcd.1: stop threads [ 76.765942][ T584] vhci_hcd vhci_hcd.1: release socket [ 76.771413][ T584] vhci_hcd vhci_hcd.1: disconnect device [ 76.796629][ T5456] bridge_slave_1: entered allmulticast mode [ 76.808740][ T5456] bridge_slave_1: entered promiscuous mode [ 76.821919][ T3860] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.894816][ T5456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.919639][ T5456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.975427][ T5456] team0: Port device team_slave_0 added [ 76.978758][ T5539] loop6: detected capacity change from 0 to 512 [ 76.990226][ T5456] team0: Port device team_slave_1 added [ 77.032018][ T5456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.039111][ T5456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.065194][ T5456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.096744][ T5456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.103790][ T5456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.129785][ T5456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.181407][ T5456] hsr_slave_0: entered promiscuous mode [ 77.187593][ T5456] hsr_slave_1: entered promiscuous mode [ 77.207695][ T5456] debugfs: 'hsr0' already exists in 'hsr' [ 77.213695][ T5456] Cannot create hsr debugfs directory [ 77.366145][ T5565] pimreg: entered allmulticast mode [ 77.396707][ T5563] netlink: 168 bytes leftover after parsing attributes in process `syz.5.421'. [ 77.477453][ T5456] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 77.495735][ T5578] sd 0:0:1:0: device reset [ 77.502505][ T5456] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 77.531431][ T5456] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 77.552103][ T5456] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 77.592680][ T5592] xt_TPROXY: Can be used only with -p tcp or -p udp [ 77.628322][ T5592] xt_TPROXY: Can be used only with -p tcp or -p udp [ 77.643208][ T5608] netlink: 16 bytes leftover after parsing attributes in process `syz.5.426'. [ 77.675567][ T5613] siw: device registration error -23 [ 77.691067][ T5612] lo speed is unknown, defaulting to 1000 [ 77.699762][ T5456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.715336][ T5612] lo speed is unknown, defaulting to 1000 [ 77.731333][ T5456] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.739789][ T5612] lo speed is unknown, defaulting to 1000 [ 77.746679][ T5612] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 77.757811][ T3841] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.764931][ T3841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.780660][ T5612] lo speed is unknown, defaulting to 1000 [ 77.789660][ T3841] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.796819][ T3841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.806358][ T5612] lo speed is unknown, defaulting to 1000 [ 77.816082][ T5612] lo speed is unknown, defaulting to 1000 [ 77.826629][ T5625] netlink: 'syz.3.431': attribute type 1 has an invalid length. [ 77.830970][ T5612] lo speed is unknown, defaulting to 1000 [ 77.852136][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.867849][ T5612] lo speed is unknown, defaulting to 1000 [ 77.894858][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.911057][ T5635] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 77.938320][ T5635] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 77.955636][ T5625] loop3: detected capacity change from 0 to 512 [ 77.985485][ T5625] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.431: corrupted in-inode xattr: e_value size too large [ 78.040541][ T5625] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.431: couldn't read orphan inode 15 (err -117) [ 78.055200][ T5651] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.072418][ T5625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.104344][ T5658] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.127428][ T5651] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.150788][ T5456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.186845][ T5651] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.247153][ T5651] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.321943][ T5456] veth0_vlan: entered promiscuous mode [ 78.330875][ T5456] veth1_vlan: entered promiscuous mode [ 78.350182][ T5456] veth0_macvtap: entered promiscuous mode [ 78.358333][ T5456] veth1_macvtap: entered promiscuous mode [ 78.373443][ T5456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.387601][ T5456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.400806][ T3841] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.413031][ T3841] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.422859][ T3841] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.434374][ T3841] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.557641][ T5709] syzkaller0: entered promiscuous mode [ 78.563176][ T5709] syzkaller0: entered allmulticast mode [ 78.603651][ T5711] netlink: 36 bytes leftover after parsing attributes in process `syz.1.438'. [ 78.700874][ T23] IPVS: starting estimator thread 0... [ 78.729013][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.759638][ T5726] loop1: detected capacity change from 0 to 256 [ 78.788871][ T5726] msdos: Unknown parameter '184467440737095516150x000000000000ee01ÿÿÿÿÿÿÿÿ' [ 78.797746][ T5724] IPVS: using max 1728 ests per chain, 86400 per kthread [ 78.918826][ T5732] batadv_slave_1: entered promiscuous mode [ 78.958600][ T5732] batadv_slave_1: left promiscuous mode [ 79.020013][ T5744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'. [ 79.036896][ T5744] team0: Port device team_slave_1 removed [ 79.160208][ T5747] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.336303][ T5747] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.352028][ T5753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.442'. [ 79.362202][ T5753] netlink: 44 bytes leftover after parsing attributes in process `syz.3.442'. [ 79.379717][ T5752] Process accounting resumed [ 79.406816][ T5747] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.450719][ T5756] netlink: 256 bytes leftover after parsing attributes in process `syz.3.449'. [ 79.459804][ T5756] netlink: 72 bytes leftover after parsing attributes in process `syz.3.449'. [ 79.469759][ T5747] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.531743][ T3836] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.544099][ T3836] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.556861][ T3836] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.569345][ T3836] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.607866][ T5759] netlink: 36 bytes leftover after parsing attributes in process `syz.1.450'. [ 79.639303][ T5761] netlink: 'syz.1.451': attribute type 12 has an invalid length. [ 79.718728][ T3854] Bluetooth: hci0: Frame reassembly failed (-84) [ 79.726504][ T44] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 79.749331][ T5763] SELinux: Context system_u:object_r:bin_t:s0 is not valid (left unmapped). [ 80.104927][ T29] kauditd_printk_skb: 520 callbacks suppressed [ 80.104944][ T29] audit: type=1326 audit(1767360923.697:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.5.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3331ecf749 code=0x7ffc0000 [ 80.135197][ T29] audit: type=1326 audit(1767360923.697:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.5.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3331ecf749 code=0x7ffc0000 [ 80.267216][ T29] audit: type=1326 audit(1767360923.857:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.5.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3331ecf749 code=0x7ffc0000 [ 80.290961][ T5774] loop5: detected capacity change from 0 to 32768 [ 80.292071][ T29] audit: type=1326 audit(1767360923.877:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.5.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3331ecf749 code=0x7ffc0000 [ 80.335489][ T3312] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 80.341079][ T3312] loop5: p1 start 460800 is beyond EOD, truncated [ 80.347597][ T3312] loop5: p2 size 83886080 extends beyond EOD, truncated [ 80.360434][ T3312] loop5: p5 start 460800 is beyond EOD, truncated [ 80.366968][ T3312] loop5: p6 size 83886080 extends beyond EOD, truncated [ 80.372802][ T5776] netlink: 'syz.3.455': attribute type 10 has an invalid length. [ 80.383875][ T5776] 8021q: adding VLAN 0 to HW filter on device .` [ 80.388022][ T5774] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 80.394414][ T5776] team0: Port device .` added [ 80.396504][ T5774] loop5: p1 start 460800 is beyond EOD, truncated [ 80.406744][ T5774] loop5: p2 size 83886080 extends beyond EOD, truncated [ 80.414395][ T29] audit: type=1326 audit(1767360923.997:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.5.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3331ecf749 code=0x7ffc0000 [ 80.420625][ T5774] loop5: p5 start 460800 is beyond EOD, truncated [ 80.438223][ T29] audit: type=1326 audit(1767360923.997:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.5.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3331ecf749 code=0x7ffc0000 [ 80.444383][ T5774] loop5: p6 size 83886080 extends beyond EOD, truncated [ 80.474827][ T29] audit: type=1326 audit(1767360923.997:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.5.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3331ecf749 code=0x7ffc0000 [ 80.498162][ T29] audit: type=1326 audit(1767360923.997:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.5.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3331ecf749 code=0x7ffc0000 [ 80.521603][ T29] audit: type=1326 audit(1767360923.997:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.5.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3331ecf749 code=0x7ffc0000 [ 80.544932][ T29] audit: type=1326 audit(1767360923.997:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.5.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3331ecf749 code=0x7ffc0000 [ 80.613035][ T5780] loop3: detected capacity change from 0 to 512 [ 80.637478][ T5782] loop5: detected capacity change from 0 to 512 [ 80.645779][ T5780] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.657671][ T5782] ------------[ cut here ]------------ [ 80.663188][ T5782] EA inode 11 i_nlink=2 [ 80.663207][ T5782] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#1: syz.5.458/5782 [ 80.669102][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 80.678303][ T5782] Modules linked in: [ 80.691956][ T5782] CPU: 1 UID: 0 PID: 5782 Comm: syz.5.458 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.697678][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 80.701863][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.716734][ T5164] udevd[5164]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 80.721691][ T5782] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 80.735914][ T3600] udevd[3600]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 80.738141][ T5782] Code: d1 e2 9c ff 4c 8d 2d 6a f0 20 05 49 8d 7e 40 e8 d1 6b b8 ff 49 8b 6e 40 4c 89 e7 e8 e5 66 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 bc ac ba 03 66 66 66 2e 0f 1f 84 [ 80.761650][ T5780] EXT4-fs (loop3): 1 truncate cleaned up [ 80.767421][ T5782] RSP: 0018:ffffc90001e6f5a0 EFLAGS: 00010246 [ 80.767446][ T5782] RAX: ffff88810548bc10 RBX: ffff88811ac0f220 RCX: ffffffff81bb1d5b [ 80.787261][ T5782] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0db0 [ 80.795301][ T5782] RBP: 000000000000000b R08: 000188811ac0f1d3 R09: 0000000000000000 [ 80.803310][ T5782] R10: ffffc90001e6f4d0 R11: 0001c90001e6f4d0 R12: ffff88811ac0f1d0 [ 80.811374][ T5782] R13: ffffffff86dc0db0 R14: ffff88811ac0f188 R15: 0000000000000001 [ 80.818723][ T5164] udevd[5164]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 80.819554][ T5782] FS: 00007f333092f6c0(0000) GS:ffff8882aeec5000(0000) knlGS:0000000000000000 [ 80.832606][ T3652] udevd[3652]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 80.838200][ T5782] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.838221][ T5782] CR2: 0000564c1396e290 CR3: 000000011b166000 CR4: 00000000003506f0 [ 80.838241][ T5782] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000000 [ 80.838258][ T5782] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 80.849609][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 80.854638][ T5782] Call Trace: [ 80.854649][ T5782] [ 80.854664][ T5782] ext4_xattr_set_entry+0x77f/0x1020 [ 80.866033][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 80.870825][ T5782] ext4_xattr_ibody_set+0x184/0x3c0 [ 80.913298][ T5780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.915109][ T5782] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 80.932955][ T5782] __ext4_expand_extra_isize+0x246/0x280 [ 80.938691][ T5782] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 80.944362][ T5782] ext4_evict_inode+0x7c4/0xd40 [ 80.949328][ T5782] ? __pfx_ext4_evict_inode+0x10/0x10 [ 80.954793][ T5782] evict+0x2af/0x510 [ 80.958808][ T5782] ? __dquot_initialize+0x146/0x7c0 [ 80.964109][ T5782] iput+0x4bd/0x650 [ 80.968020][ T5782] ext4_process_orphan+0x1a9/0x1c0 [ 80.973181][ T5782] ext4_orphan_cleanup+0x6a8/0xa00 [ 80.978443][ T5782] ext4_fill_super+0x3411/0x37a0 [ 80.983470][ T5782] ? set_blocksize+0x1a8/0x310 [ 80.988321][ T5782] ? sb_set_blocksize+0xfc/0x170 [ 80.993424][ T5782] ? setup_bdev_super+0x30e/0x370 [ 80.998628][ T5782] ? __pfx_ext4_fill_super+0x10/0x10 [ 81.004025][ T5782] get_tree_bdev_flags+0x291/0x300 [ 81.009217][ T5782] ? __pfx_ext4_fill_super+0x10/0x10 [ 81.014682][ T5782] get_tree_bdev+0x1f/0x30 [ 81.019144][ T5782] ext4_get_tree+0x1c/0x30 [ 81.023811][ T5782] vfs_get_tree+0x57/0x1d0 [ 81.028415][ T5782] do_new_mount+0x24d/0x6a0 [ 81.033003][ T5782] path_mount+0x4ab/0xb80 [ 81.037638][ T5782] ? user_path_at+0xbf/0x130 [ 81.042396][ T5782] __se_sys_mount+0x28c/0x2e0 [ 81.047216][ T5782] __x64_sys_mount+0x67/0x80 [ 81.052065][ T5782] x64_sys_call+0x2cca/0x3000 [ 81.056998][ T5782] do_syscall_64+0xca/0x2b0 [ 81.061715][ T5782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.067685][ T5782] RIP: 0033:0x7f3331ed0eea [ 81.072243][ T5782] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.092055][ T5782] RSP: 002b:00007f333092ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 81.100786][ T5782] RAX: ffffffffffffffda RBX: 00007f333092eef0 RCX: 00007f3331ed0eea [ 81.108867][ T5782] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f333092eeb0 [ 81.116993][ T5782] RBP: 0000200000000180 R08: 00007f333092eef0 R09: 0000000000800700 [ 81.125044][ T5782] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 81.133040][ T5782] R13: 00007f333092eeb0 R14: 000000000000046f R15: 000000000000002c [ 81.141084][ T5782] [ 81.144149][ T5782] ---[ end trace 0000000000000000 ]--- [ 81.149899][ T5782] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.458: iget: bad extra_isize 90 (inode size 256) [ 81.164168][ T5782] EXT4-fs (loop5): Remounting filesystem read-only [ 81.171006][ T5782] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 81.180202][ T5782] EXT4-fs (loop5): 1 orphan inode deleted [ 81.186522][ T5782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.199989][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.224205][ T3783] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.246576][ T5787] loop3: detected capacity change from 0 to 512 [ 81.259236][ T5787] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 81.270180][ T5787] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002] [ 81.278370][ T5787] System zones: 1-12 [ 81.283148][ T5787] EXT4-fs (loop3): 1 truncate cleaned up [ 81.289949][ T5787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.304856][ T3693] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 81.494560][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.510453][ T5800] loop8: detected capacity change from 0 to 256 [ 81.517137][ T5800] vfat: Unknown parameter 'rdir' [ 81.573423][ T5807] loop5: detected capacity change from 0 to 128 [ 81.623333][ T5807] msdos: Unknown parameter ' [ 81.623333][ T5807] ¹Ÿi´f €œŽvhÞËPŒ?J‡L±©±ò›À`ߨ'H!@“ƒfx¶­9¢NöãìãÔ‘™„Àªøå-¬’2¡í !G‹¨c¤XÜû¥ëŒd'Þˆ#iHÑ¡e¾äi7Ö[fΡè|¼†5GHà\¾×¬0]/»Ê°¦²Ë€ ‚3£AiŽ-uñlùG' [ 81.646544][ T5808] __nla_validate_parse: 2 callbacks suppressed [ 81.646558][ T5808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.463'. [ 81.666031][ T5808] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 81.684031][ T5810] netlink: 40 bytes leftover after parsing attributes in process `syz.8.466'. [ 81.794727][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 81.800875][ T3594] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 81.898908][ T5818] loop8: detected capacity change from 0 to 512 [ 81.908288][ T5807] lo speed is unknown, defaulting to 1000 [ 81.930566][ T5818] journal_path: Non-blockdev passed as './bus' [ 81.936844][ T5818] EXT4-fs: error: could not find journal device path [ 81.982016][ T3834] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.024102][ T3834] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.055375][ T3834] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.083635][ T5829] loop8: detected capacity change from 0 to 512 [ 82.095661][ T3834] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.135607][ T5829] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 82.143638][ T5829] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 82.164133][ T5829] System zones: 0-1, 15-15, 18-18, 34-34 [ 82.170254][ T5829] EXT4-fs (loop8): orphan cleanup on readonly fs [ 82.171250][ T5835] netlink: 36 bytes leftover after parsing attributes in process `syz.1.472'. [ 82.177081][ T5829] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 82.200396][ T5829] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 82.207828][ T5829] EXT4-fs (loop8): 1 truncate cleaned up [ 82.225434][ T5829] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.308328][ T5456] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.334985][ T5851] journal_path: Non-blockdev passed as './file0' [ 82.341385][ T5851] EXT4-fs: error: could not find journal device path [ 82.372944][ T5856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.387802][ T5855] netlink: 'syz.5.476': attribute type 12 has an invalid length. [ 82.409809][ T5856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.504740][ T5865] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 82.504740][ T5865] program syz.6.479 not setting count and/or reply_len properly [ 82.609211][ T5875] vlan2: entered allmulticast mode [ 82.653792][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.5.483'. [ 82.717029][ T5880] lo speed is unknown, defaulting to 1000 [ 82.876010][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.6.487'. [ 82.938045][ T5892] netlink: 36 bytes leftover after parsing attributes in process `syz.5.486'. [ 82.966842][ T5898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5898 comm=syz.6.488 [ 83.047926][ T5906] netlink: 72 bytes leftover after parsing attributes in process `syz.3.489'. [ 83.126851][ T5914] netlink: 'syz.5.491': attribute type 12 has an invalid length. [ 83.216961][ T5906] set_capacity_and_notify: 2 callbacks suppressed [ 83.216979][ T5906] loop3: detected capacity change from 0 to 8192 [ 83.231267][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.493'. [ 83.401165][ T5932] netlink: 5 bytes leftover after parsing attributes in process `syz.5.497'. [ 83.402427][ T5935] loop3: detected capacity change from 0 to 512 [ 83.410057][ T5932] netlink: 20 bytes leftover after parsing attributes in process `syz.5.497'. [ 83.824834][ T5977] netlink: 'syz.3.507': attribute type 1 has an invalid length. [ 83.932367][ T6004] netlink: 'syz.8.514': attribute type 12 has an invalid length. [ 83.985978][ T6014] netlink: 'syz.3.518': attribute type 18 has an invalid length. [ 84.010917][ T6017] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 84.210063][ T6049] netlink: 'syz.6.529': attribute type 12 has an invalid length. [ 84.270772][ T6059] netlink: '+}[@': attribute type 13 has an invalid length. [ 84.306656][ T6059] gretap0: refused to change device tx_queue_len [ 84.323982][ T6059] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 84.359680][ T6077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14919 sclass=netlink_route_socket pid=6077 comm=syz.1.542 [ 84.373905][ T6059] netlink: '+}[@': attribute type 4 has an invalid length. [ 84.420353][ T6075] lo speed is unknown, defaulting to 1000 [ 84.427486][ T6074] lo speed is unknown, defaulting to 1000 [ 85.015193][ T6138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6138 comm=syz.5.557 [ 85.079015][ T6138] netlink: 'syz.5.557': attribute type 1 has an invalid length. [ 85.120788][ T29] kauditd_printk_skb: 1201 callbacks suppressed [ 85.120808][ T29] audit: type=1400 audit(1767360928.697:4921): avc: denied { create } for pid=6145 comm="syz.3.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 85.146761][ T29] audit: type=1400 audit(1767360928.697:4922): avc: denied { map_create } for pid=6145 comm="syz.3.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.165883][ T29] audit: type=1400 audit(1767360928.697:4923): avc: denied { prog_load } for pid=6145 comm="syz.3.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.184876][ T29] audit: type=1400 audit(1767360928.697:4924): avc: denied { prog_load } for pid=6145 comm="syz.3.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.203902][ T29] audit: type=1400 audit(1767360928.697:4925): avc: denied { prog_load } for pid=6145 comm="syz.3.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.304718][ T29] audit: type=1400 audit(1767360928.827:4926): avc: denied { read write } for pid=3321 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 85.329307][ T29] audit: type=1400 audit(1767360928.837:4927): avc: denied { map_create } for pid=6148 comm="syz.3.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.348433][ T29] audit: type=1400 audit(1767360928.837:4928): avc: denied { prog_load } for pid=6148 comm="syz.3.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.367486][ T29] audit: type=1400 audit(1767360928.837:4929): avc: denied { create } for pid=6148 comm="syz.3.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 85.386961][ T29] audit: type=1400 audit(1767360928.837:4930): avc: denied { map_create } for pid=6148 comm="syz.3.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.581577][ T6153] netlink: 'syz.8.566': attribute type 10 has an invalid length. [ 85.645698][ T6153] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 85.707326][ T6164] lo speed is unknown, defaulting to 1000 [ 85.773186][ T6170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6170 comm=syz.3.569 [ 85.818898][ T6170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=616 sclass=netlink_route_socket pid=6170 comm=syz.3.569 [ 85.969250][ T6203] gtp0: entered promiscuous mode [ 85.974317][ T6203] gtp0: entered allmulticast mode [ 86.201859][ T6222] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 86.656370][ T6277] __nla_validate_parse: 21 callbacks suppressed [ 86.656451][ T6277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.612'. [ 86.676908][ T6274] lo speed is unknown, defaulting to 1000 [ 87.041752][ T6324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6324 comm=syz.3.626 [ 87.083332][ T6329] veth2: entered promiscuous mode [ 87.088499][ T6329] veth2: entered allmulticast mode [ 87.103842][ T6320] netlink: 60 bytes leftover after parsing attributes in process `syz.5.624'. [ 87.237485][ T6348] FAULT_INJECTION: forcing a failure. [ 87.237485][ T6348] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 87.250676][ T6348] CPU: 1 UID: 0 PID: 6348 Comm: syz.3.635 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 87.250710][ T6348] Tainted: [W]=WARN [ 87.250717][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.250751][ T6348] Call Trace: [ 87.250759][ T6348] [ 87.250769][ T6348] __dump_stack+0x1d/0x30 [ 87.250797][ T6348] dump_stack_lvl+0x95/0xd0 [ 87.250818][ T6348] dump_stack+0x15/0x1b [ 87.250838][ T6348] should_fail_ex+0x265/0x280 [ 87.250867][ T6348] should_fail+0xb/0x20 [ 87.250960][ T6348] should_fail_usercopy+0x1a/0x20 [ 87.251002][ T6348] _copy_to_user+0x20/0xa0 [ 87.251036][ T6348] simple_read_from_buffer+0xb5/0x130 [ 87.251062][ T6348] proc_fail_nth_read+0x10e/0x150 [ 87.251096][ T6348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.251212][ T6348] vfs_read+0x1a8/0x770 [ 87.251232][ T6348] ? __fget_files+0x184/0x1c0 [ 87.251254][ T6348] ? __rcu_read_unlock+0x4f/0x70 [ 87.251277][ T6348] ? __fget_files+0x184/0x1c0 [ 87.251331][ T6348] ? mutex_lock+0x58/0x90 [ 87.251364][ T6348] ksys_read+0xda/0x1a0 [ 87.251396][ T6348] __x64_sys_read+0x40/0x50 [ 87.251420][ T6348] x64_sys_call+0x2889/0x3000 [ 87.251478][ T6348] do_syscall_64+0xca/0x2b0 [ 87.251513][ T6348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.251534][ T6348] RIP: 0033:0x7f060aa8e15c [ 87.251549][ T6348] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 87.251571][ T6348] RSP: 002b:00007f06094f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.251637][ T6348] RAX: ffffffffffffffda RBX: 00007f060ace5fa0 RCX: 00007f060aa8e15c [ 87.251654][ T6348] RDX: 000000000000000f RSI: 00007f06094f70a0 RDI: 0000000000000003 [ 87.251678][ T6348] RBP: 00007f06094f7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.251694][ T6348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.251709][ T6348] R13: 00007f060ace6038 R14: 00007f060ace5fa0 R15: 00007ffed9cfeeb8 [ 87.251732][ T6348] [ 87.261861][ T6351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6351 comm=syz.8.637 [ 87.693036][ T6386] xt_cgroup: path and classid specified [ 87.885633][ T6406] IPv6: NLM_F_CREATE should be specified when creating new route [ 87.897781][ T6402] validate_nla: 6 callbacks suppressed [ 87.897873][ T6402] netlink: 'syz.1.659': attribute type 12 has an invalid length. [ 88.113566][ T6446] netlink: 'syz.5.672': attribute type 12 has an invalid length. [ 88.120234][ T6443] netlink: 64 bytes leftover after parsing attributes in process `syz.1.671'. [ 88.251652][ T6466] netlink: 'syz.1.679': attribute type 1 has an invalid length. [ 88.270510][ T6466] bond1: entered promiscuous mode [ 88.276489][ T6466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.289394][ T6466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.296807][ T6466] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 88.307477][ T6466] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 88.320149][ T6466] bond1: (slave wireguard0): making interface the new active one [ 88.327969][ T6466] wireguard0: entered promiscuous mode [ 88.337001][ T6466] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 88.444308][ T6480] netlink: 16 bytes leftover after parsing attributes in process `syz.5.680'. [ 88.614824][ T6485] syzkaller0: entered promiscuous mode [ 88.620374][ T6485] syzkaller0: entered allmulticast mode [ 88.627901][ T6487] netlink: 'syz.6.685': attribute type 12 has an invalid length. [ 88.677494][ T6489] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 88.688988][ T6489] netlink: 292 bytes leftover after parsing attributes in process `syz.6.686'. [ 88.720000][ T6491] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 88.823256][ T6500] netlink: 52 bytes leftover after parsing attributes in process `syz.3.690'. [ 88.832921][ T6503] netlink: 'syz.6.691': attribute type 27 has an invalid length. [ 88.841092][ T6502] netlink: 'syz.6.691': attribute type 27 has an invalid length. [ 89.095870][ T6524] veth2: entered promiscuous mode [ 89.101060][ T6524] veth2: entered allmulticast mode [ 135.671672][ T29] kauditd_printk_skb: 2994 callbacks suppressed [ 135.671690][ T29] audit: type=1400 audit(1767360979.257:7925): avc: denied { create } for pid=6556 comm="syz.8.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 135.698603][ T29] audit: type=1400 audit(1767360979.257:7926): avc: denied { create } for pid=6556 comm="syz.8.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 135.718050][ T29] audit: type=1400 audit(1767360979.257:7927): avc: denied { create } for pid=6556 comm="syz.8.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 135.737567][ T29] audit: type=1400 audit(1767360979.257:7928): avc: denied { create } for pid=6556 comm="syz.8.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 135.784999][ T29] audit: type=1400 audit(1767360979.257:7929): avc: denied { prog_load } for pid=6560 comm="syz.5.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 135.804246][ T29] audit: type=1400 audit(1767360979.277:7930): avc: denied { prog_load } for pid=6560 comm="syz.5.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 135.823269][ T29] audit: type=1400 audit(1767360979.277:7931): avc: denied { create } for pid=6560 comm="syz.5.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 135.842833][ T29] audit: type=1400 audit(1767360979.277:7932): avc: denied { map_create } for pid=6560 comm="syz.5.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 135.861942][ T29] audit: type=1400 audit(1767360979.277:7933): avc: denied { map_create } for pid=6560 comm="syz.5.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 135.881128][ T29] audit: type=1400 audit(1767360979.277:7934): avc: denied { prog_load } for pid=6560 comm="syz.5.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 135.918938][ T6574] TCP: TCP_TX_DELAY enabled [ 136.060897][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.6.709'. [ 136.299918][ T6601] lo speed is unknown, defaulting to 1000 [ 136.659779][ T584] Bluetooth: hci0: Frame reassembly failed (-84) [ 137.018991][ T6669] team0: Device gtp1 is of different type [ 137.090688][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.5.750'. [ 137.100294][ T6678] veth1_macvtap: left promiscuous mode [ 137.257687][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.5.751'. [ 137.599285][ T6692] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 137.764966][ T6696] ipvlan0: entered promiscuous mode [ 138.006252][ T6709] bridge: RTM_NEWNEIGH with invalid ether address [ 138.096742][ T6713] lo speed is unknown, defaulting to 1000 [ 138.524396][ T6753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.776'. [ 138.628379][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.8.774'. [ 138.646215][ T6774] netlink: 'syz.1.781': attribute type 13 has an invalid length. [ 138.654252][ T6771] netlink: 'syz.1.781': attribute type 13 has an invalid length. [ 138.675635][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 138.681987][ T3594] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 138.722835][ T6774] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.730068][ T6774] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.924214][ T6789] syz_tun: refused to change device tx_queue_len [ 138.930692][ T3836] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.949468][ T3836] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.972573][ T3836] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.981261][ T3836] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.102467][ T6801] lo speed is unknown, defaulting to 1000 [ 139.159690][ T6806] sctp: [Deprecated]: syz.1.790 (pid 6806) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.159690][ T6806] Use struct sctp_sack_info instead [ 139.193916][ T6805] lo speed is unknown, defaulting to 1000 [ 139.366717][ T6813] lo speed is unknown, defaulting to 1000 [ 139.523414][ T6827] netlink: 24 bytes leftover after parsing attributes in process `syz.8.804'. [ 139.716340][ T6857] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 139.722928][ T6857] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 139.730635][ T6857] vhci_hcd vhci_hcd.0: Device attached [ 139.786795][ T6859] vhci_hcd: connection closed [ 139.794040][ T3854] vhci_hcd vhci_hcd.5: stop threads [ 139.804333][ T3854] vhci_hcd vhci_hcd.5: release socket [ 139.809827][ T3854] vhci_hcd vhci_hcd.5: disconnect device [ 139.837717][ T6861] lo speed is unknown, defaulting to 1000 [ 139.935851][ T3841] Bluetooth: hci0: Frame reassembly failed (-84) [ 139.942701][ T6873] lo speed is unknown, defaulting to 1000 [ 140.288220][ T6908] FAULT_INJECTION: forcing a failure. [ 140.288220][ T6908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.301582][ T6908] CPU: 0 UID: 0 PID: 6908 Comm: syz.6.830 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 140.301622][ T6908] Tainted: [W]=WARN [ 140.301628][ T6908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.301641][ T6908] Call Trace: [ 140.301649][ T6908] [ 140.301657][ T6908] __dump_stack+0x1d/0x30 [ 140.301684][ T6908] dump_stack_lvl+0x95/0xd0 [ 140.301786][ T6908] dump_stack+0x15/0x1b [ 140.301874][ T6908] should_fail_ex+0x265/0x280 [ 140.301904][ T6908] should_fail+0xb/0x20 [ 140.301929][ T6908] should_fail_usercopy+0x1a/0x20 [ 140.302003][ T6908] _copy_from_user+0x1c/0xb0 [ 140.302037][ T6908] __sys_bpf+0x183/0x7c0 [ 140.302072][ T6908] __x64_sys_bpf+0x41/0x50 [ 140.302112][ T6908] x64_sys_call+0x28e1/0x3000 [ 140.302198][ T6908] do_syscall_64+0xca/0x2b0 [ 140.302241][ T6908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.302268][ T6908] RIP: 0033:0x7f546475f749 [ 140.302287][ T6908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.302325][ T6908] RSP: 002b:00007f54631c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 140.302392][ T6908] RAX: ffffffffffffffda RBX: 00007f54649b5fa0 RCX: 00007f546475f749 [ 140.302407][ T6908] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 0000000000000000 [ 140.302419][ T6908] RBP: 00007f54631c7090 R08: 0000000000000000 R09: 0000000000000000 [ 140.302432][ T6908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.302443][ T6908] R13: 00007f54649b6038 R14: 00007f54649b5fa0 R15: 00007fff6fa19d98 [ 140.302494][ T6908] [ 140.601079][ T6933] Falling back ldisc for ptm1. [ 140.736724][ T29] kauditd_printk_skb: 2302 callbacks suppressed [ 140.736743][ T29] audit: type=1400 audit(1767360984.327:10033): avc: denied { prog_load } for pid=6937 comm="syz.6.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 140.794630][ T29] audit: type=1400 audit(1767360984.347:10034): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.815988][ T29] audit: type=1400 audit(1767360984.347:10035): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.837226][ T29] audit: type=1400 audit(1767360984.347:10036): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.858387][ T29] audit: type=1400 audit(1767360984.347:10037): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.879621][ T29] audit: type=1400 audit(1767360984.347:10038): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.900882][ T29] audit: type=1400 audit(1767360984.347:10039): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.922111][ T29] audit: type=1400 audit(1767360984.347:10040): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.943341][ T29] audit: type=1400 audit(1767360984.347:10041): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.964494][ T29] audit: type=1400 audit(1767360984.347:10042): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 141.770851][ T6987] team0: Port device dummy0 removed [ 141.807517][ T6987] bridge_slave_0: left allmulticast mode [ 141.813351][ T6987] bridge_slave_0: left promiscuous mode [ 141.819201][ T6987] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.853837][ T6987] bridge_slave_1: left allmulticast mode [ 141.859720][ T6987] bridge_slave_1: left promiscuous mode [ 141.865575][ T6987] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.892144][ T6987] bond0: (slave bond_slave_0): Releasing backup interface [ 141.915036][ T6987] bond0: (slave bond_slave_1): Releasing backup interface [ 141.938061][ T6987] team0: Port device team_slave_0 removed [ 141.955070][ T3594] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 141.966646][ T6987] team0: Port device team_slave_1 removed [ 141.973963][ T6987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.981457][ T6987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.991031][ T6987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.998555][ T6987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.014360][ T6987] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 142.034717][ T3693] lo speed is unknown, defaulting to 1000 [ 142.055261][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.8.862'. [ 142.075711][ T6995] lo speed is unknown, defaulting to 1000 [ 142.208897][ T7013] lo speed is unknown, defaulting to 1000 [ 142.638044][ T7040] FAULT_INJECTION: forcing a failure. [ 142.638044][ T7040] name failslab, interval 1, probability 0, space 0, times 0 [ 142.650925][ T7040] CPU: 0 UID: 0 PID: 7040 Comm: syz.8.879 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 142.651042][ T7040] Tainted: [W]=WARN [ 142.651052][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.651068][ T7040] Call Trace: [ 142.651075][ T7040] [ 142.651085][ T7040] __dump_stack+0x1d/0x30 [ 142.651157][ T7040] dump_stack_lvl+0x95/0xd0 [ 142.651178][ T7040] dump_stack+0x15/0x1b [ 142.651197][ T7040] should_fail_ex+0x265/0x280 [ 142.651225][ T7040] should_failslab+0x8c/0xb0 [ 142.651266][ T7040] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 142.651334][ T7040] ? sidtab_sid2str_get+0xa0/0x130 [ 142.651377][ T7040] kmemdup_noprof+0x2b/0x70 [ 142.651399][ T7040] sidtab_sid2str_get+0xa0/0x130 [ 142.651494][ T7040] security_sid_to_context_core+0x1eb/0x2e0 [ 142.651637][ T7040] security_sid_to_context+0x27/0x40 [ 142.651726][ T7040] avc_audit_post_callback+0x10f/0x520 [ 142.651794][ T7040] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 142.651840][ T7040] common_lsm_audit+0x1bb/0x230 [ 142.651891][ T7040] ? _parse_integer_limit+0x170/0x190 [ 142.651914][ T7040] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 142.651951][ T7040] slow_avc_audit+0x104/0x140 [ 142.652066][ T7040] avc_has_perm+0x13a/0x180 [ 142.652093][ T7040] selinux_bpf+0xa3/0xc0 [ 142.652125][ T7040] security_bpf+0x52/0x90 [ 142.652153][ T7040] __sys_bpf+0x1c3/0x7c0 [ 142.652196][ T7040] __x64_sys_bpf+0x41/0x50 [ 142.652237][ T7040] x64_sys_call+0x28e1/0x3000 [ 142.652269][ T7040] do_syscall_64+0xca/0x2b0 [ 142.652364][ T7040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.652393][ T7040] RIP: 0033:0x7f95027ff749 [ 142.652412][ T7040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.652446][ T7040] RSP: 002b:00007f950125f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.652471][ T7040] RAX: ffffffffffffffda RBX: 00007f9502a55fa0 RCX: 00007f95027ff749 [ 142.652486][ T7040] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 0000000000000000 [ 142.652565][ T7040] RBP: 00007f950125f090 R08: 0000000000000000 R09: 0000000000000000 [ 142.652580][ T7040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.652595][ T7040] R13: 00007f9502a56038 R14: 00007f9502a55fa0 R15: 00007ffdfca2bc28 [ 142.652619][ T7040] [ 142.931643][ T7050] veth4: entered promiscuous mode [ 142.936913][ T7050] veth4: entered allmulticast mode [ 143.329798][ T7091] FAULT_INJECTION: forcing a failure. [ 143.329798][ T7091] name failslab, interval 1, probability 0, space 0, times 0 [ 143.342564][ T7091] CPU: 0 UID: 0 PID: 7091 Comm: syz.6.892 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 143.342604][ T7091] Tainted: [W]=WARN [ 143.342612][ T7091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 143.342642][ T7091] Call Trace: [ 143.342649][ T7091] [ 143.342656][ T7091] __dump_stack+0x1d/0x30 [ 143.342682][ T7091] dump_stack_lvl+0x95/0xd0 [ 143.342703][ T7091] dump_stack+0x15/0x1b [ 143.342723][ T7091] should_fail_ex+0x265/0x280 [ 143.342751][ T7091] should_failslab+0x8c/0xb0 [ 143.342778][ T7091] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 143.342811][ T7091] ? sidtab_sid2str_get+0xa0/0x130 [ 143.342930][ T7091] kmemdup_noprof+0x2b/0x70 [ 143.342955][ T7091] sidtab_sid2str_get+0xa0/0x130 [ 143.343003][ T7091] security_sid_to_context_core+0x1eb/0x2e0 [ 143.343044][ T7091] security_sid_to_context+0x27/0x40 [ 143.343102][ T7091] avc_audit_post_callback+0x10f/0x520 [ 143.343157][ T7091] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 143.343207][ T7091] common_lsm_audit+0x1bb/0x230 [ 143.343240][ T7091] ? _parse_integer_limit+0x170/0x190 [ 143.343263][ T7091] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 143.343319][ T7091] slow_avc_audit+0x104/0x140 [ 143.343442][ T7091] avc_has_perm+0x13a/0x180 [ 143.343470][ T7091] selinux_bpf+0xa3/0xc0 [ 143.343524][ T7091] security_bpf+0x52/0x90 [ 143.343618][ T7091] __sys_bpf+0x1c3/0x7c0 [ 143.343687][ T7091] __x64_sys_bpf+0x41/0x50 [ 143.343729][ T7091] x64_sys_call+0x28e1/0x3000 [ 143.343760][ T7091] do_syscall_64+0xca/0x2b0 [ 143.343804][ T7091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.343888][ T7091] RIP: 0033:0x7f546475f749 [ 143.343909][ T7091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.343928][ T7091] RSP: 002b:00007f54631c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 143.344029][ T7091] RAX: ffffffffffffffda RBX: 00007f54649b5fa0 RCX: 00007f546475f749 [ 143.344046][ T7091] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 0000000000000000 [ 143.344062][ T7091] RBP: 00007f54631c7090 R08: 0000000000000000 R09: 0000000000000000 [ 143.344079][ T7091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.344095][ T7091] R13: 00007f54649b6038 R14: 00007f54649b5fa0 R15: 00007fff6fa19d98 [ 143.344118][ T7091] [ 143.348710][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 143.585415][ T7093] netlink: 'syz.1.893': attribute type 30 has an invalid length. [ 143.606462][ T3836] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.618250][ T3836] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.643060][ T3836] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.666508][ T3836] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.783179][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.6.902'. [ 143.865114][ T7127] FAULT_INJECTION: forcing a failure. [ 143.865114][ T7127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.878376][ T7127] CPU: 1 UID: 0 PID: 7127 Comm: syz.6.905 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 143.878417][ T7127] Tainted: [W]=WARN [ 143.878426][ T7127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 143.878442][ T7127] Call Trace: [ 143.878450][ T7127] [ 143.878460][ T7127] __dump_stack+0x1d/0x30 [ 143.878542][ T7127] dump_stack_lvl+0x95/0xd0 [ 143.878577][ T7127] dump_stack+0x15/0x1b [ 143.878603][ T7127] should_fail_ex+0x265/0x280 [ 143.878627][ T7127] should_fail+0xb/0x20 [ 143.878646][ T7127] should_fail_usercopy+0x1a/0x20 [ 143.878708][ T7127] _copy_to_user+0x20/0xa0 [ 143.878789][ T7127] simple_read_from_buffer+0xb5/0x130 [ 143.878894][ T7127] proc_fail_nth_read+0x10e/0x150 [ 143.878926][ T7127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.879002][ T7127] vfs_read+0x1a8/0x770 [ 143.879024][ T7127] ? __rcu_read_unlock+0x4f/0x70 [ 143.879048][ T7127] ? __fget_files+0x184/0x1c0 [ 143.879100][ T7127] ? mutex_lock+0x58/0x90 [ 143.879133][ T7127] ksys_read+0xda/0x1a0 [ 143.879156][ T7127] __x64_sys_read+0x40/0x50 [ 143.879236][ T7127] x64_sys_call+0x2889/0x3000 [ 143.879319][ T7127] do_syscall_64+0xca/0x2b0 [ 143.879354][ T7127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.879377][ T7127] RIP: 0033:0x7f546475e15c [ 143.879396][ T7127] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 143.879419][ T7127] RSP: 002b:00007f54631c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.879445][ T7127] RAX: ffffffffffffffda RBX: 00007f54649b5fa0 RCX: 00007f546475e15c [ 143.879462][ T7127] RDX: 000000000000000f RSI: 00007f54631c70a0 RDI: 0000000000000003 [ 143.879477][ T7127] RBP: 00007f54631c7090 R08: 0000000000000000 R09: 0000000000000000 [ 143.879490][ T7127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.879503][ T7127] R13: 00007f54649b6038 R14: 00007f54649b5fa0 R15: 00007fff6fa19d98 [ 143.879528][ T7127] [ 144.314082][ T7153] lo speed is unknown, defaulting to 1000 [ 144.405870][ T7162] xt_hashlimit: max too large, truncated to 1048576 [ 144.452506][ T7165] netlink: 'syz.5.921': attribute type 12 has an invalid length. [ 144.827066][ T7151] veth2: entered promiscuous mode [ 144.832238][ T7151] veth2: entered allmulticast mode [ 144.880632][ T7154] veth4: entered promiscuous mode [ 144.885845][ T7154] veth4: entered allmulticast mode [ 144.940432][ T7205] netlink: 'syz.5.936': attribute type 12 has an invalid length. [ 145.066123][ T7218] sch_tbf: burst 28 is lower than device lo mtu (65550) ! [ 145.223209][ T7226] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.432964][ T7241] netlink: 'syz.8.950': attribute type 12 has an invalid length. [ 145.744602][ T3047] audit_panic: 30050 callbacks suppressed [ 145.744620][ T3047] audit: backlog limit exceeded [ 145.744923][ T29] audit: type=1400 audit(1767360989.287:26903): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.744993][ T29] audit: type=1400 audit(1767360989.287:26904): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.745017][ T29] audit: type=1400 audit(1767360989.287:26905): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.745096][ T29] audit: type=1400 audit(1767360989.297:26906): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.745128][ T29] audit: type=1400 audit(1767360989.297:26907): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.745164][ T29] audit: type=1400 audit(1767360989.297:26908): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.745244][ T29] audit: type=1400 audit(1767360989.297:26909): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.745309][ T29] audit: type=1400 audit(1767360989.297:26910): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.745444][ T29] audit: type=1400 audit(1767360989.297:26911): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 146.179854][ T7272] syzkaller0: entered promiscuous mode [ 146.179875][ T7272] syzkaller0: entered allmulticast mode [ 146.214707][ T7274] netlink: 'syz.5.963': attribute type 12 has an invalid length. [ 146.701161][ T7302] futex_wake_op: syz.8.970 tries to shift op by -3; fix this program [ 146.736557][ T7301] netlink: 'syz.8.970': attribute type 1 has an invalid length. [ 146.773924][ T7299] bond1 (unregistering): Released all slaves [ 146.804743][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.8.970'. [ 146.839195][ T7301] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 147.220208][ T7322] netlink: 'syz.8.978': attribute type 1 has an invalid length. [ 147.267497][ T7324] netlink: 16 bytes leftover after parsing attributes in process `syz.8.978'. [ 147.276506][ T7324] netlink: 16 bytes leftover after parsing attributes in process `syz.8.978'. [ 147.422701][ T7333] netlink: 'syz.3.982': attribute type 7 has an invalid length. [ 147.491067][ T7340] netlink: 'syz.3.984': attribute type 4 has an invalid length. [ 147.513769][ T7340] netlink: 'syz.3.984': attribute type 4 has an invalid length. [ 147.911915][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.999'. [ 147.920917][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.5.999'. [ 148.072638][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1003'. [ 148.081726][ T7394] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1003'. [ 148.126710][ T7394] bridge1: entered promiscuous mode [ 148.131996][ T7394] bridge1: entered allmulticast mode [ 148.262426][ T7411] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1009'. [ 148.479329][ T7427] xt_TPROXY: Can be used only with -p tcp or -p udp [ 148.890620][ T7456] $Hÿ: renamed from bond0 (while UP) [ 148.913467][ T7456] $Hÿ: entered promiscuous mode [ 148.993934][ T7460] netlink: 'syz.6.1024': attribute type 12 has an invalid length. [ 149.119685][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1028'. [ 149.176321][ T7470] team0 (unregistering): Port device .` removed [ 149.956579][ T7519] netlink: 15 bytes leftover after parsing attributes in process `syz.8.1047'. [ 150.143446][ T7526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65529 sclass=netlink_route_socket pid=7526 comm=syz.8.1049 [ 150.412363][ T7559] netlink: 'syz.5.1059': attribute type 12 has an invalid length. [ 150.593433][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1067'. [ 150.725306][ T7594] netlink: 'syz.3.1071': attribute type 12 has an invalid length. [ 150.754992][ T29] kauditd_printk_skb: 23282 callbacks suppressed [ 150.755010][ T29] audit: type=1400 audit(1767360994.337:48166): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 150.791430][ T3047] audit: audit_backlog=65 > audit_backlog_limit=64 [ 150.795011][ T7596] audit: audit_backlog=65 > audit_backlog_limit=64 [ 150.798240][ T3047] audit: audit_lost=5143 audit_rate_limit=0 audit_backlog_limit=64 [ 150.804628][ T7596] audit: audit_lost=5144 audit_rate_limit=0 audit_backlog_limit=64 [ 150.804649][ T7596] audit: backlog limit exceeded [ 150.812542][ T3047] audit: backlog limit exceeded [ 150.826190][ T3047] audit: audit_backlog=65 > audit_backlog_limit=64 [ 150.836952][ T3047] audit: audit_lost=5145 audit_rate_limit=0 audit_backlog_limit=64 [ 150.844911][ T3047] audit: backlog limit exceeded [ 150.982383][ T7612] xt_TPROXY: Can be used only with -p tcp or -p udp [ 150.993112][ T7609] lo speed is unknown, defaulting to 1000 [ 151.285710][ T7646] macvlan2: entered promiscuous mode [ 151.285766][ T7646] bridge0: entered promiscuous mode [ 151.525976][ T7665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43546 sclass=netlink_route_socket pid=7665 comm=syz.3.1094 [ 151.556610][ T7677] netlink: 'syz.1.1099': attribute type 12 has an invalid length. [ 151.617324][ T7681] lo speed is unknown, defaulting to 1000 [ 151.657820][ T7685] xt_hashlimit: max too large, truncated to 1048576 [ 151.665535][ T7685] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.879032][ T7704] ipvlan2: entered promiscuous mode [ 151.902758][ T3866] Bluetooth: hci0: Frame reassembly failed (-84) [ 152.956700][ T7767] __nla_validate_parse: 4 callbacks suppressed [ 152.956780][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1133'. [ 153.022500][ T7771] bridge0: port 3(macvtap1) entered blocking state [ 153.029233][ T7771] bridge0: port 3(macvtap1) entered disabled state [ 153.036155][ T7771] macvtap1: entered allmulticast mode [ 153.041638][ T7771] bridge0: entered allmulticast mode [ 153.047870][ T7771] macvtap1: left allmulticast mode [ 153.053073][ T7771] bridge0: left allmulticast mode [ 153.564883][ T7798] lo speed is unknown, defaulting to 1000 [ 153.573986][ T7803] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.644152][ T7808] lo speed is unknown, defaulting to 1000 [ 153.683084][ T7809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3088 sclass=netlink_route_socket pid=7809 comm=syz.6.1150 [ 153.759410][ T7815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1153'. [ 153.768523][ T7815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1153'. [ 153.946824][ T7832] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 153.953413][ T7832] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 153.958365][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 153.961464][ T7832] vhci_hcd vhci_hcd.0: Device attached [ 154.156041][ T3496] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 154.245170][ T3496] usb 7-1: new full-speed USB device number 3 using vhci_hcd [ 154.731790][ T7860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7860 comm=syz.5.1165 [ 154.769740][ T7833] vhci_hcd: connection reset by peer [ 154.777790][ T3854] vhci_hcd vhci_hcd.3: stop threads [ 154.783081][ T3854] vhci_hcd vhci_hcd.3: release socket [ 154.788645][ T3854] vhci_hcd vhci_hcd.3: disconnect device [ 154.800659][ T7867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.808166][ T7867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.834539][ T7867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.842351][ T7867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.859763][ T7872] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1168'. [ 154.868970][ T7872] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1168'. [ 154.879714][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1169'. [ 154.889803][ T7873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1169'. [ 154.900763][ T7872] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 154.912500][ T7872] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 154.958162][ T7875] netlink: 'syz.1.1170': attribute type 12 has an invalid length. [ 155.345827][ T7890] lo speed is unknown, defaulting to 1000 [ 155.764655][ T3047] audit_log_start: 34707 callbacks suppressed [ 155.764672][ T3047] audit: audit_backlog=65 > audit_backlog_limit=64 [ 155.777473][ T3047] audit: audit_lost=8290 audit_rate_limit=0 audit_backlog_limit=64 [ 155.785472][ T3047] audit: backlog limit exceeded [ 155.791829][ T29] audit: type=1400 audit(1767360999.087:73442): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.813160][ T29] audit: type=1400 audit(1767360999.087:73443): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.834377][ T29] audit: type=1400 audit(1767360999.087:73444): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.834411][ T29] audit: type=1400 audit(1767360999.087:73445): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.834481][ T29] audit: type=1400 audit(1767360999.087:73446): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.834506][ T29] audit: type=1400 audit(1767360999.087:73447): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 155.834563][ T29] audit: type=1400 audit(1767360999.087:73448): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 156.301698][ T7939] netlink: 'syz.1.1192': attribute type 12 has an invalid length. [ 156.490330][ T7954] netlink: 'syz.3.1199': attribute type 6 has an invalid length. [ 156.542876][ T7944] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1191'. [ 156.613846][ T7968] netlink: 'syz.5.1204': attribute type 13 has an invalid length. [ 156.864547][ T7968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.892104][ T7968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.996383][ T7985] veth0_to_batadv: entered promiscuous mode [ 157.006433][ T7985] macvtap1: entered allmulticast mode [ 157.011905][ T7985] veth0_to_batadv: entered allmulticast mode [ 157.020721][ T7985] veth0_to_batadv: left allmulticast mode [ 157.026634][ T7985] veth0_to_batadv: left promiscuous mode [ 157.114847][ T3866] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.123771][ T3866] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.132881][ T3866] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.141768][ T3866] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.294444][ T8010] netlink: 'syz.3.1221': attribute type 12 has an invalid length. [ 157.385596][ T8016] macvtap1: entered promiscuous mode [ 157.390971][ T8016] macvtap1: entered allmulticast mode [ 157.409532][ T8016] batadv0: entered promiscuous mode [ 157.414920][ T8016] batadv0: entered allmulticast mode [ 157.424975][ T8016] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 157.433180][ T8016] team0: Device macvtap1 failed to register rx_handler [ 157.455412][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1225'. [ 157.478199][ T8016] batadv0: left allmulticast mode [ 157.483470][ T8016] batadv0: left promiscuous mode [ 157.679673][ T8046] sctp: [Deprecated]: syz.3.1233 (pid 8046) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.679673][ T8046] Use struct sctp_sack_info instead [ 157.698865][ T8052] netlink: 'syz.1.1234': attribute type 1 has an invalid length. [ 157.747185][ T8051] lo speed is unknown, defaulting to 1000 [ 157.864402][ T8067] netlink: 'syz.1.1239': attribute type 64 has an invalid length. [ 157.914213][ T8069] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1240'. [ 158.095598][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1244'. [ 158.172022][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1247'. [ 158.517754][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1260'. [ 158.527214][ T8130] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1260'. [ 158.543303][ T8130] netlink: 3 bytes leftover after parsing attributes in process `syz.8.1260'. [ 158.688419][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1262'. [ 158.713424][ T8143] team0: Port device gtp0 added [ 158.724556][ T8140] ip6gre1: entered allmulticast mode [ 158.889940][ T584] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 158.897909][ T584] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 158.914715][ T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 159.130838][ T8193] netlink: 'syz.1.1283': attribute type 13 has an invalid length. [ 159.196774][ T8193] bridge0: left promiscuous mode [ 159.228869][ T3860] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.246635][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1288'. [ 159.255956][ T3860] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.265063][ T3860] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.292244][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1288'. [ 159.301645][ T3860] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.322226][ T3496] usb 7-1: enqueue for inactive port 0 [ 159.374662][ T3496] usb 7-1: enqueue for inactive port 0 [ 159.408123][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1293'. [ 159.505477][ T3496] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 159.517115][ T3693] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 159.882720][ T8272] netlink: 'syz.3.1312': attribute type 1 has an invalid length. [ 159.939777][ T8272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.954957][ T3693] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 159.972203][ T8278] bond1: (slave dummy0): making interface the new active one [ 160.001583][ T8278] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 160.146173][ T8283] netlink: 4404 bytes leftover after parsing attributes in process `syz.3.1315'. [ 160.776757][ T29] kauditd_printk_skb: 24426 callbacks suppressed [ 160.776792][ T29] audit: type=1400 audit(1767361004.367:95397): avc: denied { prog_load } for pid=8338 comm="syz.3.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 160.802376][ T29] audit: type=1400 audit(1767361004.367:95398): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 160.823749][ T29] audit: type=1400 audit(1767361004.367:95399): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 160.844975][ T29] audit: type=1400 audit(1767361004.367:95400): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 160.864674][ T8340] IPv6: Can't replace route, no match found [ 160.866852][ T29] audit: type=1400 audit(1767361004.367:95401): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 160.893379][ T29] audit: type=1400 audit(1767361004.367:95402): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 160.897948][ T3047] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.914654][ T29] audit: type=1400 audit(1767361004.367:95403): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 160.921172][ T3047] audit: audit_lost=9117 audit_rate_limit=0 audit_backlog_limit=64 [ 160.921207][ T3047] audit: backlog limit exceeded [ 161.062573][ T8366] wireguard0: entered promiscuous mode [ 161.068168][ T8366] wireguard0: entered allmulticast mode [ 161.119707][ T8367] wireguard0: entered promiscuous mode [ 161.125358][ T8367] wireguard0: entered allmulticast mode [ 161.166225][ T8377] netlink: 'syz.3.1347': attribute type 12 has an invalid length. [ 161.212532][ T8382] Cannot find add_set index 0 as target [ 161.212572][ T8385] Cannot find add_set index 0 as target [ 161.407550][ T8411] netlink: 'syz.6.1359': attribute type 12 has an invalid length. [ 161.541203][ T8425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8425 comm=syz.6.1361 [ 161.718071][ T8434] lo speed is unknown, defaulting to 1000 [ 161.963935][ T8434] netlink: 'syz.8.1366': attribute type 2 has an invalid length. [ 161.988504][ T8434] lo speed is unknown, defaulting to 1000 [ 162.116079][ T8460] netlink: 'syz.3.1374': attribute type 12 has an invalid length. [ 162.604989][ T8497] netlink: 'syz.6.1388': attribute type 12 has an invalid length. [ 162.721744][ T8504] netlink: 'syz.5.1391': attribute type 11 has an invalid length. [ 162.769966][ T8508] netlink: 'syz.1.1393': attribute type 21 has an invalid length. [ 163.165621][ T8546] netlink: 'syz.8.1406': attribute type 1 has an invalid length. [ 163.181453][ T8546] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.191798][ T8546] __nla_validate_parse: 16 callbacks suppressed [ 163.191818][ T8546] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1406'. [ 163.244675][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 163.382731][ T8550] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1407'. [ 163.430218][ T8554] netlink: 'syz.5.1409': attribute type 2 has an invalid length. [ 163.679358][ T8560] lo speed is unknown, defaulting to 1000 [ 163.781035][ T8561] lo speed is unknown, defaulting to 1000 [ 163.825969][ T8566] netlink: 'syz.1.1412': attribute type 12 has an invalid length. [ 164.134295][ T8589] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1420'. [ 164.172948][ T8589] 0ªî{X¹¦: renamed from gretap0 [ 164.198089][ T8589] 0ªî{X¹¦: entered allmulticast mode [ 164.230748][ T8589] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 164.247156][ T8600] netlink: 'syz.3.1424': attribute type 12 has an invalid length. [ 164.741957][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1431'. [ 164.757674][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1431'. [ 165.011390][ T8632] lo speed is unknown, defaulting to 1000 [ 165.274490][ T3496] lo speed is unknown, defaulting to 1000 [ 165.280396][ T3496] syz2: Port: 1 Link DOWN [ 165.299075][ T3693] lo speed is unknown, defaulting to 1000 [ 165.304960][ T3693] syz2: Port: 1 Link ACTIVE [ 165.368057][ T8666] xfrm0: entered promiscuous mode [ 165.373173][ T8666] xfrm0: entered allmulticast mode [ 165.562227][ T8696] veth6: entered promiscuous mode [ 165.567514][ T8696] veth6: entered allmulticast mode [ 165.580199][ T8699] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1462'. [ 165.625963][ T8697] lo speed is unknown, defaulting to 1000 [ 165.633407][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1464'. [ 165.654952][ T8702] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1464'. [ 165.754191][ T8712] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1464'. [ 165.784852][ T8712] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 165.786044][ T29] kauditd_printk_skb: 29819 callbacks suppressed [ 165.786087][ T29] audit: type=1400 audit(2000000001.740:122283): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 165.827976][ T3047] audit: audit_backlog=65 > audit_backlog_limit=64 [ 165.834545][ T3047] audit: audit_lost=10098 audit_rate_limit=0 audit_backlog_limit=64 [ 165.842748][ T3047] audit: backlog limit exceeded [ 165.848660][ T8720] audit: audit_backlog=65 > audit_backlog_limit=64 [ 165.855285][ T8720] audit: audit_lost=10099 audit_rate_limit=0 audit_backlog_limit=64 [ 165.858995][ T8723] audit: audit_backlog=65 > audit_backlog_limit=64 [ 165.863321][ T8720] audit: backlog limit exceeded [ 165.869840][ T8723] audit: audit_lost=10100 audit_rate_limit=0 audit_backlog_limit=64 [ 165.869859][ T8723] audit: backlog limit exceeded [ 165.949328][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1471'. [ 166.112660][ T8730] lo speed is unknown, defaulting to 1000 [ 166.462390][ T8755] lo speed is unknown, defaulting to 1000 [ 166.831388][ T8799] validate_nla: 10 callbacks suppressed [ 166.831407][ T8799] netlink: 'syz.5.1494': attribute type 12 has an invalid length. [ 166.958255][ T8807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=8807 comm=syz.5.1497 [ 167.017004][ T8761] lo speed is unknown, defaulting to 1000 [ 167.088856][ T8815] netlink: 'syz.6.1500': attribute type 13 has an invalid length. [ 167.180472][ T8815] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 167.212437][ T8815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.762310][ T8833] netlink: 'syz.8.1507': attribute type 12 has an invalid length. [ 168.368587][ T8875] netlink: 'syz.1.1520': attribute type 13 has an invalid length. [ 168.382145][ T8877] netlink: 'syz.5.1524': attribute type 10 has an invalid length. [ 168.390133][ T8877] __nla_validate_parse: 4 callbacks suppressed [ 168.390149][ T8877] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1524'. [ 168.415073][ T8875] gretap0: refused to change device tx_queue_len [ 168.439358][ T8875] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 168.463971][ T8877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8877 comm=syz.5.1524 [ 168.773528][ T8909] netlink: 'syz.6.1535': attribute type 12 has an invalid length. [ 168.897420][ T8918] lo speed is unknown, defaulting to 1000 [ 168.938444][ T8930] netlink: 8 bytes leftover after parsing attributes in process `'. [ 168.989596][ T8930] netlink: 8 bytes leftover after parsing attributes in process `'. [ 169.005930][ T8930] netlink: 8 bytes leftover after parsing attributes in process `'. [ 169.014553][ T8930] netlink: 8 bytes leftover after parsing attributes in process `'. [ 169.075955][ T8946] netlink: 'syz.1.1548': attribute type 12 has an invalid length. [ 169.164547][ T8952] lo speed is unknown, defaulting to 1000 [ 169.268942][ T8961] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 169.306529][ T8959] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1552'. [ 169.315719][ T8959] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1552'. [ 169.478318][ T8967] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1558'. [ 169.487470][ T8967] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1558'. [ 169.509671][ T8969] debugfs: 'ptm0' already exists in 'caif_serial' [ 169.559356][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1560'. [ 169.577616][ T8976] gtp1: entered promiscuous mode [ 169.582682][ T8976] gtp1: entered allmulticast mode [ 169.672376][ T8982] netlink: 'syz.8.1561': attribute type 12 has an invalid length. [ 169.799535][ T8998] bond0: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 169.821450][ T8998] bond0 (unregistering): Released all slaves [ 169.867320][ T9009] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 170.021113][ T9023] netlink: 'syz.8.1578': attribute type 12 has an invalid length. [ 170.225674][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 170.403489][ T9059] lo speed is unknown, defaulting to 1000 [ 170.428328][ T9064] netlink: 'syz.6.1593': attribute type 1 has an invalid length. [ 170.469922][ T9064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.501230][ T9066] bond0 (unregistering): Released all slaves [ 170.794662][ T29] kauditd_printk_skb: 26112 callbacks suppressed [ 170.794681][ T29] audit: type=1400 audit(2000000006.740:144889): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 170.820253][ T9075] lo speed is unknown, defaulting to 1000 [ 170.841433][ T3047] audit: audit_backlog=65 > audit_backlog_limit=64 [ 170.848103][ T3047] audit: audit_lost=11270 audit_rate_limit=0 audit_backlog_limit=64 [ 170.856185][ T3047] audit: backlog limit exceeded [ 170.857559][ T29] audit: type=1400 audit(2000000006.750:144890): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 170.875029][ T9076] audit: audit_backlog=65 > audit_backlog_limit=64 [ 170.882472][ T29] audit: type=1400 audit(2000000006.750:144891): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 170.888904][ T9076] audit: audit_lost=11271 audit_rate_limit=0 audit_backlog_limit=64 [ 170.888923][ T9076] audit: backlog limit exceeded [ 170.905117][ T3047] audit: audit_backlog=65 > audit_backlog_limit=64 [ 172.274630][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 172.280725][ T3594] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 172.594651][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 172.685877][ T9125] validate_nla: 1 callbacks suppressed [ 172.685894][ T9125] netlink: 'syz.5.1615': attribute type 12 has an invalid length. [ 173.046330][ T9135] netlink: 'syz.8.1620': attribute type 4 has an invalid length. [ 173.060563][ T9135] .`: renamed from bond0 (while UP) [ 173.097747][ T9156] netlink: 'syz.5.1627': attribute type 12 has an invalid length. [ 173.236944][ T9168] netlink: 'syz.5.1631': attribute type 4 has an invalid length. [ 173.276974][ T9168] .`: renamed from bond0 [ 173.513016][ T9187] serio: Serial port ptm0 [ 174.658370][ T9230] __nla_validate_parse: 6 callbacks suppressed [ 174.658389][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1652'. [ 174.673967][ T9230] bond0: Unable to set down delay as MII monitoring is disabled [ 175.155766][ T9242] netlink: 'syz.6.1657': attribute type 2 has an invalid length. [ 175.199492][ T9244] x_tables: duplicate underflow at hook 1 [ 175.242294][ T9246] netlink: 'syz.6.1659': attribute type 13 has an invalid length. [ 175.407842][ T9253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9253 comm=syz.5.1662 [ 175.531154][ T9265] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 175.565272][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1665'. [ 175.582814][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1665'. [ 175.805207][ T29] kauditd_printk_skb: 32312 callbacks suppressed [ 175.805226][ T29] audit: type=1400 audit(2000000011.750:176197): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 175.833091][ T29] audit: type=1400 audit(2000000011.750:176198): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 175.854384][ T29] audit: type=1400 audit(2000000011.750:176199): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 175.875734][ T29] audit: type=1400 audit(2000000011.750:176200): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 175.897041][ T29] audit: type=1400 audit(2000000011.750:176201): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 175.918374][ T29] audit: type=1400 audit(2000000011.750:176202): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 175.939695][ T29] audit: type=1400 audit(2000000011.750:176203): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 175.960996][ T29] audit: type=1400 audit(2000000011.750:176204): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 175.982178][ T3047] audit: audit_backlog=65 > audit_backlog_limit=64 [ 175.982813][ T29] audit: type=1400 audit(2000000011.750:176205): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 176.113959][ T9292] netlink: 'syz.8.1675': attribute type 12 has an invalid length. [ 176.316612][ T9311] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1681'. [ 176.325809][ T9311] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1681'. [ 176.343238][ T9311] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1681'. [ 176.352965][ T9311] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1681'. [ 176.362172][ T9311] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1681'. [ 176.403405][ T9313] lo speed is unknown, defaulting to 1000 [ 177.105601][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1690'. [ 177.135246][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1690'. [ 177.175723][ T9341] netlink: 'syz.8.1689': attribute type 12 has an invalid length. [ 177.290165][ T9353] C: renamed from team_slave_0 [ 177.298093][ T9353] netlink: 'syz.6.1698': attribute type 13 has an invalid length. [ 177.372759][ T9355] netlink: 'syz.5.1699': attribute type 4 has an invalid length. [ 177.524334][ T3382] lo speed is unknown, defaulting to 1000 [ 177.530441][ T3382] syz2: Port: 1 Link DOWN [ 177.545769][ T3836] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.554414][ T3836] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.582622][ T3836] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.617675][ T3836] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.841317][ T9413] futex_wake_op: syz.5.1719 tries to shift op by 535; fix this program [ 177.907163][ T9416] validate_nla: 1 callbacks suppressed [ 177.907190][ T9416] netlink: 'syz.6.1720': attribute type 12 has an invalid length. [ 178.000677][ T9425] bridge_slave_0: left allmulticast mode [ 178.006445][ T9425] bridge_slave_0: left promiscuous mode [ 178.012197][ T9425] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.038247][ T9425] bridge_slave_1: left allmulticast mode [ 178.044009][ T9425] bridge_slave_1: left promiscuous mode [ 178.049905][ T9425] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.061011][ T9425] .`: (slave bond_slave_0): Releasing backup interface [ 178.073689][ T9425] .`: (slave bond_slave_1): Releasing backup interface [ 178.095648][ T9425] team0: Port device team_slave_0 removed [ 178.102593][ T9425] team0: Port device team_slave_1 removed [ 178.109036][ T9425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.125036][ T9425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.154285][ T9425] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 178.436007][ T9449] netlink: 'syz.8.1732': attribute type 12 has an invalid length. [ 178.584304][ T9454] lo speed is unknown, defaulting to 1000 [ 178.758234][ T9482] netlink: 'syz.8.1743': attribute type 12 has an invalid length. [ 179.015403][ T9513] netlink: 'syz.5.1755': attribute type 12 has an invalid length. [ 179.421227][ T9553] lo speed is unknown, defaulting to 1000 [ 179.698738][ T9577] netlink: 'syz.3.1777': attribute type 3 has an invalid length. [ 179.826945][ T9589] sch_tbf: burst 2976 is lower than device lo mtu (11337746) ! [ 179.902105][ T9594] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.170084][ T9627] bridge1: entered promiscuous mode [ 180.175465][ T9627] bridge1: entered allmulticast mode [ 180.181852][ T9627] team0: Device bridge1 is of different type [ 180.238916][ T3841] Bluetooth: hci0: Frame reassembly failed (-84) [ 180.262809][ T9625] bridge1: entered promiscuous mode [ 180.268105][ T9625] bridge1: entered allmulticast mode [ 180.398906][ T9625] team0: Device bridge1 is of different type [ 180.454674][ T9644] __nla_validate_parse: 9 callbacks suppressed [ 180.454692][ T9644] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1797'. [ 180.537137][ T9636] geneve2: entered promiscuous mode [ 180.542411][ T9636] geneve2: entered allmulticast mode [ 180.575577][ T9644] hsr_slave_0: left promiscuous mode [ 180.595080][ T9644] hsr_slave_1: left promiscuous mode [ 180.605811][ T3854] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 180.629349][ T3854] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 180.639112][ T3854] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 180.652252][ T3854] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 180.672797][ T9651] netlink: 'syz.6.1800': attribute type 8 has an invalid length. [ 180.680659][ T9651] netem: change failed [ 180.688274][ T9649] lo speed is unknown, defaulting to 1000 [ 180.766804][ T9660] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1801'. [ 180.775967][ T9660] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1801'. [ 180.800066][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1804'. [ 180.814687][ T29] kauditd_printk_skb: 26507 callbacks suppressed [ 180.814704][ T29] audit: type=1400 audit(2000000016.770:199363): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 180.876642][ T3047] audit: audit_backlog=65 > audit_backlog_limit=64 [ 180.883276][ T3047] audit: audit_lost=12725 audit_rate_limit=0 audit_backlog_limit=64 [ 180.891389][ T3047] audit: backlog limit exceeded [ 180.904998][ T29] audit: type=1400 audit(2000000016.800:199364): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 180.926344][ T29] audit: type=1400 audit(2000000016.800:199365): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 180.947597][ T29] audit: type=1400 audit(2000000016.800:199366): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 180.968924][ T29] audit: type=1400 audit(2000000016.800:199367): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 180.990450][ T29] audit: type=1400 audit(2000000016.800:199368): avc: denied { create } for pid=9662 comm="syz.6.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 181.011108][ T29] audit: type=1400 audit(2000000016.800:199369): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 181.061606][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1807'. [ 181.150703][ T9676] netlink: 'syz.8.1811': attribute type 12 has an invalid length. [ 181.306638][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1814'. [ 181.389483][ T9691] netlink: 'syz.6.1816': attribute type 21 has an invalid length. [ 181.409431][ T9691] netlink: 'syz.6.1816': attribute type 1 has an invalid length. [ 181.417291][ T9691] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1816'. [ 181.577860][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1820'. [ 181.613152][ T9701] ip6gre2: entered allmulticast mode [ 181.669805][ T9705] netlink: 'syz.6.1822': attribute type 12 has an invalid length. [ 181.746250][ T9710] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 181.995334][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1830'. [ 182.274651][ T3594] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 182.280885][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 182.693831][ T9789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1849'. [ 182.764043][ T9796] bond2: Unable to set up delay as MII monitoring is disabled [ 182.772672][ T9796] bond2 (unregistering): Released all slaves [ 182.790015][ T9789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.866021][ T9801] lo speed is unknown, defaulting to 1000 [ 182.935616][ T3859] Bluetooth: hci0: Frame reassembly failed (-84) [ 183.264230][ T9851] FAULT_INJECTION: forcing a failure. [ 183.264230][ T9851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.277531][ T9851] CPU: 0 UID: 0 PID: 9851 Comm: syz.6.1871 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 183.277613][ T9851] Tainted: [W]=WARN [ 183.277622][ T9851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 183.277646][ T9851] Call Trace: [ 183.277658][ T9851] [ 183.277669][ T9851] __dump_stack+0x1d/0x30 [ 183.277778][ T9851] dump_stack_lvl+0x95/0xd0 [ 183.277806][ T9851] dump_stack+0x15/0x1b [ 183.277832][ T9851] should_fail_ex+0x265/0x280 [ 183.277862][ T9851] should_fail+0xb/0x20 [ 183.277887][ T9851] should_fail_usercopy+0x1a/0x20 [ 183.277967][ T9851] _copy_to_user+0x20/0xa0 [ 183.277998][ T9851] simple_read_from_buffer+0xb5/0x130 [ 183.278020][ T9851] proc_fail_nth_read+0x10e/0x150 [ 183.278112][ T9851] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 183.278176][ T9851] vfs_read+0x1a8/0x770 [ 183.278198][ T9851] ? __rcu_read_unlock+0x4f/0x70 [ 183.278221][ T9851] ? __fget_files+0x184/0x1c0 [ 183.278243][ T9851] ? mutex_lock+0x58/0x90 [ 183.278310][ T9851] ksys_read+0xda/0x1a0 [ 183.278336][ T9851] __x64_sys_read+0x40/0x50 [ 183.278359][ T9851] x64_sys_call+0x2889/0x3000 [ 183.278392][ T9851] do_syscall_64+0xca/0x2b0 [ 183.278489][ T9851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.278515][ T9851] RIP: 0033:0x7f546475e15c [ 183.278535][ T9851] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 183.278558][ T9851] RSP: 002b:00007f54631c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 183.278583][ T9851] RAX: ffffffffffffffda RBX: 00007f54649b5fa0 RCX: 00007f546475e15c [ 183.278649][ T9851] RDX: 000000000000000f RSI: 00007f54631c70a0 RDI: 0000000000000004 [ 183.278665][ T9851] RBP: 00007f54631c7090 R08: 0000000000000000 R09: 0000000000000000 [ 183.278681][ T9851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.278695][ T9851] R13: 00007f54649b6038 R14: 00007f54649b5fa0 R15: 00007fff6fa19d98 [ 183.278714][ T9851] [ 183.536032][ T9860] x_tables: duplicate underflow at hook 2 [ 183.628406][ T9869] lo speed is unknown, defaulting to 1000 [ 183.799342][ T9892] validate_nla: 2 callbacks suppressed [ 183.799356][ T9892] netlink: 'syz.6.1884': attribute type 12 has an invalid length. [ 183.825072][ T9894] lo speed is unknown, defaulting to 1000 [ 183.898157][ T9900] wg2: entered promiscuous mode [ 183.903100][ T9900] wg2: entered allmulticast mode [ 183.934859][ T9900] lo speed is unknown, defaulting to 1000 [ 184.272161][ T9929] netlink: 'syz.5.1896': attribute type 12 has an invalid length. [ 184.922848][ T9962] netlink: 'syz.6.1908': attribute type 12 has an invalid length. [ 184.998196][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 185.336203][ T9978] bridge0: entered promiscuous mode [ 185.370539][ T9981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=9981 comm=syz.5.1914 [ 185.556720][ T9998] __nla_validate_parse: 4 callbacks suppressed [ 185.556739][ T9998] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1920'. [ 185.710574][T10002] lo speed is unknown, defaulting to 1000 [ 185.824705][ T29] kauditd_printk_skb: 24021 callbacks suppressed [ 185.824751][ T29] audit: type=1400 audit(2000000021.770:219554): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 185.852637][ T29] audit: type=1400 audit(2000000021.770:219555): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 185.860558][ T3047] audit: audit_backlog=65 > audit_backlog_limit=64 [ 185.873899][ T29] audit: type=1400 audit(2000000021.770:219556): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 185.880837][ T3047] audit: audit_lost=14005 audit_rate_limit=0 audit_backlog_limit=64 [ 185.901681][ T29] audit: type=1400 audit(2000000021.770:219557): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 185.909711][ T3047] audit: backlog limit exceeded [ 185.978313][T10026] audit: audit_backlog=65 > audit_backlog_limit=64 [ 185.984969][T10026] audit: audit_lost=14006 audit_rate_limit=0 audit_backlog_limit=64 [ 185.992993][T10026] audit: backlog limit exceeded [ 186.047675][T10026] –: renamed from vxcan1 (while UP) [ 186.385834][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1934'. [ 186.557843][T10065] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1940'. [ 186.710987][T10083] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 186.717575][T10083] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 186.725205][T10083] vhci_hcd vhci_hcd.0: Device attached [ 186.759114][T10086] vhci_hcd: connection closed [ 186.759860][ T3854] vhci_hcd vhci_hcd.6: stop threads [ 186.769884][ T3854] vhci_hcd vhci_hcd.6: release socket [ 186.775319][ T3854] vhci_hcd vhci_hcd.6: disconnect device [ 186.809295][T10095] netlink: 'syz.8.1944': attribute type 13 has an invalid length. [ 186.821318][T10095] gretap0: refused to change device tx_queue_len [ 186.833309][T10095] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 186.983397][T10106] IPVS: dh: FWM 3 0x00000003 - no destination available [ 187.025795][T10104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10104 comm=syz.8.1954 [ 187.185571][T10123] netlink: 'syz.8.1961': attribute type 30 has an invalid length. [ 187.198340][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1961'. [ 187.617259][T10157] lo speed is unknown, defaulting to 1000 [ 188.236232][T10184] netlink: 'syz.3.1982': attribute type 29 has an invalid length. [ 188.244718][T10184] netlink: 'syz.3.1982': attribute type 29 has an invalid length. [ 188.418887][T10191] netlink: 'syz.1.1985': attribute type 1 has an invalid length. [ 188.495280][T10191] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.546449][T10207] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 188.553042][T10207] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 188.560635][T10207] vhci_hcd vhci_hcd.0: Device attached [ 188.583007][T10200] bond3: (slave geneve3): making interface the new active one [ 188.612408][T10200] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 188.621237][ T3866] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 188.635122][T10209] vhci_hcd: connection closed [ 188.635614][ T3836] vhci_hcd vhci_hcd.6: stop threads [ 188.641275][ T3866] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 188.645700][ T3836] vhci_hcd vhci_hcd.6: release socket [ 188.645718][ T3836] vhci_hcd vhci_hcd.6: disconnect device [ 188.687250][ T3866] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 188.708822][ T3866] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 189.522432][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2014'. [ 189.598552][T10288] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2018'. [ 189.861309][T10307] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2026'. [ 189.896539][T10311] netlink: 'syz.1.2028': attribute type 2 has an invalid length. [ 190.000032][T10315] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2029'. [ 190.040114][T10316] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2029'. [ 190.129415][T10337] netlink: 'syz.1.2035': attribute type 12 has an invalid length. [ 190.166830][T10344] netlink: '': attribute type 13 has an invalid length. [ 190.177228][T10338] lo speed is unknown, defaulting to 1000 [ 190.214204][T10349] ipt_REJECT: TCP_RESET invalid for non-tcp [ 190.235088][T10318] futex_wake_op: syz.3.2031 tries to shift op by 32; fix this program [ 190.251504][T10344] 0ªî{X¹¦: refused to change device tx_queue_len [ 190.258105][T10344] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 190.291394][T10354] ipt_REJECT: TCP_RESET invalid for non-tcp [ 190.506542][T10375] ip6gre1: entered promiscuous mode [ 190.572522][T10379] netlink: 'syz.1.2049': attribute type 12 has an invalid length. [ 190.835299][ T29] kauditd_printk_skb: 28530 callbacks suppressed [ 190.835317][ T29] audit: type=1400 audit(2000000026.780:239151): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 190.847329][T10387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2052'. [ 190.863135][ T29] audit: type=1400 audit(2000000026.780:239152): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 190.895280][ T29] audit: type=1400 audit(2000000026.790:239153): avc: denied { create } for pid=10386 comm="syz.1.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 190.915894][ T29] audit: type=1400 audit(2000000026.790:239154): avc: denied { create } for pid=10386 comm="syz.1.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 190.936711][ T29] audit: type=1400 audit(2000000026.790:239155): avc: denied { create } for pid=10386 comm="syz.1.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 190.953252][ T3047] audit: audit_backlog=65 > audit_backlog_limit=64 [ 190.957542][ T29] audit: type=1400 audit(2000000026.830:239156): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 190.957574][ T29] audit: type=1400 audit(2000000026.830:239157): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 190.964130][ T3047] audit: audit_lost=16986 audit_rate_limit=0 audit_backlog_limit=64 [ 190.985313][ T29] audit: type=1400 audit(2000000026.830:239158): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 191.154681][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 191.205696][T10404] netlink: 'syz.5.2060': attribute type 12 has an invalid length. [ 191.328737][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2067'. [ 191.338914][T10418] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2067'. [ 191.439331][T10429] netlink: 'syz.8.2072': attribute type 12 has an invalid length. [ 191.619509][T10464] netlink: 'syz.3.2084': attribute type 12 has an invalid length. [ 191.666890][T10470] netlink: 'syz.1.2087': attribute type 10 has an invalid length. [ 191.677148][T10470] team0: Port device dummy0 added [ 191.953395][T10492] lo speed is unknown, defaulting to 1000 [ 192.031752][T10493] netlink: 'syz.8.2088': attribute type 1 has an invalid length. [ 192.051266][T10494] lo speed is unknown, defaulting to 1000 [ 192.070933][T10493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.148143][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2088'. [ 192.185024][T10469] bond0 (unregistering): Released all slaves [ 192.201260][T10495] lo speed is unknown, defaulting to 1000 [ 192.274508][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2101'. [ 192.297431][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2101'. [ 192.493627][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2108'. [ 192.609167][T10538] netlink: 'syz.3.2111': attribute type 12 has an invalid length. [ 193.454396][T10567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10567 comm=syz.8.2121 [ 193.535208][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2130'. [ 193.634897][T10602] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10602 comm=syz.1.2131 [ 193.912135][T10622] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2137'. [ 194.553485][T10644] lo speed is unknown, defaulting to 1000 [ 194.609673][T10657] xt_policy: output policy not valid in PREROUTING and INPUT [ 194.727303][T10672] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2155'. [ 195.061971][T10701] 8021q: adding VLAN 0 to HW filter on device .` [ 195.076947][T10701] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.191401][T10701] wireguard0: entered promiscuous mode [ 195.197072][T10701] wireguard0: entered allmulticast mode [ 195.558280][T10719] syz.6.2169(10719): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 195.640619][T10721] lo speed is unknown, defaulting to 1000 [ 195.691516][T10725] ip6gre1: entered allmulticast mode [ 195.770755][T10728] bond2 (unregistering): Released all slaves [ 195.845633][ T29] kauditd_printk_skb: 34857 callbacks suppressed [ 195.845649][ T29] audit: type=1400 audit(2000000031.800:260395): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 195.880160][ T3047] audit: audit_backlog=65 > audit_backlog_limit=64 [ 195.886744][ T3047] audit: audit_lost=21527 audit_rate_limit=0 audit_backlog_limit=64 [ 195.894784][ T3047] audit: backlog limit exceeded [ 195.897215][ T5456] audit: audit_backlog=65 > audit_backlog_limit=64 [ 195.906241][ T5456] audit: audit_lost=21528 audit_rate_limit=0 audit_backlog_limit=64 [ 195.913304][T10745] audit: audit_backlog=65 > audit_backlog_limit=64 [ 195.914247][ T5456] audit: backlog limit exceeded [ 195.925756][T10745] audit: audit_lost=21529 audit_rate_limit=0 audit_backlog_limit=64 [ 195.933766][T10745] audit: backlog limit exceeded [ 195.934417][T10734] lo speed is unknown, defaulting to 1000 [ 196.008895][T10748] validate_nla: 3 callbacks suppressed [ 196.008918][T10748] netlink: 'syz.8.2177': attribute type 12 has an invalid length. [ 196.060829][T10751] netlink: 'syz.6.2179': attribute type 1 has an invalid length. [ 196.128032][T10751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.264616][T10765] __nla_validate_parse: 3 callbacks suppressed [ 196.264636][T10765] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2183'. [ 196.349874][T10769] netlink: 'syz.6.2185': attribute type 3 has an invalid length. [ 196.357734][T10769] netlink: 666 bytes leftover after parsing attributes in process `syz.6.2185'. [ 196.745592][T10784] netlink: 'syz.6.2190': attribute type 12 has an invalid length. [ 196.941906][T10770] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2184'. [ 196.976456][T10799] netlink: 'syz.5.2194': attribute type 1 has an invalid length. [ 197.007820][T10799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.031052][T10799] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2194'. [ 197.047011][T10815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10815 comm=syz.6.2198 [ 197.063805][T10799] bond0: entered allmulticast mode [ 197.086919][T10820] netlink: 'syz.1.2201': attribute type 12 has an invalid length. [ 197.158721][T10830] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2204'. [ 197.383568][T10854] netlink: 'syz.5.2215': attribute type 12 has an invalid length. [ 197.666599][T10898] netlink: 'syz.6.2227': attribute type 1 has an invalid length. [ 197.700339][T10900] netlink: 'syz.1.2228': attribute type 12 has an invalid length. [ 197.717149][T10896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2226'. [ 197.727729][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2227'. [ 197.771148][ T3047] ================================================================== [ 197.779301][ T3047] BUG: KCSAN: data-race in audit_log_start / audit_receive [ 197.786550][ T3047] [ 197.788905][ T3047] write to 0xffffffff88edd4d0 of 8 bytes by task 10852 on cpu 1: [ 197.796653][ T3047] audit_receive+0x78/0x2200 [ 197.798627][T10909] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2227'. [ 197.801287][ T3047] netlink_unicast+0x5c0/0x690 [ 197.801321][ T3047] netlink_sendmsg+0x58b/0x6b0 [ 197.819819][ T3047] __sock_sendmsg+0x145/0x180 [ 197.824529][ T3047] sock_sendmsg+0xc1/0x130 [ 197.828977][ T3047] splice_to_socket+0x5f3/0x990 [ 197.833856][ T3047] direct_splice_actor+0x156/0x2a0 [ 197.838998][ T3047] splice_direct_to_actor+0x312/0x680 [ 197.844411][ T3047] do_splice_direct+0xda/0x150 [ 197.849216][ T3047] do_sendfile+0x380/0x650 [ 197.852701][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2226'. [ 197.853672][ T3047] __x64_sys_sendfile64+0x105/0x150 [ 197.867752][ T3047] x64_sys_call+0x2db1/0x3000 [ 197.871174][T10898] bond2: entered promiscuous mode [ 197.872475][ T3047] do_syscall_64+0xca/0x2b0 [ 197.877823][T10898] bond2: entered allmulticast mode [ 197.882024][ T3047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.893057][ T3047] [ 197.895407][ T3047] read to 0xffffffff88edd4d0 of 8 bytes by task 3047 on cpu 0: [ 197.902988][ T3047] audit_log_start+0x106/0x720 [ 197.907797][ T3047] common_lsm_audit+0x66/0x230 [ 197.912602][ T3047] slow_avc_audit+0x104/0x140 [ 197.917336][ T3047] avc_has_perm+0x13a/0x180 [ 197.921876][ T3047] selinux_socket_recvmsg+0x175/0x1b0 [ 197.927293][ T3047] security_socket_recvmsg+0x50/0x90 [ 197.932613][ T3047] sock_recvmsg+0x38/0x170 [ 197.937098][ T3047] ____sys_recvmsg+0xf5/0x280 [ 197.941833][ T3047] ___sys_recvmsg+0x11f/0x370 [ 197.946560][ T3047] __x64_sys_recvmsg+0xd1/0x160 [ 197.951451][ T3047] x64_sys_call+0x2cbf/0x3000 [ 197.956171][ T3047] do_syscall_64+0xca/0x2b0 [ 197.960734][ T3047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.966666][ T3047] [ 197.969017][ T3047] value changed: 0x0000000000000000 -> 0xffff88810387a100 [ 197.976154][ T3047] [ 197.978498][ T3047] Reported by Kernel Concurrency Sanitizer on: [ 197.984689][ T3047] CPU: 0 UID: 0 PID: 3047 Comm: dhcpcd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 197.995698][ T3047] Tainted: [W]=WARN [ 197.999542][ T3047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 198.009727][ T3047] ================================================================== [ 198.024285][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2231'. [ 198.041146][T10902] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 198.062324][T10902] bond2: (slave bridge1): making interface the new active one [ 198.069893][T10902] bridge1: entered promiscuous mode [ 198.075246][T10902] bridge1: entered allmulticast mode [ 198.081808][T10902] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 198.091403][T10916] veth1_macvtap: left promiscuous mode [ 200.854646][ T29] kauditd_printk_skb: 32514 callbacks suppressed [ 200.854668][ T29] audit: type=1400 audit(2000000036.800:292169): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 200.877112][ T3047] audit: audit_backlog=65 > audit_backlog_limit=64 [ 200.882949][ T29] audit: type=1400 audit(2000000036.810:292170): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 200.888856][ T3047] audit: audit_lost=21777 audit_rate_limit=0 audit_backlog_limit=64 [ 200.888875][ T3047] audit: backlog limit exceeded [ 200.889509][ T3047] audit: audit_backlog=65 > audit_backlog_limit=64 [ 200.910123][ T29] audit: type=1400 audit(2000000036.810:292171): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 200.918103][ T3047] audit: audit_lost=21778 audit_rate_limit=0 audit_backlog_limit=64 [ 200.918122][ T3047] audit: backlog limit exceeded [ 200.922984][ T29] audit: type=1400 audit(2000000036.810:292172): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 203.314920][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.864579][ T29] kauditd_printk_skb: 46224 callbacks suppressed [ 205.864679][ T29] audit: type=1400 audit(2000000041.810:337389): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 205.880860][ T3047] audit: audit_backlog=65 > audit_backlog_limit=64 [ 205.893369][ T29] audit: type=1400 audit(2000000041.820:337390): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 205.899019][ T3047] audit: audit_lost=22115 audit_rate_limit=0 audit_backlog_limit=64 [ 205.899044][ T3047] audit: backlog limit exceeded [ 205.900295][ T3047] audit: audit_backlog=65 > audit_backlog_limit=64 [ 205.920382][ T29] audit: type=1400 audit(2000000041.820:337391): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 205.928343][ T3047] audit: audit_lost=22116 audit_rate_limit=0 audit_backlog_limit=64 [ 205.933208][ T29] audit: type=1400 audit(2000000041.820:337392): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 205.933249][ T29] audit: type=1400 audit(2000000041.820:337393): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0