last executing test programs: 6m19.22863704s ago: executing program 3 (id=93): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYBLOB="1b23c21a9519ad492030b12f00bd5ad9f73cc76d5ca57c431ac90286ed55825a3dceaf4dd7204e7c93d600e2344db8712628d1224d89c222186f679be0e19847ab460586662d6e803da64cbee18ad5d8fb631138b5805dccad5d7bfce7d406449eb5883259c33e7bf616c045fc22b7b9d841b435577b26a0c844fad7a0253dde6557730ae2"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYBLOB="cef76034f20f656baaf5acf95e06b7be2fb221f0999531e54e44b890e449e912c03e355782ff068cbbb3badc767223dd623326d5e270fc35c061c9bc74fc06c63430acbdbff5cd57109d0715e22ec495e228e251d5933e9a0ea3ef8fb7afdb0b6633aaeac62537fcf0611968c32b7ec43032328e0125c9267f519cf14d09252341bb6f584b1e9771181d2420ca7097db2a0c21c04b7e5964d0a58089"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x6}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x1000000}, 0x94) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x0, 0x40, 0x8, 0x6, {{0x34, 0x4, 0x3, 0x9, 0xd0, 0x65, 0x0, 0x6c, 0x4, 0x0, @empty, @empty, {[@cipso={0x86, 0x9, 0x0, [{0x1, 0x3, "c2"}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xb1, [@rand_addr=0x64010102, @private=0xa010101]}, @end, @timestamp_prespec={0x44, 0x34, 0xa7, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x77}, {@local, 0x1}, {@empty, 0x8}, {@local, 0x6}, {@loopback, 0x5}, {@local, 0xfffffffb}]}, @rr={0x7, 0x1f, 0x58, [@private=0xa010100, @multicast2, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @multicast1]}, @ssrr={0x89, 0x23, 0xb8, [@multicast1, @rand_addr=0x64010100, @remote, @loopback, @private=0xa010101, @private=0xa010101, @private=0xa010100, @remote]}, @timestamp_prespec={0x44, 0x2c, 0x9d, 0x3, 0x4, [{@local, 0x3f2}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x8001}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x10}, {@rand_addr=0x64010101, 0x3}]}, @end]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000400)}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x16c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x104, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xa8, 0x1, [@m_skbmod={0xa4, 0xa, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x80}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x3, 0x1, 0x1, 0x7}, 0x6}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x0, 0x4, 0x5}, 0x4}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x10000, 0x7, 0x8, 0x16}, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x3c, 0x1, [@m_ctinfo={0x38, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7fffffff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0xba01}, 0x810) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0xba01}, 0x810) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=r0], &(0x7f0000000280)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00'}, 0x94) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000b80)=""/206, 0xce}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000b80)=""/206, 0xce}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0x1, 0x58, &(0x7f00000009c0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0x1, 0x58, &(0x7f00000009c0)}, 0x10) socket(0x10, 0x3, 0x6) (async) r4 = socket(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x2, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20008010) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000580)={'wg1\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x1, 0x7, 0x4aa1, 0x2, {{0x2f, 0x4, 0x3, 0x7, 0xbc, 0x64, 0x0, 0x5, 0x6, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0x34, 0xb1, 0x3, 0x3, [{@private=0xa010100, 0x8}, {@multicast2, 0x3}, {@broadcast, 0x5}, {@local, 0x2daf6cb6}, {@broadcast, 0x5}, {@remote, 0x2}]}, @cipso={0x86, 0x37, 0x3, [{0x0, 0xa, "f547d1e45eb3fd3a"}, {0x7, 0xd, "2b2aa16d0487cbd7a643ea"}, {0x6, 0x5, "dc4374"}, {0x0, 0x2}, {0x5, 0x11, "ab0395bc3465207e1505ab2b4e5a20"}, {0x6, 0x2}]}, @rr={0x7, 0xb, 0xf9, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0x90, 0x3, 0x6, [{@broadcast, 0x6}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4535}]}, @cipso={0x86, 0x15, 0x0, [{0x7, 0xf, "b1f210fdfb696a80c32c1dce04"}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000700), &(0x7f0000000740)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000700), &(0x7f0000000740)=0x4) socket$nl_route(0x10, 0x3, 0x0) 6m18.192510059s ago: executing program 3 (id=107): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) r1 = io_uring_setup(0x4c22, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x359}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x19, &(0x7f0000000300), 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8080000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="00042cbd7000fedbdf25030000001400010000000000000000000000ffff0000000014000100ff01000000000000000000000000000108000300"], 0x44}, 0x1, 0x0, 0x0, 0x10000840}, 0x8800) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000000280)={0x68, r3, 0x20d, 0x70bd2b, 0x25ffdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0xfffffffffffffe78, 0x4, [0x4, 0x4, 0x3, 0xb49f, 0x8]}]}, 0x68}}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=0x0, @ANYRESHEX=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000080)='3', 0x1, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r12, 0x1, 0x62}, 0x14) connect$can_bcm(r7, &(0x7f0000000100)={0x1d, r12}, 0x10) unshare(0x2a020480) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) 6m17.588723851s ago: executing program 3 (id=110): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc020000000000000000000000000000003d000000e54ca96f9ebefd87901c690403", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000010000000000000000000000000000000000000000000000000000000000000000006000000000000000300000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500ac1414bb000000000000000000000000000000003200000000000000e0000001000000000000000000000000000000000002ff00000000000400000001000000fe800000000000000000000000000027000000003200000000000000ffffffff00000000000000000000000000000000000200000000000002000000000000000a010102000000000000000000000000000000003c00000002000000fe88000000000000000000000000010100000000010300000000000000000000000000000a010102000000000000000000000000000004d23c00000002000000fe800000000000000000000000000010000000000000000000000000060000000000000020010000000000000000000000000002000000006c00000002000000000000000000000000000000000000000000000005020000000000000200000000000000"], 0x1fc}}, 0xc040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x20001, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r2, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) (fail_nth: 6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) 6m17.192386139s ago: executing program 3 (id=112): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x9, 0x0, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) r3 = dup3(r1, r2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x3, 0x53e, &(0x7f0000000b40)="$eJzs3cFvHFcZAPBvJt544zh1Cj0AAhpKIaAoa3vTRlUvpBcQqiohKk4cUmNvLCu72ci7EbXJwT5w4F6JSJyA/4AbQpV64sCNG9y4lANSgAhUI3FYNLMTd2vvxktje2Lv7ydNZt57k/3e2817b+ZFuxPAxLoUEVsRcTYi3omIuSI/Kba40d+y8z56dH9559H95SR6vbf/keTlWV4M/J3M+eI1qxHx/e9E/CjZH7ezsXl7qdlsrBfp+W7r7nxnY/PqWhozeU79+uL1hdeuvVo/tLa+2PrNw2+vvfmD93/7pQ//uPXNn2TVmv3ZhbxssB2Hqd/0SswO5E1FxJtHEawkU8W/H06eNCI+ExEv5f1/Ls7kn2Zhe6rMqgEAR6TXm4ve3GAaADjtsvv/2UjSWrEWMBtpWqv11/BeiJm02e50r8y1791ZiXwN62JU0ltrzcZCsVZ4MSpJll7Mjz9O1z+Rfq9xLSKej4j3ps/l5bXldnOlzAsfAJhg5/fM//+e7s//gyplVQ4AODrVsisAABw78z8ATB7zPwBMnv9j/veNQAA4Jdz/A8DkMf8DwOQ5cP7fPp56AADH4ntvvZVtvZ3+718//qXuqyuNzu1a695ybbm9fre22m6vNhu15V7voNdrttt3F1/ZTXY2Nm+22vfudG+utZZWGzcbfksAAMr3/Isf/Dmb9LdeP5dvMfAsB3M1nG5p2RUASnOm7AoApfF9HphcY9zjWwaAU27II3r7igWCZNQJDzz8FU6qy5+3/g+T6mnW/60dwMn26db/v3Xo9QCOnzkcJlevl+x75n+6WwYAnEbW+IGR//9fqP70d8MLHhxFbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBkmM23JK3lzwLfyv5Ma7WICxFxMSrJrbVmYyEinouIP01XprP0YtmVBgCeUvq3pHj+1+W5l2f3lp5N/jOd7yPix794++fvLnW764tZ/j9387sPsvxz3fX62TIaAAAMurE/K5+/68V+4Eb+o0f3lx9vx1nFh29ERLUff6fY+iVTMZXvq1GJiJl/JUW6L7teOXMI8be2I+Jzj9tfjXcHIszmayDVPLU3fhb7wqHHH3z/98ZPP9HeNC/L9pX8vfhs7KkccKAP3uiPk0Xfy7p40f/SuJTvh/f/aj5CPb1s/Mu6686+8S/dHf/O7Iuf5H3+0m56T032PNT94Su//+6+wL25ftl2xBemhsVPduMnw8ffystjtvEvX/zyS6PKer+MuDy0/VnU9ysRrXyYne+27s53NjavrrWWVhurjTv1+vXF6wuvXXu1Pn9rrRkL8/lK9R+Gxfj761eeGxU/a//MiPjVJ7c/vjZm+3/133d++JUnxP/GV4d//i88IX72EX99zPhLMzeqo8qy+Csj2n/A5x9Xxoz/4V83V8Y8FQA4Bp2NzdtLzWZj/YCD7FrzoHMcjH+Q3ds/A9XID2IrYqyTzx98Tr4oERFDz8muqJ+NJh/VQVJa9F8f9guWPTIBR+3jTl92TQAAAAAAAAAAAAAAgFE6G5u3p4d/W+vQDspuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfX/wIAAP//nCW+Cg==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r4, 0x7f, 0x0, 0x4) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m16.525601022s ago: executing program 3 (id=121): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x26f2e217, 0x4ba}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r2, 0x0, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000400)={0x0, 0x0}) 6m14.438802382s ago: executing program 3 (id=148): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1902000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 6m14.438487072s ago: executing program 32 (id=148): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1902000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 4m21.076680928s ago: executing program 4 (id=1877): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x100, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x8d5f, 0x1046, 0x0, 0x264}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000000c0), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 4m21.029616959s ago: executing program 4 (id=1879): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100"/83, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020800f8ffffffb703000008000000b704000000210300000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xf7}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000007000000000005000018110000", @ANYRES32=r1, @ANYBLOB="49d58b67b6d79512c6fe464d3740f0f6f7f35731f5eb521eaabe361ab25ffbefa496deff62171819be2d7e1e23ba3cb8798274fb780bad67fc3296dccdf319f8d4be3ac0a81f07de0685db476f221a08acd9e2694a7b41c40510b32a67def64243f65cac20fb80dc82b05a175eaefb5af91aa7e407d12f86b569548827175a801e3f1e9f160e9396a135c56ddebdc9cb712e7e1580d109ddcb43c0cc082674943402c14f15dc8b0d66a4389b25951cb2d2b344c17adbb84a59bd8781dfec4897f4ce70"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r4, &(0x7f0000000280)=""/172, 0xac, 0xe0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000700000003000000"], 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x21, 0x80805, 0x0) syz_read_part_table(0x5eb, &(0x7f0000000f00)="$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") socket(0x10, 0x803, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0xc00a9c4ff52dfad9) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) syz_open_dev$usbfs(0x0, 0x204, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) 4m20.756792444s ago: executing program 4 (id=1883): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000180)="2d0000008058", 0x6}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000024) 4m20.719567165s ago: executing program 4 (id=1885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r4, &(0x7f00000048c0)=[{{&(0x7f0000000280)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)="ac38e30df94c08a4135cdcf8074ce8194f3af96556c1f0727a3974b3ef0296151721e05b66fbca66c5898c61cbc2801fc38dc92b423fdeb91f9be699ff7f4b4526178cc48b37b55ed98c21186225c15c57944945a5cb1080a7e67d087cf0a3c6db1c1572eba81dae37ddc2a6a5048712ac1ac3c4e42937ba10e82202c4da6fdf7d9044862dc68548c19b503c4967f3185eb17c0030be86e5ba18484393e567b977fd22560ba4ca981a65b3f1cb4e5e3d3e0fdd9c116a8d1f1b59852914ea387b1124e9f801724238b1bfcd343c016e5d0e8504f7c151e29869385f781bb928ee55b079f606d879bc7dcecc6d8dc4eb20dee9607cf8", 0xf5}, {&(0x7f0000000300)="5114774634bf90cf259771d2b56473bb334bbca03cdad2c4026c7d359d1acc82d6c256381674580adf54b932c675c8f21038b2d049612864c36057243decded736c174a16994961712d46b49988f4d6ad1a4cf236c36c3d732e55872447eb9d8097ac710e5395540", 0x68}, {&(0x7f0000000200)="57baab2b9b153fecd2eca011842c34b1c411604908d2da9d1003820c9c555f38e3cb43fb931bf61ab66c54338d51a75a1879a12c78237c23", 0x38}, {&(0x7f0000000600)="057c525064517c2a16a359e0c72c7d2acfca91647638e334cd1d5348830bf3e788063b0220e9e38dfa3304787ca97456b978f3def7a540fcaa48de62f23334fec02ee0ce02846288d39e3e3dca0ce983d7ea6684fe2f85b35cae43dadf915bbe089ba94573a90d243a21976e2f43d80867", 0x71}, {&(0x7f0000000680)="4ea9ed93e8a082643d5133d78d77a8e144fa294643c5ea41e7ad83207a7316e490c379fe0ce49393168dfa281af5410aeda0cb844ae2f7234c5236737687aced9ebd71496a55143cb18375652b701016f352be4d23cc35e672ce5ccd53a47bd8e68e18aa1da6d58af3dbd582b529a50d8f17bfdbc60e925f3c69d283a2cf291e8b7b23aafc1a2e01901935b79a", 0x8d}], 0x5}}, {{&(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e22, @empty}, 0x1, 0x2, 0x4, 0x4}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000840)="3637093865256cc6456be42f9e3b9b28161ee05cce3343e86d8eb787815df1503d4fe889db0ad4504c7714f6cbaadfb9fb47ab86e284139a44567b1c98442d1184781497854f1b30cc9a604f987a52a1349bfdadd9064b0cdfadfd49b90366ab0fcf248fda969cf3bb8ab25f01a351e548f9dfa286e50c46ed9bf76e6a8111c6429c1e1dbf5322e4059ea1d1dcee5e47292edc8d4c916d8bcff98f8b1e8943b5d832f9350aac03e09d2dde875b3d3dfde67989fd32cd049eb2fcd00700a5fd699bb4a49468230b7014cebffe24fc50f98fcd40fe50b0640908097fcc557abe6c01acdd49", 0xe4}, {&(0x7f0000000940)="4828c1fe75a8d5e42ea61dde976be7c22a0ab5e09826f1ab1c174f9459e292480fae630135dde796b77287de6351dfc6983e68e807219eaca0a4696f44ad4b5e598bc76e7fb3ff88c11bcfb35ec1bf3ea26d9fbf9801bf9268c03749cb70c6110dce48cff8c60d9ae78978570c3cc64cc579abfd5283cc7913d0156aff323b8e1eab1deac856a3873e96765423bf604af8a2fe6492f15c615a81f23f524b940a4667850a26b2428979b6f0296cc7ade70b858702df", 0xb5}], 0x2, &(0x7f0000000a00)=[{0x60, 0x29, 0x7, "b93b7739a2aabd29ef1789f884ab10c430c1f414566558f22883779dfd524e80aa201c59361874f047a14252d96d76c6280a71829a627c699fe333500ffd88d63deff29bb24812117d84c3d80bfbd2ee"}, {0x1010, 0x116, 0x8, "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"}, {0x90, 0x0, 0x0, "4f5477a9a0b8e7e3515ec400e6b246bab7c085fcdf8186ed0675162a37a6cc9f6fa686909801e0e7298d2052d9bff930078220d00929ad4fae74142d3c0f82ac3bc510424d3ed7f23398273e6e8c3c1b42edd9baa9ff872b1c545a283d914d18934df3c2cf5bb7f3aa37f7cf067496213b50fb75e32b605bdd13c39f115930b4"}], 0x1100}}, {{&(0x7f0000001b00)=@qipcrtr={0x2a, 0x2, 0x4001}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000001b80)="05123f15aa6fdc03474305a5fc3f915973d7e2cdb9a9d939efa7644861752a308bea6b5f533b28dc2a0cd455766bfb6225b90d68188d42a76a73b3a95635c515d8cc803b76d9b760aed9980491ad546459114ec70ce9346e45e0f5c9b06806a00e6f8af87a", 0x65}, {&(0x7f0000001c00)="65e9b03f2406a15b45b964778e2968162ed31d2b8382fb690efb0b5d376c9f789b78c0fcb42b8510bcdaf5807bc60b331c", 0x31}, {&(0x7f0000001c40)="c5ee7b40236b0efc322f63412dbcd60539a75142ad24bcf5c8ba416c1d2c0bfdc4f75ba3cc6018d677e590355e7cdb717720f1360499c505481b7f6cde67f351b281de70487959e0da580ba1703c9bb62c6f9cd76c8ab853501a64ca3f4a02c0c5976bc487acbb29de40f357336d6a9f737d82e23670cf354b4e86e35f1c6d50283da9c0c4d8c6f040f42830e1f348d9d4e552447f83b89141bdf7e5d72c4667cebcb35840fbcc37c6188ede03a0f22b56d4ed5c0dbd14fd88bab1c3dd31d857942949e70ae8a316b64410e71d7f57b428c194e94ee30ac1d8155564d3886f6bf61e6cace0a10ebadac95e099bd207cd2a65436a28a041b4a95d9166", 0xfc}, {&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000002d40)="b6e3b292ee7d3913a3138fa6fd7cbcf6517366fefaea2460d3e56b4b829ec48a5952d2e2f1c6ca6387ccb3debab317c4e902fe97fb7163c57ce9b4da94f53b57dd11f0bf866d6cb2bc6ae166c7173a8b3f3946f3cc3c8797049d4717ad8e", 0x5e}], 0x5, &(0x7f0000002e40)=[{0x1d, 0x10c, 0x59de, "3a30e75cb49080b5c906ecac47463e32c562945812c287433c550fd1ef0b87d161f05ec1a28b1df33002455ebca6606c986c5fa5ab3a8d2d5dba040bdb7a8ef3dfaeb6cf60bc149b8f490f4587258e54d2d0d45b2e128e19d2a6c1aa0e219c969f00e0b07fcfdc0040f5c9835670f2859cca545757c91ef59e661bb64f470ff5f8589d47d1796b727135b2eea9cd5e9a62c32f069ff723e94d969427739d2659a50d51805345da"}], 0xb8}}, {{&(0x7f0000002f00)=@generic={0x29, "53c2ceb4bb3042c3bc13fde41a9499d6e8c4f385be9a1efb8969013138c2eb3973dfc1b9cf5fadf64ed08c938ac8f55de36643dfb4a75a9581c8daf1b74134eba29be001c80fda9330aeaf29bc1805e7c61dd6b18b27dca8af67f91bd84d6e3f5fc87d04d07513ee99f0df0191c754d1caff8fcbb94812a897fd6d0a2ed7"}, 0x80, &(0x7f0000003500)=[{&(0x7f0000002f80)="fd31851916baccbf0dc34c84eea2de19dac86a335c86faf9f2bc34d24a58f860b7d7c4f1f3a9df0fb69b4fb75263ac43672a92a6a1156d2fd17cb72b44eb9372119c761c9e4df32a85d4e8dc67ab03645952083d16ff69b4e86be1186531c17e1831207c9109fb10530e6b1a6d3c94b819e7c3a96ae434948c5ad80d24915b94a41c5abe86c0a7711c3984a8e7e0408eea1aeaefe22515817bb6e87d9244d6ec758c72b2e78a9c1ae276543e4759ad1337f4951bdd8e74911894", 0xba}, {&(0x7f0000003040)="4195f9315dedbbfea8106fd76e7337865e0999daebed6fad799bfa31c881a25e3a98ffc777558b63746346b4cff01258425e607876343b90d84ecb74f7cd1f31e3babe163825fbcf13796335226963ce00e8e08739b91d1eb402e36c9bfbf97b78189292d462cc30ed333ad17c636e0232b4adf1388c8df7e0552655f5ce1419e7bbbe05ef6dcffcb0e75c3b584d181ca2ad36fd2e90a61fe4abafd1e5408048c651ae9fe67f66f71b0a452f", 0xac}, {&(0x7f0000003100)="c61b00223b2cccafc5a04f8336e2633eea4198c2cba801964f2c8e42b528f1780d0541da64811d9ab35044fee20fbe20723c389857080f8856fedc65c98babe1d52f8ca766e0ffe4e89a7946e74010b70177604d0b5adee2b172b5e72f3eee8934fdc2e93e0b3ca9e828b7242382db088b492dbd550b2eb02cc1778015c561588a232e1ebe62955114cc75947e77ba2a853803172fd8232a896164e1563cec2b0298269a72bd93ba7c98ee6a1b7657540669e1e9a996134c4dcc632ca084a0e3", 0xc0}], 0x3}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000003200)="0a7b98e74e121eeba2cecbafb97d674c7b26e7bf57b71d499fde187787774e011667fa1ef18b13e715ba0a5daa688347a661eba3b9731d692e2226e02b76091adbecf114fd016348a918be7cb8f9ff1ec058a5af051e8599b5a19785ffed5e4fa2abbd5b5fbf6d543663a1775277db9ebbe8a77ac9d2caeb26cc75a191ea60452687bfb3c4d1aaa3101297aea4d8865c90ede3abcd55535b7ef3952f7a35ce0348c6e6064142074b121a8f92670598cac3", 0xb1}, {&(0x7f00000032c0)="d45da72ac3e8ccd717d83ffa11d64142f236fe42f49c6010a3ab30157cdcb1e6580ad3b50184324c3a0cc4f301b9fef27d763963986c989158f75f7992638d07c5d98eaeddb21003bcd59706c1c6e9c794f42227ff1e589816417445147fdfde9c1d033044e42c2c282fb2a2dc5374b3334e853c7b8399d68dc09d49d129e05d5314f576b516a2ebe5e421a0665a64cf10556f17e4a73ab97300", 0x9a}, {&(0x7f0000003380)="c81f2be67964d24bdccd6c6ef0858d15a0aecb05fbec99b29d5d568aee5a2d4b53931a96b80d8570d910d874810781bd9f93564bae134a34ed1e23407769c63c419204e33b306a692c13", 0x4a}, {&(0x7f0000003400)="a53622313c66e1afb89146c08b58fb22366453745529bc69347f59175c6af6e822337e13ae8e7ce41cc89dff21642f1fe8c85010b2a70b7de1df182429087684aa15fd1756f7ce991b8ab778e47f5794eaa6a5736ee621bc64c297962f81d064330861ba1bb12b48b5963926e0cd58c7034832823d69dd5a567ab1234c775678d6c65ae1f5745d13d72db67ce8445b0052dc2c3db85609703bb03f14aa33494b5458c669184b78ca6b497d1ff78c957bf76eee33bd907095f552d67df604d82db1e352e3b06e3e046507a0178b86e9d53c", 0xd1}, {&(0x7f0000003500)}, {&(0x7f0000003540)="23458c78cb14e4ced9f07195457184a6a9a0223f7b36bb40f7c9aee3a9434dca6918426d5bcd499a4a9144b32e568f054784d98328a9cbb3e9ef658fc7e1428566496e32de458b455971d81011d0b5e829bd6be3fb8eafe1d186de1b258d776047cf429513a1b24e8f650e4f0fc37678b621f2f2b0d3cde1fde03a02e1c2234c21f49a", 0x83}], 0x6, &(0x7f0000003680)=[{0x18, 0x11, 0x9, "77dc27299687682e"}, {0x110, 0x88, 0x2, "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"}, {0x90, 0x111, 0x4, "d1d42b9b1078a0692d178e601225d11bd0ae82bab56f401aaa74cc9c8c6bf80396e69abb815296691fb83bc699c6041152f131046b6a4c5a76675eb126a0d6059b26d99eb170dc5b7a7b6575b43b7242d7acda0c6e18bda66c851c13cca757a51e60646fec25d4119fb50779a5570c7eba038fb99fd5ba44ebedf9c3e92ab3c1"}, {0xe0, 0x10e, 0x100, "8762c6d7e9ea988c577be0aced6efc5672bfbe4198416e71b9e742d77eedf83a2a026544160a83fd78c7207402a969111c039d28d2110d18eeaa7aaf14fbf99737edc1fc46423fb5ff5ffdfdd12bbcfd0ad0a6721aed3682a3b3c9d01ea78eebc3cb4c81cd0a1c73e5199f94eafdf2c49bfc78779e5ed8c98d5d1de774f20588b7d19898e118a46e31241953b8bd7c9caf22e9479386cf75ad65420efba754079f6d2d1c50b8db3439cefbf51d45506f342540b53a7bf9a8e19393e2e1df95552418f5c6146e99511eb76ed401123d7b"}], 0x298}}, {{&(0x7f0000003940)=@isdn={0x22, 0x0, 0x80, 0xf5, 0x4}, 0x80, &(0x7f0000004d80)=[{&(0x7f00000039c0)="5b0ed088414bfcd663d6787bbd6e94b1df7f3d9b91e524084fe12c97e4d12a1950055f5c185c7ca68dfd8690edf13ae0c2b8a3810aceda77185d872bf68c1b66128f53b3f8991f6a450d8969c2196ecc2bac92a763c26d326350d111964e779429a07e67159e7fc23c9fa7753e48444b980bdd2ae37b84070638f448e08c581e93f0015e33c03f0a187f754e700e8a84b0f03e28e0e5930d060d813121185d454906674d71bf54aaa8", 0xa9}, {&(0x7f0000003a80)="fa7d70141fed92368ff93ba75a94b2d000ad82db5873deb6d1ef556b168f42739f7709cf3c18f7db75cf99255b371a25b3618c7b425f4598c69a400aaacabe209ceb8f7250a06545d051646efe95639bf621968fa0dbaedb068bbf", 0x5b}, {&(0x7f0000003b00)="b83e0db09e85432113e1da337c0142ce22d2f224cc45d87f554237b7bec2babfbe871160379fcd8b78a134c4378815a6bb2cfd730e4dac691049a06a3249633e3299caab94940b6a9bd26dfb28d80a1ac7cd54af1232b6555f53c4f4c752d0d881400e2de6471b8b675650ff360c19b7805362ac449abd57c91fc224eaf6c1ed7acbc7ce859349965545753e443d82df", 0x90}, {&(0x7f0000003bc0)="19789ba0b38e67faf1f3abfbb18830461c12f57c37c76393b4ff0aa9089be32c26396e1eef9304507d30be4a0e5d83eea83c6d9e23c06084db0bc951302fd75d9d69cd6a39906f79d4a762b2b9550299", 0x50}, {&(0x7f0000003c40)="3313f7dd79de3eae3ccee312d959682c227289ad", 0x14}, {&(0x7f0000003c80)="da1b64d872979e769d2f0d09cb2bbe67f443788cad5c52010eb96962c81c552d25", 0x21}, {&(0x7f0000003cc0)="05b4d1ba2169f0741c57a65110e0712e9288239eb234f78b1c84e70d5dac96f268f6f0877f0384d9b56def94706a382c2afc8955f0a3dbf2dd1d6ad28cae8296853ce861f1b1f4f1f138e8fc1634fc6f66123846364d7ae87fb2cda6c40aa0486d", 0x61}, {&(0x7f0000004a80)="d59ef0e12329835c0048f168c8a3856476d7ce9c6189f4e85e5e35d9da5f9c5194962b83d4496159e86b0ce7c14d08a697f1875173134a553ae8a6fbd9269d84b837693dc6b48943719cb8b441695947478c668be86c6f8b14282b323c594f9ad2c85886c28f21a839983951c7f876a7ecfa30781e910ce30b4ee6e20a61292186998246844711463ad8339e895c15baaa3d1624bdcb0add", 0x98}, {&(0x7f0000004b40)="e9bb8390264b1818bd33d0c0fccb38325f52cf06c5e68482c13d60b03bf671beccf24f476b475e289124c80bac69a48c64d8002f65f267b3ef268d9bc01854ecbd024b5d092296eb8622a29e9bd12e8bbfaf570d2c961a006142e37a3b676cfc5ec8914d5f5b15bab55c5bbf2190a4c63b0976b15b925b2d5d16801137db96523ec108a4dc6586c64a624c0d866989c46009dd7c153e6371aac46edd8fb20dd2cd82eb31544b1a570b8019e7a0313b4888bef17e9f39", 0xb6}, {&(0x7f0000004c00)="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", 0xfa}, {&(0x7f00000031c0)="ef7fe6dc55f98c7ed3eb49ee8c8a533d29b14c246036f4ca257cd6eced0bf27f8927915055a3acd69d201efe1e27ae0878ce6269", 0x34}, {&(0x7f0000004d00)="91854ca0ee9323e11210e7914918ad275ad84dd45826d362de932c986082d75a32e1802002671481c3e2cdc100b84c73a6037e90af8f3d305df3a8bf64923a985482", 0x42}], 0xc, &(0x7f00000051c0)=[{0x68, 0x114, 0x4, "48187058e23598229d4a4ede94a8894a0c486103bfe6a347325af129682356fccdc21e7fbdb03b96fb9edd0213773caa507dda2c7071d279fb1a7780d58536f63f573e1046c6d05e9f82f420c3e62348c67e9f"}, {0xc0, 0x102, 0x9, "7033ea771af7ebb01a9a61699dce89e74c2229de8f4a6d8719b4a919a714fe7c6ece34d81f1979ce110dc4daba81297d8386ec2b2465223d26b144d798b57b885dfdfb1567404cfc81ae883bb797b1fbdb9f92ca7d1796ef52993c5c6de9550cf21031e8898c80275ab260df412dfa3f01227739db9b0e9812b6bdcc109a6b145ad15588a9092e3971073628a8f7abb7d6f28481c649d814c2c61c1d44e955bb6ac5cd45e054ea397063aa793e20"}, {0x58, 0x107, 0x9, "02bd6fb849076cb2a412da9d1016f19df9a7861ee6f1bbf32f7e0dd14c6505ccc6fd51efdd382091f32aa4e086700b2f29421bdd9c6acb4624700a1f0d95da1066"}, {0xc0, 0x10a, 0x1, "cfb85e82c2cd4b115c6247b9dd5ff86431942cec68e7e2fef51d9cd933efe8055604c8b88c77adb9f997d7d2498acc5123805b8717f2d26e48b6c64b7baeb25e49c88e328d77b720beac3f182d41b2ff94bbce558010788c0219f646edcabeb16c24e544b861dc4615b38fc37170ca82c9860029af35647e8c9da8213eb78dd0d38cdca9c802747fda223dbf4ee9bcd70a5a632b9829e6238dcefa088c2804840ca565fb0c0b4de2a004524602515c2d"}, {0x78, 0x84, 0x1, "d29051386cb1de6c71dd1a1cf59b8d221b931b353b9716857107a391ea98be07e208eff09fe41f09929c5346af7c03bc83fc2a313c98e97d13775e910216097a386c1f8f3de16302422efcadb102c38bdaee4b764b48b48e9f01caf5283d3ac5859eb5aa2117e3ef"}, {0xb8, 0x29, 0xc48, "c944fb15568fc6552afa09ed497cafb593ac7ef4df1d59d4f460de5061b07b69da2b9ee1070e154ada66b716a75a3047df488d8f89baa0eb354d15e3d7708211fd8babe51a2b7a47b6bffc6844896cb372d4e463b4f42a37ddcfb13644bafa5745be40a395ea6c6037dcac595f4b9f4ced5809657e202ddc2384614114b401900a30eca5efa4dc419c778931440ff4bf9fe81caf6b87c8cc3597118a1d643dde91c9707845"}, {0x0, 0x111, 0x40, "078d097254040c6e402ae8c77d0fce0bf3a92f7c4f30b3b9eaa20066c9008a7aeb12a364beb7b3fc332320bfbe2dc84860fd"}, {0x0, 0x113, 0xd, "6eebe702895a3dc022d4cbe28b7ceeca29c0cc73661a3372382aa5b6f01ec66fc5bfdfdc7ea7a996affc9122f0c70c26de975ef7ba6f67d4af728c1c0fa5867960f42828442e16cbd5db8e9d065d86299dddffbddeae2e2a7978f62904fea90dac91850e04d64c1552a836d62322f3f8"}, {0x0, 0x103, 0xefa5, "f4922386fb6f4fefd5602eafc5f75364b29ce921b315c9d76517ee0e83294cf2fc9e"}], 0x370}}, {{&(0x7f0000004080)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x0, 0x4, 0x2, {0xa, 0x4e21, 0x8, @empty}}}, 0x80, &(0x7f0000004640)=[{&(0x7f0000004100)="88602c2a1a8ca67e6f1a72e22ad0a3dd920ff49c41b6926d5d6d0af6ee2ab10b313fa4a3a1e200ce3bbdf93e380ec726a5c4a4b8f539af1ad079474c178f9dc61d4be4d23e4ba660ac47b221db257ff5e32bbbcf02243b544ea648aa50895a5e39128344b74fb68f2da11f295b4663129173afa68c7a7a0aefd0dac2ab288e30eeec8bc34120b4aa79aac81240b6b29adee27420ab69e2a75e1a63ccc1ed123f67f0fe82783e684de8c23c7b55296037ada57120fd50798330ba1d694bcbf88d935e50e859ca803dfa717b47232c8179ce34b8f36349f5112e80b4749c392a26ccae284d49a2d2a6c474a36fc0", 0xed}, {&(0x7f0000004200)="3239930118f8445792999c6cf8f40d07ec7bf2fc0aa1b3ad763b47358abc846c4d81c45ebe47790f6552186700c7a9d6cd7b154aa10a6f1ee40a26048dc5fdfa95fe91c823fd6918c10d2b41f5fe5942d45722ed81846b3c91879905f857a7ca08cf4b", 0x6c}, {&(0x7f0000004280)="a1277025d4b43bd16b6dc0a2", 0xc}, {&(0x7f00000042c0)="e868f3b62bed5d5ddf4ccbce03944ccbb77966c4921fabc70368a1ca1e4483336923430d6350b4e4e9e7dd1aabc3961ea54b4cd45fce55e13abe3ec2e36681c51065efb3acfc03d113341491c31ec2b8e011570c32db55e428bab1701957508c6f2e93a02655aa8c675f13c3cef6676ecad223cee4093a4e063471696d18d8fcf6e54857defdb83020365557094712cb5d193037c78bace9f810b9f26f1bf6035b264005449b60f8d3e2587d38c4a68aaaa37da29f7982fb0f5b3a176e99a84d03affc72eb111971959f2e5a3a3e471217a5a1a6762f60d3aad3c6837809f3326b294fcf36d3ba4e92e8ed8401a9661f6c2d5c73", 0xf4}, {&(0x7f00000043c0)="d08644302b34fa6506348b1141e2", 0xe}, {&(0x7f0000004400)="deaefe7db43f1ede8755c561c121db870feb7e0a73a6352fcb86b423bdd058b98f2a0d656ed739bce284f4bc54af674482af0529ff7e02e1c405f8948680a97b6130a26a7eb368a50165b496fb564d8d2b716d261508d5116f6f3ff82b5c379b473a4c2520c0e4ca077a1d637be801d21b984e004e92378722754bce96f64af001a01253de", 0x85}, {&(0x7f00000044c0)="df9e4462bbaabea642609d45568bbf5033aa02f37443e2d54a30bd5f639019477cdf57fb22aee72bf06175b7cd201d700ae79def1de69dae7c88296ecf61fdf143", 0x41}, {&(0x7f0000004540)="275fae529bbb6cdc838887e9e4be691549e5ef046e0d0600177922eb76c2bbe86ca3ccaf5b99d56876fdb408d219a398bba13acb54f391b2ef93b8ac7f43f1635a4a07c52fb57b7993fee0284da539d087c5afa1840a817c9c3bca3398e348c14fffc65713d2ff65885c59bd281e167b5659a8beeb4db7d474790c0e", 0x7c}, {&(0x7f00000045c0)="1d683bbb7ae6cef04447a5a7500ef51bdf8359b42cdaf74070ba61d38d8ad533d118d6233b04e8046b6aa4f34dee4a8781b42fcceabaf8b2f9c3e4b0ddd26f4aaa9cecd885af3f63f6b95f54d4a7ce51f05fbe7bd2da56f260631844a0618bb634cfc9280890fca1d7b6b31d8875107f7d50cc3b4f8b", 0x76}], 0x9, &(0x7f0000004700)=[{0x68, 0x112, 0x5, "35a3e2edf29686a85ef4d78b6bbc79e090cf88f01375249553e40315f531a0f6cee81427ff761b0e7d7d12b7c70084cc9ba091b4160d2d1d885fab50bc42113d9c49268f0a004b98e1bb5c7bb6dc7573bb9c655d0fb6b7da"}, {0x60, 0x118, 0x6, "8df9868f6d355ce7b37e950a4d593f0056000fee7bc5ea8492812b652a2f031c78ecceda7f409a932d592466c09a29e44ca48365842ea6d456dc015fe1c3175801b417f0919f133ff9f1a2"}, {0xe8, 0x10c, 0xf, "e207dc311b734f99bf22b277c5c675e2cb03d02b466739b552aae1a9220555395b644d47ac4ca644487d0769392ab30fa084e29006657043dc22c1989a7d24039374fb65519f56e7d90473d6e5bcb25e8efb4c7942483644f540d1244aea3e921bee27663886d32f25356901e3e5868f0509697581cc1919d28762063455fa5d69b2eaae6bf88c01076be42e4b8e9246493fd929afec19d24ffdda62498924cf3af7de3c23c65657d13a923e3fc4f6b637049695efec07667b4ba572a87be4f818d01f2261b9a9f21569cdfec3f74edf8e1c"}], 0x1b0}}], 0x7, 0x8004) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x7, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x4, 0xf8, 0x8, 0x7}, {0x7, 0x6, 0x2, 0x7f}]}) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400078008001140000000000500150020000000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$eJzs3T1oO2UcB/DvXRL/tg1SdRHEFxARLZS6CS51UShIKSKCChURF6UVaotb6+TioLNKJ5ciblZH6VJcFMGpaoe6CFocLA46RJJrpbYRX1Jz4n0+cLm75J77Pcfd97kQOBKgsaaTzCdpJZlJ0klSnN/gzmqaPl3dnthfTnq9x34oBttV65WzdlNJtpI8kGSvLPJCO9nYferop4NH7nl9vXP3u7tPToz1IE8dHx0+evLO4msfLNy/8dkX3y0WmU/3d8d19Yoh77WL5KZ/o9h/RNGuuwf8FUuvvP9lP/c3J7lrkP9OylQn74216/Y6ue/tP2r75vef3zrOvgJXr9fr9O+BWz2gccok3RTlbJJquSxnZ6vv8F+1JssXV9dennl+dX3lubpHKuCqdJPDhz+69uHUhfx/26ryD/xPVT9KHT6+tPN1f+GkVXeHgLG4rZr17/8zz2zeG/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h+aSf2iu8/kHAJqld63uJ5CButQ9/gAAAAAAAAAAAAAAAAAAAJdtT+wvn03jqvnJW8nxQ0naw+q3Bv9HnFw/eJ38sehv9puiajaSp+8YcQcjeq/mp69v+Kbe+p/eXm/9zZVk69Ukc+325euvOL3+/rkb/+TzzrMjFvibigvrDz4x3voX/bJTb/2Fg+Tj/vgzN2z8KXPLYD58/On2z9+I9V/6ecQdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDa/BgAA//8YZW08") setreuid(0x0, 0xee01) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x22020400) 4m20.585817658s ago: executing program 4 (id=1886): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x84c8, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x100000, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fefd000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 4m19.971286969s ago: executing program 4 (id=1894): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100"/84, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020800f8ffffffb703000008000000b704000000210300000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xf7}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000007000000000005000018110000", @ANYRES32=r1, @ANYBLOB="49d58b67b6d79512c6fe464d3740f0f6f7f35731f5eb521eaabe361ab25ffbefa496deff62171819be2d7e1e23ba3cb8798274fb780bad67fc3296dccdf319f8d4be3ac0a81f07de0685db476f221a08acd9e2694a7b41c40510b32a67def64243f65cac20fb80dc82b05a175eaefb5af91aa7e407d12f86b569548827175a801e3f1e9f160e9396a135c56ddebdc9cb712e7e1580d109ddcb43c0cc082674943402c14f15dc8b0d66a4389b25951cb2d2b344c17adbb84a59bd8781dfec4897f4ce70"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r4, &(0x7f0000000280)=""/172, 0xac, 0xe0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000700000003000000"], 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x21, 0x80805, 0x0) syz_read_part_table(0x5eb, &(0x7f0000000f00)="$eJzs2zFo1FccB/DfxRwHSnFxclIHKcVFcfQoKnenohBOsxQpBhQRbzpBOOlBig56FMUbxG4uVrhF7ZTLDZkSEsjUIYQMKYEMWVqSJZClV+7yCm1KSq8kBeHz4eDHe//f/33fO976Dz5pQ/Frt9vNRET3p4gDA7492ioULx8bOV++EZGJmxHx9fef/9B7kkkd3dx2PZHGy2n89s3BzrONS9nW0vXNk7emG0N/LDne/8Whd+3RPTge++x9fubw4yfV0vNa/t5iqb76dGH+2of1Qrl9tdH8eCV78Xbqm011ONUHUYtHcT/GYji+jTtR3WX97wbMf91aOZ09WmpN3D23Vey8mDrT7xr0Xv97vfz+hY2IXv7D4y+/atYvnPrxyKuztcm58lqKruR2vjm2b3sCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/y8bM4cdPqqXntfy9xVJ99enC/LUP64Vy+2qj+fFK9uLt1Deb6nCqD6IWj+J+jEUlKnEnqrsmfPbnQW7n0/f5v+a/bq2c/u1oqTVx99xWsfNi6kzqG9mj8/5DfreX//D4yy+b9Qunckdena1NzpXXDmz3Vf628+j/ewAAAAAAAAAAAAAAAAAAALAXCsXLx0bOl29EZOJmRHzxyzdDvflu+t49k/pOpLqc5t++Odh5tnEp21q6vnny1nTj5zQ/HpkYj4hD79qj//thGNjvAQAA//8Pi5HU") socket(0x10, 0x803, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0xc00a9c4ff52dfad9) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) syz_open_dev$usbfs(0x0, 0x204, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) 4m19.95025367s ago: executing program 33 (id=1894): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100"/84, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020800f8ffffffb703000008000000b704000000210300000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xf7}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000007000000000005000018110000", @ANYRES32=r1, @ANYBLOB="49d58b67b6d79512c6fe464d3740f0f6f7f35731f5eb521eaabe361ab25ffbefa496deff62171819be2d7e1e23ba3cb8798274fb780bad67fc3296dccdf319f8d4be3ac0a81f07de0685db476f221a08acd9e2694a7b41c40510b32a67def64243f65cac20fb80dc82b05a175eaefb5af91aa7e407d12f86b569548827175a801e3f1e9f160e9396a135c56ddebdc9cb712e7e1580d109ddcb43c0cc082674943402c14f15dc8b0d66a4389b25951cb2d2b344c17adbb84a59bd8781dfec4897f4ce70"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r4, &(0x7f0000000280)=""/172, 0xac, 0xe0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000700000003000000"], 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x21, 0x80805, 0x0) syz_read_part_table(0x5eb, &(0x7f0000000f00)="$eJzs2zFo1FccB/DfxRwHSnFxclIHKcVFcfQoKnenohBOsxQpBhQRbzpBOOlBig56FMUbxG4uVrhF7ZTLDZkSEsjUIYQMKYEMWVqSJZClV+7yCm1KSq8kBeHz4eDHe//f/33fO976Dz5pQ/Frt9vNRET3p4gDA7492ioULx8bOV++EZGJmxHx9fef/9B7kkkd3dx2PZHGy2n89s3BzrONS9nW0vXNk7emG0N/LDne/8Whd+3RPTge++x9fubw4yfV0vNa/t5iqb76dGH+2of1Qrl9tdH8eCV78Xbqm011ONUHUYtHcT/GYji+jTtR3WX97wbMf91aOZ09WmpN3D23Vey8mDrT7xr0Xv97vfz+hY2IXv7D4y+/atYvnPrxyKuztcm58lqKruR2vjm2b3sCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/y8bM4cdPqqXntfy9xVJ99enC/LUP64Vy+2qj+fFK9uLt1Deb6nCqD6IWj+J+jEUlKnEnqrsmfPbnQW7n0/f5v+a/bq2c/u1oqTVx99xWsfNi6kzqG9mj8/5DfreX//D4yy+b9Qunckdena1NzpXXDmz3Vf628+j/ewAAAAAAAAAAAAAAAAAAALAXCsXLx0bOl29EZOJmRHzxyzdDvflu+t49k/pOpLqc5t++Odh5tnEp21q6vnny1nTj5zQ/HpkYj4hD79qj//thGNjvAQAA//8Pi5HU") socket(0x10, 0x803, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0xc00a9c4ff52dfad9) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) syz_open_dev$usbfs(0x0, 0x204, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) 2m4.071557428s ago: executing program 1 (id=3399): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f00000004c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) timer_gettime(0x0, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="84000000000801040000000000000000050000080500030006000000140004800800838a83690eb9de830b40000000030900010073797a31000000000900010073797a310000000034000480080005400000180308000b40000004f908000340000000000800074004000002080006400000000e08000b4000000008060002"], 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x880) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x20, &(0x7f00000003c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@cache_loose}, {@noextend}, {@debug={'debug', 0x3d, 0x80}}, {@noxattr}, {@privport}, {@loose}, {@version_u}], [{@euid_gt}, {@measure}]}}) stat(&(0x7f0000002040)='./file0\x00', &(0x7f0000002080)) 2m4.037775119s ago: executing program 1 (id=3400): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r1}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) 2m3.950398651s ago: executing program 1 (id=3402): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4000004, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa, 0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x1, 0x10000, 0x0, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x3, 0x0, 0x80000001, 0x0, 0xfffffffc, 0x80, 0x1, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc74, 0x0, 0xffffffff, 0x10, 0x1, 0x7, 0x400000, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0xffffffb3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xffffffff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1002, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54c, 0x0, 0x620, 0x0, 0x9, 0x0, 0x0, 0x2, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0xfffffffc, 0x10001, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x200, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10, {0x7, 0x0, 0xba6d, 0x0, 0x0, 0xffffffff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m3.868240192s ago: executing program 1 (id=3403): openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x14, 0x2, 'wrr\x00', 0x1, 0x0, 0x4}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000a800000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x33eb4000) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fallocate(r2, 0x33, 0x0, 0x7f) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0xffffffffffff7fff, 0x50602) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2m3.562908708s ago: executing program 1 (id=3409): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @rand_addr=0x64010100, @multicast, @broadcast}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYRES64=r0], 0x8c}}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0xfffffffffffffd2a}], 0x1}, 0xc4531009e6a674e) recvmmsg(r2, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/4092, 0xffc}, {&(0x7f0000000300)=""/54, 0x36}], 0x2}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x73a0}, {{&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)=""/125, 0x7d}], 0x1, &(0x7f00000014c0)=""/122, 0x7a}, 0x1}], 0x3, 0x42, 0x0) memfd_create(&(0x7f0000000380)='#\x00', 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001600)=@newtfilter={0x4c0, 0x2c, 0xd27, 0xf0bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x5, 0xffff}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x490, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_POLICE={0x46c, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0xbe}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff0, 0x0, 0x1, 0xea, 0x2, 0x401, 0x8, 0x40, 0x0, 0x100, 0x78bb, 0xb, 0x1, 0x3, 0x8, 0x0, 0x3, 0x1, 0x8, 0x7, 0x80000000, 0x2, 0xc, 0x10001, 0xfffffff5, 0x61, 0x100, 0x3, 0x5, 0x6, 0x81, 0x80000000, 0x3, 0xca, 0xffff404e, 0x2, 0xe, 0x8, 0x248000, 0x6, 0xfce, 0x1ff, 0x60, 0x8, 0xffff8001, 0x2, 0xffff, 0x1, 0x8000, 0x7, 0x400, 0x81, 0x1, 0xfffffffb, 0x2, 0x3, 0x7f, 0x10000, 0x8, 0x5, 0x6, 0x755, 0x14, 0x8, 0x0, 0x101, 0x7f, 0x4, 0x10000, 0x9, 0x400, 0x0, 0x0, 0x4, 0xfffffffb, 0x4a0, 0x9, 0x11, 0x8, 0x1e2, 0x7f, 0xa, 0x800, 0x0, 0x40, 0x81, 0x96, 0x7, 0x6, 0x7, 0xffffffff, 0x4afb, 0x3, 0x4, 0x8, 0x5, 0x0, 0x7fff, 0x3, 0xffffffff, 0x101, 0x9, 0x3, 0x5, 0x5, 0xfff, 0x50, 0x7, 0x6, 0x0, 0x0, 0x31, 0x7, 0x8000, 0xcb, 0x7, 0x7, 0x10001, 0xfffffffc, 0x4, 0x4, 0xd66d, 0x1000, 0xa3, 0x4, 0xe4e9, 0x7, 0x0, 0x9, 0x5, 0x1a7, 0x2, 0xf, 0x3, 0x0, 0x7, 0x1, 0x0, 0x3a, 0xffff, 0x1, 0x3, 0x0, 0x2, 0x9, 0x7, 0x1, 0x9, 0x80000000, 0x3, 0xcd89, 0xf, 0x7f, 0xffffffff, 0x9, 0xd, 0x8000f9fa, 0x8001, 0xffff, 0x5, 0x3, 0x6, 0x4, 0x100, 0x4, 0x7, 0x6, 0xfc29, 0x40, 0x4, 0xaf, 0x2, 0x3b5, 0xff, 0x8, 0xc, 0x8, 0x3000, 0x2000, 0xd9, 0x6, 0x7, 0x9, 0x7, 0x7ff, 0xffffe9a0, 0x101, 0x9, 0x1000, 0x3, 0x19, 0x1, 0x1, 0x5, 0x4, 0xb98, 0x2, 0x1, 0x5, 0xa, 0x2b, 0x40, 0x200, 0x51, 0x9, 0x5, 0xdae, 0xfef, 0xbb, 0x4, 0xc63, 0xa98, 0x7, 0x6, 0x3, 0x80000001, 0x5f, 0x80, 0xfffffffb, 0x0, 0x1, 0x4a, 0x7, 0x80000000, 0xbf, 0x3ff, 0x6, 0x0, 0x10000, 0x6, 0x1, 0x9, 0x5, 0xfffffffd, 0xd9c, 0x0, 0xfffffffb, 0x0, 0x81, 0x0, 0x3, 0x2, 0xd, 0x200, 0xc, 0x0, 0xa, 0x80, 0x4, 0xffffffff, 0x80000001, 0x45, 0x8, 0x3ff, 0xb51, 0x10]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x89}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x20000000, 0x8, 0x1, 0x81, {0xc4, 0x2, 0x0, 0xa9, 0x2499, 0x6}, {0x4, 0x1, 0x3, 0x5, 0x10, 0x494}, 0x0, 0x6, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xe8cb}, @TCA_FLOW_MODE={0x8, 0x2, 0x16309806d7ae470a}]}}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x10}, 0xc010) socket$unix(0x1, 0x1, 0x0) 2m3.105334997s ago: executing program 1 (id=3414): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x34, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000040)={0x1, 0x1, 0xab0}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000140)='memory.numa_stat\x00', 0x0, 0x0) mq_getsetattr(r2, &(0x7f0000000240)={0x0, 0x80, 0x2, 0xfffe}, &(0x7f0000000280)) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000201030000000000000000000a000000180001801400018008000100ac141422085df9000200ac146401f2117f098f09ca77368308c9243ffde913f9104aa741658b4bb02b971ad4b8633b6805b60fc0b0ae219a79c95539096135a1b8873d78ac9e2a43e80719636a198e36cae614784562406dadccfeeb3c3249691ce1a026b6762f29831942255135"], 0x2c}, 0x1, 0x0, 0x0, 0x10050}, 0x4) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @restrict, @union={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x56}, 0x20) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01001d00c9a44794696e13978e6f42784ab1000000000000020000000982010073797a3000000000"], 0x20}}, 0x0) r10 = semget$private(0x0, 0x2, 0x40) semctl$IPC_INFO(r10, 0x3, 0x3, &(0x7f0000000c00)=""/4096) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000828bd700000000000040702000000030073797a3100000000"], 0x14}, 0x1, 0x40030000000000}, 0x4000) 2m3.105000227s ago: executing program 34 (id=3414): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x34, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000040)={0x1, 0x1, 0xab0}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000140)='memory.numa_stat\x00', 0x0, 0x0) mq_getsetattr(r2, &(0x7f0000000240)={0x0, 0x80, 0x2, 0xfffe}, &(0x7f0000000280)) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000201030000000000000000000a000000180001801400018008000100ac141422085df9000200ac146401f2117f098f09ca77368308c9243ffde913f9104aa741658b4bb02b971ad4b8633b6805b60fc0b0ae219a79c95539096135a1b8873d78ac9e2a43e80719636a198e36cae614784562406dadccfeeb3c3249691ce1a026b6762f29831942255135"], 0x2c}, 0x1, 0x0, 0x0, 0x10050}, 0x4) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @restrict, @union={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x56}, 0x20) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01001d00c9a44794696e13978e6f42784ab1000000000000020000000982010073797a3000000000"], 0x20}}, 0x0) r10 = semget$private(0x0, 0x2, 0x40) semctl$IPC_INFO(r10, 0x3, 0x3, &(0x7f0000000c00)=""/4096) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000828bd700000000000040702000000030073797a3100000000"], 0x14}, 0x1, 0x40030000000000}, 0x4000) 1m39.414621682s ago: executing program 5 (id=3816): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 1m39.334379893s ago: executing program 5 (id=3820): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) semctl$SEM_STAT(0x0, 0x1, 0x12, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYRESHEX=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c0000060004"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x4e26, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xfc, @buffer={0x0, 0x53, &(0x7f0000000780)=""/83}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x10020, 0x0, 0x0}) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) readv(r1, &(0x7f0000000180)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1) 1m38.264109864s ago: executing program 35 (id=3841): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) getpeername$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYRESHEX=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c0000060004"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x4e26, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xfc, @buffer={0x0, 0x53, &(0x7f0000000780)=""/83}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x10020, 0x0, 0x0}) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) readv(r1, &(0x7f0000000180)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1) 50.442502712s ago: executing program 2 (id=4777): r0 = socket$kcm(0x11, 0x3, 0x0) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0x1000, 0x10, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f00000000c0)=0x7, &(0x7f0000000140)=0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x4) r6 = openat$cgroup_ro(r5, &(0x7f0000001300)='cgroup.events\x00', 0x5000000, 0x0) readv(r6, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendto$inet6(r7, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007866726d000000000c0002800800020000000000230cd1d82764acf65664032c566fa8b00784017af9034eea83cd47b90e904860321ff87c15c056497c33536f2b3e852be461b2551b244b91bcc16601e75f897873e95747ee385eef4da1dc8a57ab83f8dd44217ad960fde3db52e9b39125a295752fbbf8aade"], 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000001340)=@isdn={0x22, 0x3, 0xc5, 0x9, 0x80}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66", 0xe}], 0x1}, 0x20000040) 50.377917893s ago: executing program 2 (id=4779): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd}, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x401}, 0x11) write$selinux_validatetrans(0xffffffffffffffff, 0x0, 0x79) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f00000002c0)=0x4, 0x2) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1000}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0xf, 0x7, 0xa627, 0x101, 0x6, "8cd78a45c77dc2a1"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), 0x0}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b015a0000000000b7080000959700007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x1003}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21481e, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nodiscard}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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") 50.269197875s ago: executing program 2 (id=4784): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x2, &(0x7f0000000900)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f0000000940)='syzkaller\x00', 0x8, 0xcb, &(0x7f0000000a40)=""/203, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x8, 0xe9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r0, 0xffffffffffffffff, r0], &(0x7f0000000dc0)=[{0x0, 0x3, 0x6, 0x8}, {0x3, 0x3, 0xd, 0xb}, {0x3, 0x5, 0xc, 0x293b0eab8c0d1a1b}, {0x1, 0x2, 0x0, 0xc}], 0x10, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="9020f2f9924c"}, 0x14) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f0000000740)=[{r7, 0x104}], 0x1, 0x0, 0x0, 0x0) pread64(r7, &(0x7f0000000480), 0x1, 0x2) poll(&(0x7f0000000a00)=[{r7}], 0x2e, 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x9, &(0x7f00000003c0)=@raw=[@jmp={0x5, 0x1, 0x7, 0x4, 0x5, 0x0, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_val={0x18, 0x5, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xddae}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ldst={0x3, 0x3, 0x3, 0x0, 0xb, 0x30, 0xffffffffffffffff}], &(0x7f00000004c0)='GPL\x00', 0x0, 0xf4, &(0x7f0000000680)=""/244, 0x41100, 0x62, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x8, 0x8, 0x5}, 0x10, 0x142c3, 0xffffffffffffffff, 0x4, 0x0, &(0x7f00000005c0)=[{0x2, 0x5, 0x3, 0xe}, {0x0, 0x5, 0x8, 0x5}, {0x4, 0x5, 0x3, 0x4}, {0x5, 0x2, 0xa, 0x7}], 0x10, 0x6}, 0x94) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0xb, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r9, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r9, 0x58, &(0x7f0000000840)}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r10, 0xc058534b, &(0x7f0000000180)={0xba, 0x0, 0x422, 0x0, 0x4f, 0x9}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2020, {0x0, 0x0, 0x74, r11, {0xfffd, 0x10}, {0x1, 0xfff1}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) 50.01939918s ago: executing program 2 (id=4794): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f0000000140)={[{@noauto_da_alloc}, {@grpquota}, {@grpjquota}, {@barrier}, {@dioread_nolock}, {@nodiscard}, {@nomblk_io_submit}, {@nodiscard}]}, 0x81, 0x619, &(0x7f0000001800)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="85000000af00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000280000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00'}, 0x94) mkdir(&(0x7f0000000040)='./bus\x00', 0x6) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) ptrace(0x10, r0) modify_ldt$write(0x1, &(0x7f0000000040)={0xd35, 0x1000, 0x4000}, 0x10) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) 49.602222328s ago: executing program 2 (id=4797): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) unshare(0x2a060400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x8}, 0x0, 0x0, 0x0) 49.153314217s ago: executing program 2 (id=4802): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}, @ip_pktinfo={{0x1b, 0x0, 0x8, {0x0, @broadcast, @local}}}], 0x40}, 0xe900) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0xffffffff, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {}, {0xc, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x20000000, 0xffffffff, 0xf761, 0x10000, {0xff, 0x2, 0x6f83, 0x57e, 0x5}, {0x1, 0x1, 0x1000, 0x280, 0x8, 0x2}, 0x2, 0xfffffdde, 0x7}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x200008e2) 49.149954317s ago: executing program 36 (id=4802): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}, @ip_pktinfo={{0x1b, 0x0, 0x8, {0x0, @broadcast, @local}}}], 0x40}, 0xe900) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0xffffffff, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {}, {0xc, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x20000000, 0xffffffff, 0xf761, 0x10000, {0xff, 0x2, 0x6f83, 0x57e, 0x5}, {0x1, 0x1, 0x1000, 0x280, 0x8, 0x2}, 0x2, 0xfffffdde, 0x7}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x200008e2) 1.949924153s ago: executing program 6 (id=5829): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x9, 0x8, 0x9, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000005c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x80, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r3, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_EMATCHES={0x18, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0xfffe}, {0x0, 0x5}}}]}]}, @TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x1a, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) 1.879342124s ago: executing program 6 (id=5831): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 1.844808015s ago: executing program 6 (id=5834): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000180)='%pB \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) ptrace(0x10, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000240)) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x2f, &(0x7f00000000c0)=[{&(0x7f0000000080)="ff", 0x45}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000340)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000a40)={0x60, 0x2, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffffff9, 0x0, 0x0, 0x7fff, 0x24, 0x8, 0x10, 0x3}) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) 1.253152356s ago: executing program 8 (id=5841): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 1.199574107s ago: executing program 8 (id=5843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@ptr={0xe}]}, {0x0, [0x61]}}, &(0x7f0000000280)=""/175, 0x27, 0xaf, 0x1, 0x800000}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4004000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_enter(r4, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r9, 0x0, 0x88100cc, 0x0) 707.784476ms ago: executing program 0 (id=5855): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x0, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r5}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendto$inet6(r2, &(0x7f0000000080)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) shutdown(r2, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000feffffff000000000000000071104b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) syz_io_uring_setup(0xef3, &(0x7f00000014c0)={0x0, 0xe489, 0x400, 0x2, 0x389}, &(0x7f0000000400), &(0x7f0000001540)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f00000015c0)=@IORING_OP_UNLINKAT={0x24, 0x76, 0x0, r7, 0x0, &(0x7f0000001580)='./file0\x00', 0x0, 0x200, 0x0, {0x0, r9}}) 633.799328ms ago: executing program 9 (id=5858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x20000000001}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0) 592.069898ms ago: executing program 9 (id=5860): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 588.189748ms ago: executing program 6 (id=5861): openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x68903, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pipe(0x0) inotify_init() r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20008850) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r3}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r3}, 0xc) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x200008c2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="05002000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/17], 0x50) 582.547969ms ago: executing program 7 (id=5862): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046030024000000000004907800000000e00000010182020600008000000c907861020001"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) lsm_get_self_attr(0x67, &(0x7f0000000200)={0x0, 0x0, 0x71, 0x51, ""/81}, &(0x7f0000000280)=0x71, 0x0) 569.026579ms ago: executing program 0 (id=5863): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) llistxattr(&(0x7f00000003c0)='./file1\x00', 0x0, 0x0) 547.911429ms ago: executing program 7 (id=5864): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)=""/172, 0xac) 523.22534ms ago: executing program 9 (id=5865): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f00000004c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) timer_gettime(0x0, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="84000000000801040000000000000000050000080500030006000000140004800800838a83690eb9de830b40000000030900010073797a31000000000900010073797a310000000034000480080005400000180308000b40000004f908000340000000000800074004000002080006400000000e08000b4000000008060002"], 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x880) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x20, &(0x7f00000003c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@cache_loose}, {@noextend}, {@debug={'debug', 0x3d, 0x80}}, {@noxattr}, {@privport}, {@loose}, {@version_u}], [{@euid_gt}, {@measure}]}}) stat(&(0x7f0000002040)='./file0\x00', &(0x7f0000002080)) 515.39098ms ago: executing program 6 (id=5866): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x9, 0x8, 0x9, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000005c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x80, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r3, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_EMATCHES={0x18, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0xfffe}, {0x0, 0x5}}}]}]}, @TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x1a, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) 514.98435ms ago: executing program 0 (id=5867): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0xc, 0xb, 0xfffd, 0xfffc}, 0x8, 0x3, 0x8, 0x0, 0x2, 0x20000, 0x0}) 464.408791ms ago: executing program 7 (id=5868): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 464.172651ms ago: executing program 0 (id=5869): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 462.869571ms ago: executing program 0 (id=5870): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x20000000001}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0) 459.493961ms ago: executing program 6 (id=5871): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000180)='%pB \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) ptrace(0x10, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000240)) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x2f, &(0x7f00000000c0)=[{&(0x7f0000000080)="ff", 0x45}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000340)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000a40)={0x60, 0x2, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffffff9, 0x0, 0x0, 0x7fff, 0x24, 0x8, 0x10, 0x3}) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) 445.918632ms ago: executing program 0 (id=5872): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r2, {0x6}}}, 0x24}}, 0x0) 411.359172ms ago: executing program 9 (id=5873): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000000)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x1) 392.545822ms ago: executing program 7 (id=5874): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046030024000000000004907800000000e00000010182020600008000000c907861020001"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) lsm_get_self_attr(0x67, &(0x7f0000000200)={0x0, 0x0, 0x71, 0x51, ""/81}, &(0x7f0000000280)=0x71, 0x0) 387.856172ms ago: executing program 9 (id=5875): socket(0x8, 0x1, 0x800000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000680)={'#! ', './file0'}, 0xb) 371.463983ms ago: executing program 7 (id=5876): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 326.215743ms ago: executing program 9 (id=5877): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@noquota}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000280)=0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r5}, 0x9) close(r3) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './bus\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @in=@multicast2, 0x4e22, 0x6e, 0x4e22, 0x8, 0xa, 0x40, 0x80, 0x89, 0x0, r8}, {0xa7a5, 0x2, 0x7f, 0xfffffffffffff001, 0x8, 0xfffffffffffffff8, 0x9, 0x3ff}, {0x5ed, 0x5, 0xfffffffffffffffc, 0x10001}, 0x3, 0x6e6bbc, 0x0, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x5a}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3504, 0x2, 0x2, 0x93, 0x3, 0x5}}, 0xe8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'wg2\x00', 0x20}) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r9, &(0x7f00000009c0)="3bf58d", 0x3) sendfile(r9, r0, 0x0, 0x3ffff) sendfile(r9, r0, 0x0, 0x7fffeffd) 313.692504ms ago: executing program 8 (id=5878): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) llistxattr(&(0x7f00000003c0)='./file1\x00', 0x0, 0x0) 310.972194ms ago: executing program 7 (id=5879): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000180)='%pB \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) ptrace(0x10, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000240)) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x2f, &(0x7f00000000c0)=[{&(0x7f0000000080)="ff", 0x45}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000340)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000a40)={0x60, 0x2, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffffff9, 0x0, 0x0, 0x7fff, 0x24, 0x8, 0x10, 0x3}) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) 201.964606ms ago: executing program 8 (id=5880): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0xc, 0xb, 0xfffd, 0xfffc}, 0x8, 0x3, 0x8, 0x0, 0x2, 0x20000, 0x0}) 98.657238ms ago: executing program 8 (id=5881): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x9, 0x8, 0x9, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000005c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100039040000", @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x80, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r3, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_EMATCHES={0x18, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0xfffe}, {0x0, 0x5}}}]}]}, @TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x1a, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) 0s ago: executing program 8 (id=5882): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x20000000001}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0) kernel console output (not intermixed with test programs): -mounted 00000000-0000-0000-0000-000000000000 ro. [ 381.553747][T17944] __nla_validate_parse: 17 callbacks suppressed [ 381.553766][T17944] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4943'. [ 381.638508][T17942] netlink: 'syz.8.4942': attribute type 4 has an invalid length. [ 381.646289][T17942] netlink: 17 bytes leftover after parsing attributes in process `syz.8.4942'. [ 382.075628][T17983] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4953'. [ 382.199738][T17989] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4955'. [ 382.315797][ T4992] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.327680][ T4992] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.338909][ T4992] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.350298][ T4992] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.403479][T17996] 9pnet: Could not find request transport: rdmj [ 382.438081][T17999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4961'. [ 382.523664][T18007] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4964'. [ 382.657875][T18019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4970'. [ 382.672827][T18019] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.721775][T18019] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.761072][T18019] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.780304][T18022] loop8: detected capacity change from 0 to 512 [ 382.799744][T18022] EXT4-fs mount: 2 callbacks suppressed [ 382.799761][T18022] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.818185][T18022] ext4 filesystem being mounted at /218/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.820481][T18019] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.849707][T18029] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4973'. [ 382.883981][T18029] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4973'. [ 382.936717][T14791] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.984836][T18045] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4978'. [ 383.260537][T18071] openvswitch: netlink: Message has 6 unknown bytes. [ 383.288126][T18075] tc_dump_action: action bad kind [ 383.288159][T18074] IPv6: Can't replace route, no match found [ 383.541946][T18081] lo speed is unknown, defaulting to 1000 [ 384.051135][T18093] loop7: detected capacity change from 0 to 512 [ 384.058423][T18093] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 384.070379][T18093] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 384.083762][T18093] EXT4-fs (loop7): 1 truncate cleaned up [ 384.090122][T18093] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.167537][T18096] EXT4-fs warning (device loop7): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 384.690976][ T29] kauditd_printk_skb: 1003 callbacks suppressed [ 384.690995][ T29] audit: type=1400 audit(2000000183.419:19351): avc: denied { unmount } for pid=14791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 384.718941][ T29] audit: type=1400 audit(2000000183.449:19352): avc: denied { read write } for pid=14791 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 384.743811][ T29] audit: type=1400 audit(2000000183.449:19353): avc: denied { open } for pid=14791 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 384.768303][ T29] audit: type=1400 audit(2000000183.449:19354): avc: denied { ioctl } for pid=14791 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 384.794648][ T29] audit: type=1400 audit(2000000183.479:19355): avc: denied { map_create } for pid=18103 comm="syz.8.4996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 384.814094][ T29] audit: type=1400 audit(2000000183.479:19356): avc: denied { map_read map_write } for pid=18103 comm="syz.8.4996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 384.834201][ T29] audit: type=1400 audit(2000000183.479:19357): avc: denied { prog_load } for pid=18103 comm="syz.8.4996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 384.853456][ T29] audit: type=1400 audit(2000000183.479:19358): avc: denied { bpf } for pid=18103 comm="syz.8.4996" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 384.874253][ T29] audit: type=1400 audit(2000000183.479:19359): avc: denied { perfmon } for pid=18103 comm="syz.8.4996" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 384.895482][ T29] audit: type=1400 audit(2000000183.479:19360): avc: denied { compute_member } for pid=18103 comm="syz.8.4996" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 384.930741][T13440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.966236][T18110] 9pnet: Could not find request transport: rdmj [ 385.022011][T18120] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18120 comm=syz.7.5002 [ 385.207646][T18137] hsr_slave_0: left promiscuous mode [ 385.217782][T18137] hsr_slave_1: left promiscuous mode [ 385.321389][T18141] 9pnet_fd: Insufficient options for proto=fd [ 385.940980][T18158] ipvlan2: entered promiscuous mode [ 385.957913][T18158] bridge0: port 3(ipvlan2) entered blocking state [ 385.964583][T18158] bridge0: port 3(ipvlan2) entered disabled state [ 385.987677][T18158] ipvlan2: entered allmulticast mode [ 385.993089][T18158] bridge0: entered allmulticast mode [ 386.007888][T18158] ipvlan2: left allmulticast mode [ 386.013096][T18158] bridge0: left allmulticast mode [ 386.148040][T18172] 9pnet_fd: Insufficient options for proto=fd [ 386.386384][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.417228][ T4991] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.425791][ T4991] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.445083][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.503900][T18201] 9pnet_fd: Insufficient options for proto=fd [ 386.615748][T18214] __nla_validate_parse: 7 callbacks suppressed [ 386.615763][T18214] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5037'. [ 386.697035][T18222] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5040'. [ 386.839331][T18227] loop7: detected capacity change from 0 to 512 [ 386.997128][T18243] loop7: detected capacity change from 0 to 512 [ 387.003882][T18243] EXT4-fs: Ignoring removed mblk_io_submit option [ 387.011235][T18243] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 387.022771][T18243] EXT4-fs (loop7): 1 truncate cleaned up [ 387.029265][T18243] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.044431][T18247] smc: net device bond0 erased user defined pnetid SYZ0 [ 387.211132][T18253] 9pnet: Could not find request transport: rdmj [ 387.355885][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5056'. [ 387.537715][T18268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5058'. [ 387.589176][T18268] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.710343][T18268] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.769857][T18268] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.820746][T18268] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.976677][T18281] netlink: 'syz.9.5063': attribute type 1 has an invalid length. [ 387.999499][T18281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.011575][T18281] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5063'. [ 388.024308][T18281] bond1 (unregistering): Released all slaves [ 388.050237][T13440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.072151][T18284] loop7: detected capacity change from 0 to 1024 [ 388.079754][T18284] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 388.096562][T18286] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5065'. [ 388.108521][T18284] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.159008][T13440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.274162][T18310] netlink: 'syz.9.5075': attribute type 1 has an invalid length. [ 388.288337][T18310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.297936][T18310] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5075'. [ 388.309761][T18310] bond1 (unregistering): Released all slaves [ 388.562490][T18318] loop8: detected capacity change from 0 to 1024 [ 388.578273][T18318] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 388.609248][T18318] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.655420][T14791] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.681109][T18327] loop8: detected capacity change from 0 to 1024 [ 388.690264][T18327] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 388.709921][T18327] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.760459][T14791] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.116324][T18337] program syz.6.5083 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.227741][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5086'. [ 389.259897][T18348] netlink: 'syz.6.5087': attribute type 1 has an invalid length. [ 389.276863][T18348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.290260][T18348] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5087'. [ 389.301980][T18348] bond0 (unregistering): Released all slaves [ 389.370449][T18357] loop6: detected capacity change from 0 to 1024 [ 389.379177][T18357] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 389.392977][T18359] netlink: 'syz.9.5091': attribute type 3 has an invalid length. [ 389.401002][T18359] netlink: 'syz.9.5091': attribute type 3 has an invalid length. [ 389.403818][T18357] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.465722][ T8794] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.535565][T18375] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5098'. [ 389.578821][T18382] ipvlan2: entered promiscuous mode [ 389.585433][T18382] bridge0: port 3(ipvlan2) entered blocking state [ 389.592072][T18382] bridge0: port 3(ipvlan2) entered disabled state [ 389.599109][T18382] ipvlan2: entered allmulticast mode [ 389.604481][T18382] bridge0: entered allmulticast mode [ 389.610694][T18382] ipvlan2: left allmulticast mode [ 389.615807][T18382] bridge0: left allmulticast mode [ 389.702767][ T29] kauditd_printk_skb: 508 callbacks suppressed [ 389.702789][ T29] audit: type=1400 audit(2000000188.429:19869): avc: denied { bind } for pid=18385 comm="syz.8.5102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 389.728875][ T29] audit: type=1400 audit(2000000188.429:19870): avc: denied { name_bind } for pid=18385 comm="syz.8.5102" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 389.751006][ T29] audit: type=1400 audit(2000000188.429:19871): avc: denied { node_bind } for pid=18385 comm="syz.8.5102" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 389.787331][ T29] audit: type=1400 audit(2000000188.509:19872): avc: denied { create } for pid=18387 comm="syz.7.5103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 389.811553][T18392] loop9: detected capacity change from 0 to 1024 [ 389.827347][T18392] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 389.855786][T18392] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.921507][T17539] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.938906][ T29] audit: type=1400 audit(2000000188.669:19873): avc: denied { open } for pid=18406 comm="syz.8.5110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 389.958398][ T29] audit: type=1400 audit(2000000188.669:19874): avc: denied { kernel } for pid=18406 comm="syz.8.5110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 390.040945][ T29] audit: type=1400 audit(2000000188.769:19875): avc: denied { getopt } for pid=18418 comm="syz.7.5114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 390.084511][ T29] audit: type=1400 audit(2000000188.769:19876): avc: denied { create } for pid=18418 comm="syz.7.5114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 390.104262][ T29] audit: type=1400 audit(2000000188.769:19877): avc: denied { write } for pid=18418 comm="syz.7.5114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 390.123816][ T29] audit: type=1400 audit(2000000188.769:19878): avc: denied { create } for pid=18418 comm="syz.7.5114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 390.187226][T18436] netlink: 'syz.8.5121': attribute type 1 has an invalid length. [ 390.214784][T18436] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.234861][T18436] bond1 (unregistering): Released all slaves [ 390.370599][T18459] lo speed is unknown, defaulting to 1000 [ 390.388521][T18465] FAULT_INJECTION: forcing a failure. [ 390.388521][T18465] name failslab, interval 1, probability 0, space 0, times 0 [ 390.401230][T18465] CPU: 1 UID: 0 PID: 18465 Comm: syz.7.5131 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 390.401311][T18465] Tainted: [W]=WARN [ 390.401321][T18465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 390.401338][T18465] Call Trace: [ 390.401347][T18465] [ 390.401356][T18465] __dump_stack+0x1d/0x30 [ 390.401384][T18465] dump_stack_lvl+0xe8/0x140 [ 390.401469][T18465] dump_stack+0x15/0x1b [ 390.401490][T18465] should_fail_ex+0x265/0x280 [ 390.401521][T18465] ? __request_module+0x1c4/0x3e0 [ 390.401551][T18465] should_failslab+0x8c/0xb0 [ 390.401576][T18465] ? dev_load+0x61/0xc0 [ 390.401609][T18465] __kmalloc_cache_noprof+0x4c/0x320 [ 390.401713][T18465] ? dev_load+0x61/0xc0 [ 390.401746][T18465] __request_module+0x1c4/0x3e0 [ 390.401776][T18465] ? capable+0x7c/0xb0 [ 390.401807][T18465] dev_load+0x61/0xc0 [ 390.401887][T18465] dev_ioctl+0x2d1/0x960 [ 390.401920][T18465] sock_do_ioctl+0x197/0x220 [ 390.402008][T18465] sock_ioctl+0x41b/0x610 [ 390.402073][T18465] ? __pfx_sock_ioctl+0x10/0x10 [ 390.402107][T18465] __se_sys_ioctl+0xcb/0x140 [ 390.402144][T18465] __x64_sys_ioctl+0x43/0x50 [ 390.402262][T18465] x64_sys_call+0x1816/0x3000 [ 390.402292][T18465] do_syscall_64+0xd2/0x200 [ 390.402327][T18465] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 390.402439][T18465] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 390.402494][T18465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.402521][T18465] RIP: 0033:0x7fb3193ceec9 [ 390.402540][T18465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.402565][T18465] RSP: 002b:00007fb317e37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.402592][T18465] RAX: ffffffffffffffda RBX: 00007fb319625fa0 RCX: 00007fb3193ceec9 [ 390.402605][T18465] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000006 [ 390.402628][T18465] RBP: 00007fb317e37090 R08: 0000000000000000 R09: 0000000000000000 [ 390.402672][T18465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.402684][T18465] R13: 00007fb319626038 R14: 00007fb319625fa0 R15: 00007ffef42ec728 [ 390.402704][T18465] [ 390.716861][T18478] loop9: detected capacity change from 0 to 512 [ 390.743013][T18478] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.756158][T18478] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.793589][T17539] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.823955][T18499] smc: net device bond0 applied user defined pnetid SYZ0 [ 390.827399][T18495] loop7: detected capacity change from 0 to 736 [ 390.843117][T18499] smc: net device bond0 erased user defined pnetid SYZ0 [ 390.849683][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.866080][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.884779][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.907748][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.953221][T18504] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 390.961542][T18504] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 391.009858][T18506] lo speed is unknown, defaulting to 1000 [ 391.089645][T18513] loop9: detected capacity change from 0 to 1024 [ 391.107308][T18513] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 391.140369][T18513] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.261538][T17539] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.300381][T18530] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.363251][T18530] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.425771][T18538] capability: warning: `syz.6.5156' uses 32-bit capabilities (legacy support in use) [ 391.441932][T18530] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.458891][T18538] FAULT_INJECTION: forcing a failure. [ 391.458891][T18538] name failslab, interval 1, probability 0, space 0, times 0 [ 391.471598][T18538] CPU: 1 UID: 0 PID: 18538 Comm: syz.6.5156 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 391.471673][T18538] Tainted: [W]=WARN [ 391.471683][T18538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 391.471698][T18538] Call Trace: [ 391.471704][T18538] [ 391.471711][T18538] __dump_stack+0x1d/0x30 [ 391.471739][T18538] dump_stack_lvl+0xe8/0x140 [ 391.471765][T18538] dump_stack+0x15/0x1b [ 391.471857][T18538] should_fail_ex+0x265/0x280 [ 391.471966][T18538] should_failslab+0x8c/0xb0 [ 391.471993][T18538] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 391.472099][T18538] ? sidtab_sid2str_get+0xa0/0x130 [ 391.472225][T18538] kmemdup_noprof+0x2b/0x70 [ 391.472254][T18538] sidtab_sid2str_get+0xa0/0x130 [ 391.472300][T18538] security_sid_to_context_core+0x1eb/0x2e0 [ 391.472344][T18538] security_sid_to_context+0x27/0x40 [ 391.472423][T18538] selinux_lsmprop_to_secctx+0x67/0xf0 [ 391.472464][T18538] security_lsmprop_to_secctx+0x1a0/0x1c0 [ 391.472499][T18538] audit_log_subj_ctx+0xa4/0x3e0 [ 391.472525][T18538] ? skb_put+0xa9/0xf0 [ 391.472631][T18538] audit_log_task_context+0x48/0x70 [ 391.472656][T18538] audit_log_task+0xf4/0x250 [ 391.472696][T18538] ? kstrtouint+0x76/0xc0 [ 391.472724][T18538] audit_seccomp+0x61/0x100 [ 391.472840][T18538] ? __seccomp_filter+0x82d/0x1250 [ 391.472884][T18538] __seccomp_filter+0x83e/0x1250 [ 391.472919][T18538] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 391.472950][T18538] ? vfs_write+0x7e8/0x960 [ 391.473060][T18538] ? __rcu_read_unlock+0x4f/0x70 [ 391.473085][T18538] ? __fget_files+0x184/0x1c0 [ 391.473114][T18538] __secure_computing+0x82/0x150 [ 391.473147][T18538] syscall_trace_enter+0xcf/0x1e0 [ 391.473219][T18538] do_syscall_64+0xac/0x200 [ 391.473263][T18538] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 391.473299][T18538] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 391.473424][T18538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.473451][T18538] RIP: 0033:0x7f7e8f29eec9 [ 391.473467][T18538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.473491][T18538] RSP: 002b:00007f7e8dcff038 EFLAGS: 00000246 ORIG_RAX: 000000000000004b [ 391.473513][T18538] RAX: ffffffffffffffda RBX: 00007f7e8f4f5fa0 RCX: 00007f7e8f29eec9 [ 391.473592][T18538] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 391.473695][T18538] RBP: 00007f7e8dcff090 R08: 0000000000000000 R09: 0000000000000000 [ 391.473713][T18538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.473730][T18538] R13: 00007f7e8f4f6038 R14: 00007f7e8f4f5fa0 R15: 00007ffe01977078 [ 391.473756][T18538] [ 391.757497][T18542] loop9: detected capacity change from 0 to 1024 [ 391.767583][T18530] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.781106][T18542] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 391.819831][T18542] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.892885][ T4991] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.902197][T18557] 9pnet_fd: Insufficient options for proto=fd [ 391.921702][T18557] loop6: detected capacity change from 0 to 512 [ 391.926195][ T4991] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.941804][T17539] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.982182][ T4991] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.989487][T18559] __nla_validate_parse: 7 callbacks suppressed [ 391.989507][T18559] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5164'. [ 391.998304][ T4991] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.286082][T18591] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5176'. [ 392.304087][T18591] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.340491][T18591] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.357248][T18595] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5177'. [ 392.396707][T18600] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5179'. [ 392.409102][T18591] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.457530][T18606] loop6: detected capacity change from 0 to 128 [ 392.466616][T18591] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.480807][T18606] macvtap0: refused to change device tx_queue_len [ 392.516518][ T4990] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.535546][ T4990] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.548351][ T4990] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.556689][ T4990] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.635860][T18613] loop9: detected capacity change from 0 to 1024 [ 392.642866][T18613] EXT4-fs: Ignoring removed mblk_io_submit option [ 392.652276][T18613] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.731311][T18613] 9p: Unknown access argument ¿: -22 [ 392.736746][T18614] lo speed is unknown, defaulting to 1000 [ 392.780975][T18624] EXT4-fs error (device loop9): __ext4_remount:6746: comm syz.9.5184: Abort forced by user [ 392.798930][T18624] EXT4-fs (loop9): Remounting filesystem read-only [ 392.805499][T18624] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 392.817068][T18613] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 392.837972][T18614] chnl_net:caif_netlink_parms(): no params data found [ 392.873094][T17539] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.939565][T18614] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.946727][T18614] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.954797][T18642] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5189'. [ 392.971538][T18614] bridge_slave_0: entered allmulticast mode [ 392.992112][T18614] bridge_slave_0: entered promiscuous mode [ 393.009760][T18646] loop7: detected capacity change from 0 to 8192 [ 393.017339][T18614] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.024437][T18614] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.038321][T18614] bridge_slave_1: entered allmulticast mode [ 393.045893][T18614] bridge_slave_1: entered promiscuous mode [ 393.228663][ T4991] $Hÿ (unregistering): Released all slaves [ 393.237715][ T4991]  (unregistering): Released all slaves [ 393.248090][T18614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.257519][T18662] smc: net device bond0 applied user defined pnetid SYZ0 [ 393.264703][T18665] smc: net device bond0 erased user defined pnetid SYZ0 [ 393.275336][T18664] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5197'. [ 393.279206][T18614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.340789][ T4991] tipc: Disabling bearer [ 393.359749][ T4991] tipc: Left network mode [ 393.373355][T18614] team0: Port device team_slave_0 added [ 393.380148][T18668] netlink: 'syz.8.5198': attribute type 10 has an invalid length. [ 393.390277][ T4991] hsr_slave_0: left promiscuous mode [ 393.395980][ T4991] hsr_slave_1: left promiscuous mode [ 393.473593][T18614] team0: Port device team_slave_1 added [ 393.480748][T18668] FAULT_INJECTION: forcing a failure. [ 393.480748][T18668] name failslab, interval 1, probability 0, space 0, times 0 [ 393.493630][T18668] CPU: 0 UID: 0 PID: 18668 Comm: syz.8.5198 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 393.493673][T18668] Tainted: [W]=WARN [ 393.493682][T18668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 393.493752][T18668] Call Trace: [ 393.493762][T18668] [ 393.493772][T18668] __dump_stack+0x1d/0x30 [ 393.493799][T18668] dump_stack_lvl+0xe8/0x140 [ 393.493826][T18668] dump_stack+0x15/0x1b [ 393.493848][T18668] should_fail_ex+0x265/0x280 [ 393.493948][T18668] should_failslab+0x8c/0xb0 [ 393.494020][T18668] kmem_cache_alloc_node_noprof+0x57/0x320 [ 393.494045][T18668] ? __alloc_skb+0x101/0x320 [ 393.494153][T18668] __alloc_skb+0x101/0x320 [ 393.494228][T18668] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 393.494263][T18668] ? __dev_close_many+0x1d8/0x420 [ 393.494334][T18668] rtmsg_ifinfo+0x6d/0x110 [ 393.494365][T18668] __dev_notify_flags+0x76/0x1a0 [ 393.494387][T18668] netif_change_flags+0xac/0xd0 [ 393.494438][T18668] do_setlink+0x9d2/0x2810 [ 393.494553][T18668] ? __schedule+0x6b9/0xb30 [ 393.494587][T18668] ? __list_del_entry_valid_or_report+0x65/0x130 [ 393.494622][T18668] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 393.494645][T18668] ? __mutex_lock+0x25d/0xcc0 [ 393.494728][T18668] rtnl_newlink+0xe75/0x12d0 [ 393.494764][T18668] ? x86_call_depth_emit_accounting+0x128/0x2e0 [ 393.494854][T18668] ? __rcu_read_unlock+0x4f/0x70 [ 393.494878][T18668] ? array_map_lookup_elem+0x5f/0x90 [ 393.494942][T18668] ? __rcu_read_unlock+0x34/0x70 [ 393.494965][T18668] ? bpf_trace_run3+0x12c/0x1d0 [ 393.495001][T18668] ? __memcg_slab_free_hook+0x135/0x230 [ 393.495039][T18668] ? __rcu_read_unlock+0x4f/0x70 [ 393.495147][T18668] ? avc_has_perm_noaudit+0x1b1/0x200 [ 393.495235][T18668] ? cred_has_capability+0x210/0x280 [ 393.495276][T18668] ? selinux_capable+0x31/0x40 [ 393.495340][T18668] ? security_capable+0x83/0x90 [ 393.495368][T18668] ? ns_capable+0x7d/0xb0 [ 393.495396][T18668] ? __pfx_rtnl_newlink+0x10/0x10 [ 393.495568][T18668] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 393.495741][T18668] netlink_rcv_skb+0x120/0x220 [ 393.495801][T18668] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 393.495846][T18668] rtnetlink_rcv+0x1c/0x30 [ 393.495956][T18668] netlink_unicast+0x5c0/0x690 [ 393.495993][T18668] netlink_sendmsg+0x58b/0x6b0 [ 393.496050][T18668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.496087][T18668] __sock_sendmsg+0x145/0x180 [ 393.496128][T18668] ____sys_sendmsg+0x31e/0x4e0 [ 393.496164][T18668] ___sys_sendmsg+0x17b/0x1d0 [ 393.496246][T18668] __x64_sys_sendmsg+0xd4/0x160 [ 393.496279][T18668] x64_sys_call+0x191e/0x3000 [ 393.496306][T18668] do_syscall_64+0xd2/0x200 [ 393.496348][T18668] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 393.496382][T18668] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 393.496419][T18668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.496477][T18668] RIP: 0033:0x7fa52dbfeec9 [ 393.496492][T18668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.496510][T18668] RSP: 002b:00007fa52c65f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.496528][T18668] RAX: ffffffffffffffda RBX: 00007fa52de55fa0 RCX: 00007fa52dbfeec9 [ 393.496542][T18668] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 393.496589][T18668] RBP: 00007fa52c65f090 R08: 0000000000000000 R09: 0000000000000000 [ 393.496605][T18668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.496619][T18668] R13: 00007fa52de56038 R14: 00007fa52de55fa0 R15: 00007ffc05d7e918 [ 393.496638][T18668] [ 393.650138][T18668] team0: Port device hsr_slave_0 added [ 393.879721][T18614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.886701][T18614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.912800][T18614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.925993][T18614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.932992][T18614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.959144][T18614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.997704][T18675] netlink: 100 bytes leftover after parsing attributes in process `syz.7.5199'. [ 394.011053][T18614] hsr_slave_0: entered promiscuous mode [ 394.022301][T18614] hsr_slave_1: entered promiscuous mode [ 394.022609][T18614] debugfs: 'hsr0' already exists in 'hsr' [ 394.022626][T18614] Cannot create hsr debugfs directory [ 394.062053][T18682] netlink: 'syz.0.5203': attribute type 1 has an invalid length. [ 394.094198][T18682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 394.100908][T18685] loop9: detected capacity change from 0 to 512 [ 394.108057][T18685] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 394.123721][T18682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5203'. [ 394.130183][T18685] EXT4-fs (loop9): 1 truncate cleaned up [ 394.141422][T18685] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.160325][T18682] bond1 (unregistering): Released all slaves [ 394.208955][T18695] EXT4-fs warning (device loop9): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 394.256428][T18699] netlink: 'syz.0.5207': attribute type 1 has an invalid length. [ 394.270149][T18699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 394.282511][T18699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5207'. [ 394.293698][T18699] bond1 (unregistering): Released all slaves [ 394.400613][T18702] netlink: 'syz.0.5208': attribute type 1 has an invalid length. [ 394.411163][T18704] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5209'. [ 394.416575][T18702] 8021q: adding VLAN 0 to HW filter on device bond1 [ 394.441679][T18702] bond1 (unregistering): Released all slaves [ 394.491869][T18614] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 394.500811][T18614] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 394.509855][T18614] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 394.518969][T18614] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 394.560926][T18614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.574113][T18614] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.587512][ T4990] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.594635][ T4990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.609310][ T4991] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.616532][ T4991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.673956][T18720] lo speed is unknown, defaulting to 1000 [ 394.710321][T18614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.716932][ T29] kauditd_printk_skb: 940 callbacks suppressed [ 394.716954][ T29] audit: type=1400 audit(2000000193.439:20818): avc: denied { name_connect } for pid=18719 comm="syz.0.5213" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 394.810260][ T29] audit: type=1326 audit(2000000193.539:20819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.0.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c01deec9 code=0x7ffc0000 [ 394.834033][ T29] audit: type=1326 audit(2000000193.539:20820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.0.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9c01deec9 code=0x7ffc0000 [ 394.858179][ T29] audit: type=1326 audit(2000000193.539:20821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.0.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c01deec9 code=0x7ffc0000 [ 394.882400][ T29] audit: type=1326 audit(2000000193.559:20822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.0.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa9c01deec9 code=0x7ffc0000 [ 394.906036][ T29] audit: type=1326 audit(2000000193.559:20823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.0.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c01deec9 code=0x7ffc0000 [ 394.929807][ T29] audit: type=1326 audit(2000000193.559:20824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.0.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c01deec9 code=0x7ffc0000 [ 394.953696][ T29] audit: type=1326 audit(2000000193.559:20825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.0.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa9c01deec9 code=0x7ffc0000 [ 394.977320][ T29] audit: type=1326 audit(2000000193.559:20826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.0.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c01deec9 code=0x7ffc0000 [ 395.001159][ T29] audit: type=1326 audit(2000000193.559:20827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18737 comm="syz.0.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa9c01deec9 code=0x7ffc0000 [ 395.065082][T17539] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.095633][T18614] veth0_vlan: entered promiscuous mode [ 395.118016][T18750] IPVS: length: 24 != 696 [ 395.122526][T18614] veth1_vlan: entered promiscuous mode [ 395.155814][T18614] veth0_macvtap: entered promiscuous mode [ 395.176246][T18614] veth1_macvtap: entered promiscuous mode [ 395.189913][T18614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.203590][T18757] lo speed is unknown, defaulting to 1000 [ 395.213931][T18614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.240750][T18763] loop7: detected capacity change from 0 to 128 [ 395.249231][ T5001] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.277047][ T5001] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.310047][ T5001] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.321959][T18762] lo speed is unknown, defaulting to 1000 [ 395.333328][ T5001] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.658484][T18794] loop8: detected capacity change from 0 to 512 [ 395.674292][T18794] netlink: 'syz.8.5233': attribute type 7 has an invalid length. [ 395.758985][T18801] loop8: detected capacity change from 0 to 1024 [ 395.766280][T18801] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 395.789510][T18801] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.835349][T14791] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.921857][T18811] lo speed is unknown, defaulting to 1000 [ 396.040172][ T5002] kworker/u8:23: attempt to access beyond end of device [ 396.040172][ T5002] loop7: rw=1, sector=145, nr_sectors = 8 limit=128 [ 396.056024][ T5002] kworker/u8:23: attempt to access beyond end of device [ 396.056024][ T5002] loop7: rw=1, sector=161, nr_sectors = 8 limit=128 [ 396.069734][ T5002] kworker/u8:23: attempt to access beyond end of device [ 396.069734][ T5002] loop7: rw=1, sector=177, nr_sectors = 8 limit=128 [ 396.083224][ T5002] kworker/u8:23: attempt to access beyond end of device [ 396.083224][ T5002] loop7: rw=1, sector=193, nr_sectors = 8 limit=128 [ 396.097116][ T5002] kworker/u8:23: attempt to access beyond end of device [ 396.097116][ T5002] loop7: rw=1, sector=209, nr_sectors = 8 limit=128 [ 396.110658][ T5002] kworker/u8:23: attempt to access beyond end of device [ 396.110658][ T5002] loop7: rw=1, sector=225, nr_sectors = 8 limit=128 [ 396.124189][ T5002] kworker/u8:23: attempt to access beyond end of device [ 396.124189][ T5002] loop7: rw=1, sector=241, nr_sectors = 8 limit=128 [ 396.140080][ T5002] kworker/u8:23: attempt to access beyond end of device [ 396.140080][ T5002] loop7: rw=1, sector=257, nr_sectors = 8 limit=128 [ 396.154870][ T5002] kworker/u8:23: attempt to access beyond end of device [ 396.154870][ T5002] loop7: rw=1, sector=273, nr_sectors = 8 limit=128 [ 396.168507][ T5002] kworker/u8:23: attempt to access beyond end of device [ 396.168507][ T5002] loop7: rw=1, sector=289, nr_sectors = 8 limit=128 [ 396.206893][T18819] @ÿ: renamed from veth0_vlan (while UP) [ 396.217586][T18817] loop7: detected capacity change from 0 to 512 [ 396.220534][T18819] team_slave_0: entered promiscuous mode [ 396.229548][T18819] team_slave_1: entered promiscuous mode [ 396.230521][T18817] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.237696][T18819] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 396.248553][T18817] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.322902][T13440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.396573][T18841] loop7: detected capacity change from 0 to 512 [ 396.403437][T18841] EXT4-fs: Ignoring removed mblk_io_submit option [ 396.410678][T18841] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 396.421962][T18841] EXT4-fs (loop7): 1 truncate cleaned up [ 396.428291][T18841] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.514484][T18848] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.578526][T13440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.598188][T18852] @ÿ: renamed from veth0_vlan (while UP) [ 396.615382][T18852] team_slave_0: entered promiscuous mode [ 396.621137][T18852] team_slave_1: entered promiscuous mode [ 396.626811][T18852] dummy0: entered promiscuous mode [ 396.633710][T18852] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 396.704589][ T5001] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.718292][ T5001] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.726603][ T5001] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.750497][ T5001] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.762582][T18858] netlink: 'syz.7.5258': attribute type 10 has an invalid length. [ 396.774003][T18858] team0: Device hsr_slave_0 failed to register rx_handler [ 397.253315][T18880] pim6reg: entered allmulticast mode [ 397.265215][T18880] pim6reg: left allmulticast mode [ 397.303883][T18885] loop9: detected capacity change from 0 to 512 [ 397.323923][T18886] __nla_validate_parse: 7 callbacks suppressed [ 397.323939][T18886] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5266'. [ 397.348201][T18885] netlink: 'syz.9.5268': attribute type 7 has an invalid length. [ 397.356002][T18885] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5268'. [ 397.393778][T18885] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5268'. [ 397.533139][T18900] loop9: detected capacity change from 0 to 512 [ 397.549019][T18900] EXT4-fs: Ignoring removed mblk_io_submit option [ 397.565959][T18900] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 397.592887][T18900] EXT4-fs (loop9): 1 truncate cleaned up [ 397.601830][T18900] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.744775][T18906] netlink: 'syz.0.5275': attribute type 10 has an invalid length. [ 397.756822][T18906] team0: Device hsr_slave_0 failed to register rx_handler [ 397.788418][T18908] syzkaller1: entered promiscuous mode [ 397.794002][T18908] syzkaller1: entered allmulticast mode [ 397.920984][T18848] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.001419][T18921] loop8: detected capacity change from 0 to 512 [ 398.008301][T18921] EXT4-fs: Ignoring removed mblk_io_submit option [ 398.015208][T18921] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 398.028039][T18921] EXT4-fs (loop8): 1 truncate cleaned up [ 398.034160][T18921] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.078703][T18923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5277'. [ 398.124475][T14791] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.183335][T18928] loop8: detected capacity change from 0 to 128 [ 398.304314][T18932] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 398.326197][T18934] loop8: detected capacity change from 0 to 512 [ 398.333881][T18934] EXT4-fs: Ignoring removed mblk_io_submit option [ 398.342127][T18934] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 398.344187][T18936] loop7: detected capacity change from 0 to 512 [ 398.353699][T18934] EXT4-fs (loop8): 1 truncate cleaned up [ 398.365076][T18934] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.393816][T18936] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.411507][T18936] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.443458][T17539] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.454763][T13440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.481577][T18941] lo speed is unknown, defaulting to 1000 [ 398.520980][T18941] loop9: detected capacity change from 0 to 128 [ 398.530191][T14791] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.589047][T18950] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5288'. [ 398.739596][T18956] loop8: detected capacity change from 0 to 1024 [ 398.756452][T18956] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 398.806228][T18956] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.921771][T18848] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.943625][T14791] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.012765][T18969] pim6reg1: entered promiscuous mode [ 399.018183][T18969] pim6reg1: entered allmulticast mode [ 399.034832][T18848] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.130529][ T5002] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.160959][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.171182][T18979] loop9: detected capacity change from 0 to 1024 [ 399.185843][T18979] EXT4-fs: Ignoring removed nomblk_io_submit option [ 399.198648][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.200952][T18979] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 399.206865][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.260471][T18979] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.346586][T17539] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.390241][T18991] lo speed is unknown, defaulting to 1000 [ 399.397243][T18994] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5307'. [ 399.535094][T19004] netlink: 'syz.8.5313': attribute type 7 has an invalid length. [ 399.543082][T19004] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5313'. [ 399.628786][T19014] netlink: 'syz.0.5317': attribute type 1 has an invalid length. [ 399.660659][T19017] loop7: detected capacity change from 0 to 512 [ 399.663337][T19014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 399.679715][T19014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5317'. [ 399.681973][T19017] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.701893][T19023] loop8: detected capacity change from 0 to 512 [ 399.702224][T19017] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.720311][T19014] bond1 (unregistering): Released all slaves [ 399.726390][ T29] kauditd_printk_skb: 444 callbacks suppressed [ 399.726479][ T29] audit: type=1400 audit(2000000198.449:21272): avc: denied { add_name } for pid=19015 comm="syz.7.5318" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 399.754082][ T29] audit: type=1400 audit(2000000198.449:21273): avc: denied { create } for pid=19015 comm="syz.7.5318" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 399.774591][ T29] audit: type=1400 audit(2000000198.449:21274): avc: denied { write } for pid=19015 comm="syz.7.5318" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 399.774674][ T29] audit: type=1400 audit(2000000198.449:21275): avc: denied { open } for pid=19015 comm="syz.7.5318" path="/385/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 399.774702][ T29] audit: type=1400 audit(2000000198.449:21276): avc: denied { read } for pid=19015 comm="syz.7.5318" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 399.774855][ T29] audit: type=1400 audit(2000000198.449:21277): avc: denied { ioctl } for pid=19015 comm="syz.7.5318" path="/385/file1/file1" dev="loop7" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 399.798110][T19023] netlink: 'syz.8.5320': attribute type 7 has an invalid length. [ 399.798128][T19023] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5320'. [ 399.871066][ T29] audit: type=1400 audit(2000000198.569:21278): avc: denied { mount } for pid=19015 comm="syz.7.5318" name="/" dev="ramfs" ino=75474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 399.883848][ T29] audit: type=1400 audit(2000000198.609:21279): avc: denied { unmount } for pid=14791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 399.945290][ T29] audit: type=1326 audit(2000000198.669:21280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19027 comm="syz.8.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52dbfeec9 code=0x7ffc0000 [ 399.957471][T19028] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5321'. [ 399.981374][T13440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.993537][ T29] audit: type=1326 audit(2000000198.669:21281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19027 comm="syz.8.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa52dbfeec9 code=0x7ffc0000 [ 400.020543][T19030] netlink: 'syz.0.5323': attribute type 7 has an invalid length. [ 400.044219][T19032] netlink: 'syz.8.5325': attribute type 7 has an invalid length. [ 400.087852][T19039] loop8: detected capacity change from 0 to 1024 [ 400.096000][T19039] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 400.109340][T19039] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.152869][T14791] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.199403][T19050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19050 comm=syz.8.5331 [ 400.258504][T19055] netlink: 'syz.8.5333': attribute type 1 has an invalid length. [ 400.292065][T19055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 400.316376][T19055] bond1 (unregistering): Released all slaves [ 400.451709][T19068] loop6: detected capacity change from 0 to 512 [ 400.557722][T19075] loop6: detected capacity change from 0 to 1024 [ 400.566715][T19075] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 400.620342][T19075] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.673976][T18614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.745264][T19093] pim6reg: entered allmulticast mode [ 400.762986][T19093] pim6reg: left allmulticast mode [ 400.805962][T19100] loop8: detected capacity change from 0 to 512 [ 400.882974][T19106] loop6: detected capacity change from 0 to 1024 [ 400.898672][T19106] EXT4-fs: Ignoring removed bh option [ 400.910162][T19106] EXT4-fs: Ignoring removed orlov option [ 400.912816][T19108] loop8: detected capacity change from 0 to 1024 [ 400.915868][T19106] EXT4-fs: Ignoring removed nomblk_io_submit option [ 400.929888][T19108] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 400.945947][T19106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.973525][T19108] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.054818][T14791] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.196133][T19135] loop8: detected capacity change from 0 to 512 [ 401.212434][T19137] loop7: detected capacity change from 0 to 512 [ 401.222381][T19137] EXT4-fs: Ignoring removed mblk_io_submit option [ 401.232428][T19137] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 401.246849][T19137] EXT4-fs (loop7): 1 truncate cleaned up [ 401.258982][T19137] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.370889][T13440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.430200][T19146] pim6reg1: entered promiscuous mode [ 401.435650][T19146] pim6reg1: entered allmulticast mode [ 401.591217][T19161] loop7: detected capacity change from 0 to 1024 [ 401.608010][T19161] EXT4-fs: Ignoring removed mblk_io_submit option [ 401.614523][T19161] EXT4-fs: Ignoring removed bh option [ 401.628481][T19161] ext3: Unknown parameter 'subj_type' [ 401.642677][T19161] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 402.006595][T19171] lo speed is unknown, defaulting to 1000 [ 402.114835][T19178] netlink: 'syz.0.5381': attribute type 1 has an invalid length. [ 402.144903][T19178] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.197115][T19178] bond1 (unregistering): Released all slaves [ 402.283405][T19186] loop7: detected capacity change from 0 to 1024 [ 402.299088][T19186] EXT4-fs: Ignoring removed nomblk_io_submit option [ 402.328679][T19186] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 402.330829][T19188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19188 comm=syz.0.5387 [ 402.352819][T19188] __nla_validate_parse: 15 callbacks suppressed [ 402.352838][T19188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5387'. [ 402.379064][T19186] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.417209][T19195] netlink: 108 bytes leftover after parsing attributes in process `syz.9.5389'. [ 402.432956][T13440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.470123][T19201] loop7: detected capacity change from 0 to 512 [ 402.493499][T19201] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.522375][T19201] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.558436][T13440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.563163][T19210] lo speed is unknown, defaulting to 1000 [ 402.578584][T19212] netlink: 'syz.8.5397': attribute type 1 has an invalid length. [ 402.608297][T19212] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.628328][T19212] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5397'. [ 402.652577][T19218] netlink: 'syz.7.5398': attribute type 7 has an invalid length. [ 402.660567][T19218] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5398'. [ 402.674417][T19212] bond1 (unregistering): Released all slaves [ 402.725595][T19220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5399'. [ 402.742361][T19220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5399'. [ 402.784642][T19225] lo speed is unknown, defaulting to 1000 [ 402.807546][T19229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19229 comm=syz.0.5399 [ 402.831463][T19231] loop8: detected capacity change from 0 to 128 [ 402.835301][T19232] loop7: detected capacity change from 0 to 1024 [ 402.865706][T19232] EXT4-fs: Ignoring removed nomblk_io_submit option [ 402.886830][T19232] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 402.907519][T19232] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.925450][T19231] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5401'. [ 402.974187][T13440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.074797][T19243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5408'. [ 403.133919][T19247] loop7: detected capacity change from 0 to 512 [ 403.149878][ T4990] bio_check_eod: 214 callbacks suppressed [ 403.149914][ T4990] kworker/u8:11: attempt to access beyond end of device [ 403.149914][ T4990] loop8: rw=1, sector=145, nr_sectors = 8 limit=128 [ 403.155310][T19249] lo speed is unknown, defaulting to 1000 [ 403.170873][ T4990] kworker/u8:11: attempt to access beyond end of device [ 403.170873][ T4990] loop8: rw=1, sector=161, nr_sectors = 8 limit=128 [ 403.197202][ T4990] kworker/u8:11: attempt to access beyond end of device [ 403.197202][ T4990] loop8: rw=1, sector=177, nr_sectors = 8 limit=128 [ 403.201237][T19247] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.213553][ T4990] kworker/u8:11: attempt to access beyond end of device [ 403.213553][ T4990] loop8: rw=1, sector=193, nr_sectors = 8 limit=128 [ 403.228409][T19247] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.250711][ T4990] kworker/u8:11: attempt to access beyond end of device [ 403.250711][ T4990] loop8: rw=1, sector=209, nr_sectors = 8 limit=128 [ 403.264486][ T4990] kworker/u8:11: attempt to access beyond end of device [ 403.264486][ T4990] loop8: rw=1, sector=225, nr_sectors = 8 limit=128 [ 403.278049][ T4990] kworker/u8:11: attempt to access beyond end of device [ 403.278049][ T4990] loop8: rw=1, sector=241, nr_sectors = 8 limit=128 [ 403.294275][ T4990] kworker/u8:11: attempt to access beyond end of device [ 403.294275][ T4990] loop8: rw=1, sector=257, nr_sectors = 8 limit=128 [ 403.307945][ T4990] kworker/u8:11: attempt to access beyond end of device [ 403.307945][ T4990] loop8: rw=1, sector=273, nr_sectors = 8 limit=128 [ 403.323064][ T4990] kworker/u8:11: attempt to access beyond end of device [ 403.323064][ T4990] loop8: rw=1, sector=289, nr_sectors = 8 limit=128 [ 403.354644][T19254] netlink: 'syz.8.5412': attribute type 1 has an invalid length. [ 403.374833][T13440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.405416][T19254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.420017][T19263] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5412'. [ 403.440838][T19266] loop9: detected capacity change from 0 to 512 [ 403.461798][T19263] bond1 (unregistering): Released all slaves [ 403.481368][T19272] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5420'. [ 403.580172][T19279] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.590189][T19279] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.647031][T18614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.659132][T19279] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.669002][T19279] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.719575][T19279] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.729447][T19279] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.777202][T19304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.803890][T19304] bond1 (unregistering): Released all slaves [ 403.819614][T19279] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.829598][T19279] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.847124][ T4990] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.855528][ T4990] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.864236][ T4990] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.874006][T19314] smc: net device bond0 applied user defined pnetid SYZ0 [ 403.881729][T19314] smc: net device bond0 erased user defined pnetid SYZ0 [ 403.896347][ T4990] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.936458][ T4990] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.944778][ T4990] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.986885][ T4990] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.995196][ T4990] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.010629][ T4990] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.018938][ T4990] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.058191][ T4990] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.066559][ T4990] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.156679][T19338] loop8: detected capacity change from 0 to 1024 [ 404.163870][T19338] EXT4-fs: Ignoring removed nomblk_io_submit option [ 404.170912][T19338] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 404.263923][T19343] 8021q: adding VLAN 0 to HW filter on device bond1 [ 404.292127][T19343] bond1 (unregistering): Released all slaves [ 404.410893][T19353] loop6: detected capacity change from 0 to 1024 [ 404.429385][T19353] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 404.527096][T19365] lo speed is unknown, defaulting to 1000 [ 404.578183][T19371] loop8: detected capacity change from 0 to 128 [ 404.655948][T19381] validate_nla: 2 callbacks suppressed [ 404.655968][T19381] netlink: 'syz.6.5468': attribute type 1 has an invalid length. [ 404.747242][ T29] kauditd_printk_skb: 471 callbacks suppressed [ 404.753540][ T29] audit: type=1400 audit(2000000203.469:21753): avc: denied { create } for pid=19364 comm="syz.8.5461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 404.779428][ T29] audit: type=1400 audit(2000000203.509:21754): avc: denied { setopt } for pid=19364 comm="syz.8.5461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 405.043340][T19393] loop6: detected capacity change from 0 to 512 [ 405.112771][ T29] audit: type=1400 audit(2000000203.839:21755): avc: denied { compute_member } for pid=19396 comm="syz.6.5475" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 405.136967][T19399] syzkaller1: entered promiscuous mode [ 405.142690][T19399] syzkaller1: entered allmulticast mode [ 405.155967][ T29] audit: type=1400 audit(2000000203.859:21756): avc: denied { ioctl } for pid=19398 comm="syz.6.5476" path="socket:[76278]" dev="sockfs" ino=76278 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 405.317390][ T29] audit: type=1326 audit(2000000204.039:21757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19404 comm="syz.6.5479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce365beec9 code=0x7ffc0000 [ 405.341187][ T29] audit: type=1326 audit(2000000204.039:21758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19404 comm="syz.6.5479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce365beec9 code=0x7ffc0000 [ 405.364987][ T29] audit: type=1326 audit(2000000204.039:21759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19404 comm="syz.6.5479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce365beec9 code=0x7ffc0000 [ 405.389829][ T29] audit: type=1326 audit(2000000204.049:21760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19404 comm="syz.6.5479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce365beec9 code=0x7ffc0000 [ 405.413681][ T29] audit: type=1326 audit(2000000204.049:21761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19404 comm="syz.6.5479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce365beec9 code=0x7ffc0000 [ 405.437334][ T29] audit: type=1326 audit(2000000204.049:21762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19404 comm="syz.6.5479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fce365beec9 code=0x7ffc0000 [ 405.551206][T19415] loop6: detected capacity change from 0 to 512 [ 405.678622][T19423] lo speed is unknown, defaulting to 1000 [ 405.740272][T19426] loop7: detected capacity change from 0 to 128 [ 405.779951][T19429] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.789941][T19429] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.889104][T19429] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.898965][T19429] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.989301][T19429] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.999133][T19429] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.051479][T19429] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.061412][T19429] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.101623][T19435] loop8: detected capacity change from 0 to 128 [ 406.114480][T19434] lo speed is unknown, defaulting to 1000 [ 406.188906][ T5002] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.197203][ T5002] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.221104][ T5002] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.229381][ T5002] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.276169][ T5002] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.284487][ T5002] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.313956][ T5002] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.322266][ T5002] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.409830][T19447] netlink: 'syz.0.5496': attribute type 1 has an invalid length. [ 406.424699][T19447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 406.437076][T19447] bond1 (unregistering): Released all slaves [ 406.541550][T19454] loop8: detected capacity change from 0 to 512 [ 406.653022][T19459] lo speed is unknown, defaulting to 1000 [ 406.697688][T19465] netlink: 'syz.8.5503': attribute type 1 has an invalid length. [ 406.735262][T19465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 406.765403][T19468] bond1 (unregistering): Released all slaves [ 406.920664][T19478] loop7: detected capacity change from 0 to 512 [ 406.928049][T19478] EXT4-fs: Ignoring removed mblk_io_submit option [ 406.934791][T19478] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 406.946194][T19480] netlink: 'syz.8.5509': attribute type 1 has an invalid length. [ 406.954749][T19478] EXT4-fs (loop7): 1 truncate cleaned up [ 406.975726][T19480] 8021q: adding VLAN 0 to HW filter on device bond1 [ 406.990534][T19480] bond1 (unregistering): Released all slaves [ 407.121019][T19493] loop8: detected capacity change from 0 to 512 [ 407.136325][T19495] loop9: detected capacity change from 0 to 512 [ 407.143414][T19495] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 407.156377][T19495] EXT4-fs (loop9): 1 truncate cleaned up [ 407.216433][T19503] EXT4-fs warning (device loop9): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 407.313424][T19511] syzkaller1: entered promiscuous mode [ 407.319063][T19511] syzkaller1: entered allmulticast mode [ 407.401020][T19517] netlink: 'syz.6.5523': attribute type 1 has an invalid length. [ 407.423731][T19517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 407.451989][T19517] __nla_validate_parse: 18 callbacks suppressed [ 407.452008][T19517] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5523'. [ 407.803676][T19533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5529'. [ 407.813716][T19533] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5529'. [ 407.869718][T19539] loop7: detected capacity change from 0 to 512 [ 407.899996][T19539] ext4 filesystem being mounted at /422/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.007030][T19549] netlink: 'syz.7.5536': attribute type 1 has an invalid length. [ 408.040164][T19549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 408.061647][T19549] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5536'. [ 408.153362][T19561] loop9: detected capacity change from 0 to 512 [ 408.168889][T19561] EXT4-fs: Ignoring removed mblk_io_submit option [ 408.177768][T19561] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 408.194973][T19561] EXT4-fs (loop9): 1 truncate cleaned up [ 408.227072][T19566] FAULT_INJECTION: forcing a failure. [ 408.227072][T19566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.240323][T19566] CPU: 1 UID: 0 PID: 19566 Comm: syz.7.5542 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 408.240364][T19566] Tainted: [W]=WARN [ 408.240373][T19566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 408.240389][T19566] Call Trace: [ 408.240398][T19566] [ 408.240408][T19566] __dump_stack+0x1d/0x30 [ 408.240504][T19566] dump_stack_lvl+0xe8/0x140 [ 408.240530][T19566] dump_stack+0x15/0x1b [ 408.240552][T19566] should_fail_ex+0x265/0x280 [ 408.240582][T19566] should_fail+0xb/0x20 [ 408.240608][T19566] should_fail_usercopy+0x1a/0x20 [ 408.240665][T19566] _copy_from_iter+0xd2/0xe80 [ 408.240769][T19566] ? _copy_from_iter+0x170/0xe80 [ 408.240833][T19566] copy_page_from_iter+0x178/0x2a0 [ 408.240990][T19566] skb_copy_datagram_from_iter+0x232/0x490 [ 408.241028][T19566] tun_get_user+0xafa/0x26e0 [ 408.241054][T19566] ? ref_tracker_alloc+0x1f2/0x2f0 [ 408.241115][T19566] ? selinux_file_permission+0x2f0/0x320 [ 408.241228][T19566] tun_chr_write_iter+0x15e/0x210 [ 408.241273][T19566] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 408.241381][T19566] vfs_write+0x527/0x960 [ 408.241424][T19566] ksys_write+0xda/0x1a0 [ 408.241520][T19566] __x64_sys_write+0x40/0x50 [ 408.241565][T19566] x64_sys_call+0x2802/0x3000 [ 408.241594][T19566] do_syscall_64+0xd2/0x200 [ 408.241632][T19566] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 408.241678][T19566] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 408.241718][T19566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.241896][T19566] RIP: 0033:0x7fb3193ceec9 [ 408.241912][T19566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.241930][T19566] RSP: 002b:00007fb317e37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 408.241955][T19566] RAX: ffffffffffffffda RBX: 00007fb319625fa0 RCX: 00007fb3193ceec9 [ 408.241991][T19566] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 408.242008][T19566] RBP: 00007fb317e37090 R08: 0000000000000000 R09: 0000000000000000 [ 408.242021][T19566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 408.242091][T19566] R13: 00007fb319626038 R14: 00007fb319625fa0 R15: 00007ffef42ec728 [ 408.242119][T19566] [ 408.484631][T19569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5543'. [ 408.496441][T19569] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5543'. [ 408.605155][T19582] netlink: 'syz.7.5549': attribute type 1 has an invalid length. [ 408.639323][T19582] 8021q: adding VLAN 0 to HW filter on device bond3 [ 408.656026][T19589] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5549'. [ 409.064279][T19619] netlink: 'syz.8.5564': attribute type 1 has an invalid length. [ 409.083112][T19619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 409.100137][T19620] FAULT_INJECTION: forcing a failure. [ 409.100137][T19620] name failslab, interval 1, probability 0, space 0, times 0 [ 409.110995][T19619] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5564'. [ 409.113034][T19620] CPU: 0 UID: 0 PID: 19620 Comm: syz.7.5565 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 409.113083][T19620] Tainted: [W]=WARN [ 409.113093][T19620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 409.113167][T19620] Call Trace: [ 409.113176][T19620] [ 409.113186][T19620] __dump_stack+0x1d/0x30 [ 409.113216][T19620] dump_stack_lvl+0xe8/0x140 [ 409.113244][T19620] dump_stack+0x15/0x1b [ 409.113269][T19620] should_fail_ex+0x265/0x280 [ 409.113314][T19620] should_failslab+0x8c/0xb0 [ 409.113343][T19620] kmem_cache_alloc_noprof+0x50/0x310 [ 409.113376][T19620] ? security_inode_alloc+0x37/0x100 [ 409.113464][T19620] security_inode_alloc+0x37/0x100 [ 409.113498][T19620] inode_init_always_gfp+0x4b7/0x500 [ 409.113548][T19620] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 409.113593][T19620] alloc_inode+0x58/0x170 [ 409.113651][T19620] new_inode+0x1d/0xe0 [ 409.113674][T19620] shmem_get_inode+0x244/0x750 [ 409.113721][T19620] __shmem_file_setup+0x113/0x210 [ 409.113818][T19620] shmem_file_setup+0x3b/0x50 [ 409.113874][T19620] __se_sys_memfd_create+0x2c3/0x590 [ 409.113933][T19620] __x64_sys_memfd_create+0x31/0x40 [ 409.113992][T19620] x64_sys_call+0x2ac2/0x3000 [ 409.114023][T19620] do_syscall_64+0xd2/0x200 [ 409.114067][T19620] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 409.114104][T19620] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 409.114208][T19620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.114240][T19620] RIP: 0033:0x7fb3193ceec9 [ 409.114260][T19620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.114286][T19620] RSP: 002b:00007fb317e36e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 409.114377][T19620] RAX: ffffffffffffffda RBX: 0000000000000521 RCX: 00007fb3193ceec9 [ 409.114395][T19620] RDX: 00007fb317e36ef0 RSI: 0000000000000000 RDI: 00007fb319452960 [ 409.114430][T19620] RBP: 0000200000000580 R08: 00007fb317e36bb7 R09: 00007fb317e36e40 [ 409.114448][T19620] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000540 [ 409.114465][T19620] R13: 00007fb317e36ef0 R14: 00007fb317e36eb0 R15: 00002000000003c0 [ 409.114492][T19620] [ 409.125074][T19623] FAULT_INJECTION: forcing a failure. [ 409.125074][T19623] name failslab, interval 1, probability 0, space 0, times 0 [ 409.351243][T19623] CPU: 0 UID: 0 PID: 19623 Comm: syz.9.5566 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 409.351291][T19623] Tainted: [W]=WARN [ 409.351300][T19623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 409.351316][T19623] Call Trace: [ 409.351325][T19623] [ 409.351335][T19623] __dump_stack+0x1d/0x30 [ 409.351368][T19623] dump_stack_lvl+0xe8/0x140 [ 409.351418][T19623] dump_stack+0x15/0x1b [ 409.351505][T19623] should_fail_ex+0x265/0x280 [ 409.351535][T19623] should_failslab+0x8c/0xb0 [ 409.351557][T19623] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 409.351659][T19623] ? __d_alloc+0x3d/0x340 [ 409.351691][T19623] __d_alloc+0x3d/0x340 [ 409.351760][T19623] ? mpol_shared_policy_init+0xbd/0x4c0 [ 409.351797][T19623] d_alloc_pseudo+0x1e/0x80 [ 409.351903][T19623] alloc_file_pseudo+0x71/0x160 [ 409.351967][T19623] __shmem_file_setup+0x1de/0x210 [ 409.352003][T19623] shmem_file_setup+0x3b/0x50 [ 409.352113][T19623] __se_sys_memfd_create+0x2c3/0x590 [ 409.352150][T19623] __x64_sys_memfd_create+0x31/0x40 [ 409.352257][T19623] x64_sys_call+0x2ac2/0x3000 [ 409.352279][T19623] do_syscall_64+0xd2/0x200 [ 409.352388][T19623] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 409.352486][T19623] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 409.352652][T19623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.352681][T19623] RIP: 0033:0x7fb9073eeec9 [ 409.352713][T19623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.352737][T19623] RSP: 002b:00007fb905e4ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 409.352759][T19623] RAX: ffffffffffffffda RBX: 00000000000004f2 RCX: 00007fb9073eeec9 [ 409.352772][T19623] RDX: 00007fb905e4eef0 RSI: 0000000000000000 RDI: 00007fb907472960 [ 409.352785][T19623] RBP: 0000200000000600 R08: 00007fb905e4ebb7 R09: 00007fb905e4ee40 [ 409.352797][T19623] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 409.352812][T19623] R13: 00007fb905e4eef0 R14: 00007fb905e4eeb0 R15: 0000200000000300 [ 409.352861][T19623] [ 409.578775][T19626] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5567'. [ 409.595000][T19628] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5569'. [ 409.823297][T19639] lo speed is unknown, defaulting to 1000 [ 409.951697][T19645] loop6: detected capacity change from 0 to 512 [ 409.958312][T19643] syzkaller1: entered promiscuous mode [ 409.958465][T19645] EXT4-fs: Ignoring removed mblk_io_submit option [ 409.963837][T19643] syzkaller1: entered allmulticast mode [ 409.976718][T19645] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 409.991236][T19645] EXT4-fs (loop6): 1 truncate cleaned up [ 410.023077][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 410.023096][ T29] audit: type=1400 audit(2000000208.749:21994): avc: denied { create } for pid=19651 comm="syz.0.5577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 410.070845][ T29] audit: type=1326 audit(2000000208.799:21995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19654 comm="syz.0.5578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c01deec9 code=0x7ffc0000 [ 410.101329][ T29] audit: type=1326 audit(2000000208.799:21996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19654 comm="syz.0.5578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9c01deec9 code=0x7ffc0000 [ 410.124920][ T29] audit: type=1326 audit(2000000208.799:21997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19654 comm="syz.0.5578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c01deec9 code=0x7ffc0000 [ 410.148915][ T29] audit: type=1326 audit(2000000208.799:21998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19654 comm="syz.0.5578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa9c01deec9 code=0x7ffc0000 [ 410.172469][ T29] audit: type=1326 audit(2000000208.799:21999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19654 comm="syz.0.5578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c01deec9 code=0x7ffc0000 [ 410.196103][ T29] audit: type=1326 audit(2000000208.799:22000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19654 comm="syz.0.5578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9c01deec9 code=0x7ffc0000 [ 410.219708][ T29] audit: type=1326 audit(2000000208.799:22001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19654 comm="syz.0.5578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c01deec9 code=0x7ffc0000 [ 410.243330][ T29] audit: type=1326 audit(2000000208.799:22002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19654 comm="syz.0.5578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9c01deec9 code=0x7ffc0000 [ 410.267043][ T29] audit: type=1326 audit(2000000208.819:22003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19654 comm="syz.0.5578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c01deec9 code=0x7ffc0000 [ 410.439293][T19667] lo speed is unknown, defaulting to 1000 [ 410.481077][T19670] loop9: detected capacity change from 0 to 1024 [ 410.495167][T19670] EXT4-fs: Ignoring removed bh option [ 410.522623][T19670] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 410.671226][T19683] lo speed is unknown, defaulting to 1000 [ 410.706815][T19683] loop8: detected capacity change from 0 to 128 [ 410.836939][T19687] syzkaller1: entered promiscuous mode [ 410.842666][T19687] syzkaller1: entered allmulticast mode [ 411.443693][T19709] FAULT_INJECTION: forcing a failure. [ 411.443693][T19709] name failslab, interval 1, probability 0, space 0, times 0 [ 411.456526][T19709] CPU: 1 UID: 0 PID: 19709 Comm: syz.9.5597 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 411.456560][T19709] Tainted: [W]=WARN [ 411.456635][T19709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 411.456660][T19709] Call Trace: [ 411.456669][T19709] [ 411.456678][T19709] __dump_stack+0x1d/0x30 [ 411.456700][T19709] dump_stack_lvl+0xe8/0x140 [ 411.456719][T19709] dump_stack+0x15/0x1b [ 411.456735][T19709] should_fail_ex+0x265/0x280 [ 411.456830][T19709] should_failslab+0x8c/0xb0 [ 411.456850][T19709] __kmalloc_noprof+0xa5/0x3e0 [ 411.456875][T19709] ? ___neigh_create+0x4c9/0x1290 [ 411.456913][T19709] ___neigh_create+0x4c9/0x1290 [ 411.456949][T19709] ? __rcu_read_unlock+0x4f/0x70 [ 411.457084][T19709] ? __rcu_read_unlock+0x4f/0x70 [ 411.457142][T19709] ? neigh_lookup+0x1a0/0x1d0 [ 411.457177][T19709] neigh_add+0x990/0xa70 [ 411.457204][T19709] ? __pfx_neigh_add+0x10/0x10 [ 411.457228][T19709] rtnetlink_rcv_msg+0x657/0x6d0 [ 411.457287][T19709] netlink_rcv_skb+0x120/0x220 [ 411.457319][T19709] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 411.457368][T19709] rtnetlink_rcv+0x1c/0x30 [ 411.457405][T19709] netlink_unicast+0x5c0/0x690 [ 411.457455][T19709] netlink_sendmsg+0x58b/0x6b0 [ 411.457485][T19709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.457567][T19709] __sock_sendmsg+0x145/0x180 [ 411.457640][T19709] __sys_sendto+0x268/0x330 [ 411.457762][T19709] __x64_sys_sendto+0x76/0x90 [ 411.457793][T19709] x64_sys_call+0x2d14/0x3000 [ 411.457898][T19709] do_syscall_64+0xd2/0x200 [ 411.457941][T19709] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 411.457976][T19709] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 411.458084][T19709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.458120][T19709] RIP: 0033:0x7fb9073eeec9 [ 411.458192][T19709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.458218][T19709] RSP: 002b:00007fb905e2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 411.458242][T19709] RAX: ffffffffffffffda RBX: 00007fb907646090 RCX: 00007fb9073eeec9 [ 411.458269][T19709] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000004 [ 411.458285][T19709] RBP: 00007fb905e2e090 R08: 0000000000000000 R09: 0000000000000000 [ 411.458300][T19709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.458333][T19709] R13: 00007fb907646128 R14: 00007fb907646090 R15: 00007ffc2f181ee8 [ 411.458353][T19709] [ 411.779740][ T5002] bio_check_eod: 438 callbacks suppressed [ 411.779758][ T5002] kworker/u8:23: attempt to access beyond end of device [ 411.779758][ T5002] loop8: rw=1, sector=145, nr_sectors = 8 limit=128 [ 411.804535][ T5002] kworker/u8:23: attempt to access beyond end of device [ 411.804535][ T5002] loop8: rw=1, sector=161, nr_sectors = 8 limit=128 [ 411.830076][ T5002] kworker/u8:23: attempt to access beyond end of device [ 411.830076][ T5002] loop8: rw=1, sector=177, nr_sectors = 8 limit=128 [ 411.845016][ T5002] kworker/u8:23: attempt to access beyond end of device [ 411.845016][ T5002] loop8: rw=1, sector=193, nr_sectors = 8 limit=128 [ 411.859717][ T5002] kworker/u8:23: attempt to access beyond end of device [ 411.859717][ T5002] loop8: rw=1, sector=209, nr_sectors = 8 limit=128 [ 411.873206][ T5002] kworker/u8:23: attempt to access beyond end of device [ 411.873206][ T5002] loop8: rw=1, sector=225, nr_sectors = 8 limit=128 [ 411.900235][ T5002] kworker/u8:23: attempt to access beyond end of device [ 411.900235][ T5002] loop8: rw=1, sector=241, nr_sectors = 8 limit=128 [ 411.915243][ T5002] kworker/u8:23: attempt to access beyond end of device [ 411.915243][ T5002] loop8: rw=1, sector=257, nr_sectors = 8 limit=128 [ 411.945496][ T5002] kworker/u8:23: attempt to access beyond end of device [ 411.945496][ T5002] loop8: rw=1, sector=273, nr_sectors = 8 limit=128 [ 411.973382][ T5002] kworker/u8:23: attempt to access beyond end of device [ 411.973382][ T5002] loop8: rw=1, sector=289, nr_sectors = 8 limit=128 [ 411.994685][T19730] loop6: detected capacity change from 0 to 1024 [ 412.009204][T19730] EXT4-fs: Ignoring removed bh option [ 412.018603][T19730] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 412.115139][T19748] lo speed is unknown, defaulting to 1000 [ 412.559567][T19771] __nla_validate_parse: 8 callbacks suppressed [ 412.559585][T19771] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5625'. [ 412.869696][T18614] EXT4-fs unmount: 17 callbacks suppressed [ 412.869713][T18614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.911712][T19791] pim6reg1: entered promiscuous mode [ 412.917059][T19791] pim6reg1: entered allmulticast mode [ 412.961051][T19794] loop8: detected capacity change from 0 to 512 [ 412.976227][T19796] loop6: detected capacity change from 0 to 512 [ 412.997614][T19796] EXT4-fs: Ignoring removed mblk_io_submit option [ 413.016095][T19796] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 413.037235][T19796] EXT4-fs (loop6): 1 truncate cleaned up [ 413.044045][T19796] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.092468][T19804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5639'. [ 413.113768][T19808] loop7: detected capacity change from 0 to 512 [ 413.124629][T19808] EXT4-fs: Ignoring removed mblk_io_submit option [ 413.134357][T19808] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 413.150501][T19808] EXT4-fs (loop7): 1 truncate cleaned up [ 413.173687][T19808] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.201154][T19810] lo speed is unknown, defaulting to 1000 [ 413.428715][T19826] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5637'. [ 413.859492][T18614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.927784][T19831] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5647'. [ 413.955161][T19833] loop6: detected capacity change from 0 to 512 [ 414.001349][T13440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.033155][T19843] netlink: 108 bytes leftover after parsing attributes in process `syz.7.5651'. [ 414.050543][T19841] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5653'. [ 414.054248][T19845] loop9: detected capacity change from 0 to 512 [ 414.149982][T19854] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5658'. [ 414.209546][T19859] lo speed is unknown, defaulting to 1000 [ 414.259804][T19867] loop9: detected capacity change from 0 to 128 [ 414.326846][T19874] syzkaller1: entered promiscuous mode [ 414.332420][T19874] syzkaller1: entered allmulticast mode [ 414.340275][T19867] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5660'. [ 414.445229][T19877] loop6: detected capacity change from 0 to 512 [ 414.489449][T19879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5668'. [ 414.620032][T19885] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5671'. [ 414.652353][T19887] loop6: detected capacity change from 0 to 1024 [ 414.660422][T19887] EXT4-fs: Ignoring removed bh option [ 414.666251][T19887] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 414.679997][T19887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.990273][T19902] syzkaller1: entered promiscuous mode [ 414.995817][T19902] syzkaller1: entered allmulticast mode [ 414.999559][T19904] loop8: detected capacity change from 0 to 512 [ 415.042635][ T29] kauditd_printk_skb: 540 callbacks suppressed [ 415.042654][ T29] audit: type=1400 audit(2000000213.769:22544): avc: denied { relabelfrom } for pid=19905 comm="syz.8.5680" name="" dev="pipefs" ino=79090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 415.082229][ T29] audit: type=1400 audit(2000000213.769:22545): avc: denied { mac_admin } for pid=19905 comm="syz.8.5680" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 415.103654][ T29] audit: type=1400 audit(2000000213.769:22546): avc: denied { relabelto } for pid=19905 comm="syz.8.5680" name="" dev="pipefs" ino=79090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 415.167839][ T29] audit: type=1400 audit(2000000213.889:22547): avc: denied { bind } for pid=19912 comm="syz.8.5684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 415.190159][T19914] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.200125][T19914] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.211950][ T29] audit: type=1400 audit(2000000213.899:22548): avc: denied { write } for pid=19912 comm="syz.8.5684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 415.231774][ T29] audit: type=1400 audit(2000000213.899:22549): avc: denied { setopt } for pid=19912 comm="syz.8.5684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 415.267162][ T5001] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.276139][ T5001] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.285747][ T5001] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.296181][T19914] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.306097][T19914] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.321309][ T5001] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.361658][ T29] audit: type=1400 audit(2000000214.079:22550): avc: denied { sys_module } for pid=19911 comm="syz.0.5683" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 415.389654][T19914] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.399539][T19914] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.452187][T19914] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.462096][T19914] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.488629][T19931] lo speed is unknown, defaulting to 1000 [ 415.507570][T18614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.538533][ T4990] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.546884][ T4990] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.567976][ T29] audit: type=1400 audit(2000000214.299:22551): avc: denied { create } for pid=19932 comm="syz.6.5690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 415.571770][ T4990] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.595853][ T4990] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.613285][T19935] loop7: detected capacity change from 0 to 512 [ 415.619849][ T29] audit: type=1400 audit(2000000214.329:22552): avc: denied { write } for pid=19932 comm="syz.6.5690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 415.632463][ T4990] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.647610][ T4990] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.681933][ T29] audit: type=1326 audit(2000000214.409:22553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19936 comm="syz.6.5692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce365beec9 code=0x7ffc0000 [ 415.747351][ T4990] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.755766][ T4990] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.783997][T19946] loop9: detected capacity change from 0 to 512 [ 415.799254][T19948] loop7: detected capacity change from 0 to 512 [ 415.806323][T19946] EXT4-fs: Ignoring removed mblk_io_submit option [ 415.814622][T19946] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 415.833828][T19948] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.837828][T19946] EXT4-fs (loop9): 1 truncate cleaned up [ 415.859598][T19948] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.862988][T19946] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.909669][T13440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.946004][T19961] loop7: detected capacity change from 0 to 512 [ 415.953229][T19961] EXT4-fs: Ignoring removed mblk_io_submit option [ 415.961730][T19961] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 415.982418][T19961] EXT4-fs (loop7): 1 truncate cleaned up [ 415.989012][T19961] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.071838][T19968] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.123040][T19968] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.179063][T19968] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.228374][T19976] loop6: detected capacity change from 0 to 512 [ 416.248899][T19968] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.337614][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.360914][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.380590][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.389093][ T51] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.448437][T19987] smc: net device bond0 applied user defined pnetid SYZ0 [ 416.475779][T19987] smc: net device bond0 erased user defined pnetid SYZ0 [ 416.634672][T17539] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.762494][T20008] loop8: detected capacity change from 0 to 512 [ 416.857893][T13440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.921880][T20014] lo speed is unknown, defaulting to 1000 [ 416.953886][T20017] loop7: detected capacity change from 0 to 128 [ 416.977914][T20016] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.987788][T20016] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.089048][T20016] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.098934][T20016] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.189598][T20016] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.199538][T20016] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.229625][T20016] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.239461][T20016] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.559039][T20046] loop9: detected capacity change from 0 to 512 [ 417.571744][T20032] lo speed is unknown, defaulting to 1000 [ 417.599576][T20049] __nla_validate_parse: 6 callbacks suppressed [ 417.599592][T20049] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5731'. [ 417.638672][T20032] chnl_net:caif_netlink_parms(): no params data found [ 417.682627][T20032] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.689847][T20032] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.698562][T20032] bridge_slave_0: entered allmulticast mode [ 417.705113][T20032] bridge_slave_0: entered promiscuous mode [ 417.712171][T20032] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.719379][T20032] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.728434][T20032] bridge_slave_1: entered allmulticast mode [ 417.735085][T20032] bridge_slave_1: entered promiscuous mode [ 417.757339][T20032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.772402][T20032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.773917][T20058] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5729'. [ 417.813835][ T4990] bio_check_eod: 214 callbacks suppressed [ 417.813852][ T4990] kworker/u8:11: attempt to access beyond end of device [ 417.813852][ T4990] loop7: rw=1, sector=145, nr_sectors = 8 limit=128 [ 417.833535][ T4990] kworker/u8:11: attempt to access beyond end of device [ 417.833535][ T4990] loop7: rw=1, sector=161, nr_sectors = 8 limit=128 [ 417.847065][ T4990] kworker/u8:11: attempt to access beyond end of device [ 417.847065][ T4990] loop7: rw=1, sector=177, nr_sectors = 8 limit=128 [ 417.861160][ T4990] kworker/u8:11: attempt to access beyond end of device [ 417.861160][ T4990] loop7: rw=1, sector=193, nr_sectors = 8 limit=128 [ 417.874882][ T4990] kworker/u8:11: attempt to access beyond end of device [ 417.874882][ T4990] loop7: rw=1, sector=209, nr_sectors = 8 limit=128 [ 417.888979][ T4990] kworker/u8:11: attempt to access beyond end of device [ 417.888979][ T4990] loop7: rw=1, sector=225, nr_sectors = 8 limit=128 [ 417.902738][ T4990] kworker/u8:11: attempt to access beyond end of device [ 417.902738][ T4990] loop7: rw=1, sector=241, nr_sectors = 8 limit=128 [ 417.905031][T20032] team0: Port device team_slave_0 added [ 417.918045][ T4990] kworker/u8:11: attempt to access beyond end of device [ 417.918045][ T4990] loop7: rw=1, sector=257, nr_sectors = 8 limit=128 [ 417.937214][ T4990] kworker/u8:11: attempt to access beyond end of device [ 417.937214][ T4990] loop7: rw=1, sector=273, nr_sectors = 8 limit=128 [ 417.952281][ T4990] kworker/u8:11: attempt to access beyond end of device [ 417.952281][ T4990] loop7: rw=1, sector=289, nr_sectors = 8 limit=128 [ 417.952846][T20032] team0: Port device team_slave_1 added [ 417.971998][T20060] lo speed is unknown, defaulting to 1000 [ 417.995399][T20032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.002398][T20032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.028412][T20032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.046915][T20032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.053952][T20032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.079927][T20032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.115703][T20032] hsr_slave_0: entered promiscuous mode [ 418.121880][T20032] hsr_slave_1: entered promiscuous mode [ 418.128230][T20032] debugfs: 'hsr0' already exists in 'hsr' [ 418.133997][T20032] Cannot create hsr debugfs directory [ 418.208838][T20070] pim6reg1: entered promiscuous mode [ 418.214248][T20070] pim6reg1: entered allmulticast mode [ 418.232779][T20032] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.316079][T20078] loop9: detected capacity change from 0 to 1024 [ 418.323044][T20078] EXT4-fs: Ignoring removed mblk_io_submit option [ 418.329651][T20078] EXT4-fs: Ignoring removed bh option [ 418.335198][T20078] ext3: Unknown parameter 'subj_type' [ 418.342762][T20032] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.354476][T20078] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 418.429790][T20032] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.468861][T20032] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.548448][T20092] lo speed is unknown, defaulting to 1000 [ 418.765681][T20114] lo speed is unknown, defaulting to 1000 [ 418.784734][T20119] loop6: detected capacity change from 0 to 512 [ 418.799032][T20119] netlink: 'syz.6.5757': attribute type 7 has an invalid length. [ 418.806819][T20119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5757'. [ 418.819775][T20114] loop7: detected capacity change from 0 to 128 [ 418.871670][T20122] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5758'. [ 418.888468][T20123] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5755'. [ 418.962359][T20127] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5752'. [ 419.075502][ T51] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.083837][ T51] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.101239][ T51] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.109571][ T51] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.146207][ T51] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.150386][T20135] loop7: detected capacity change from 0 to 512 [ 419.154546][ T51] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.172414][T20135] EXT4-fs: Ignoring removed mblk_io_submit option [ 419.181588][ T51] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.189856][ T51] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.203176][T20135] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 419.218784][T20141] loop6: detected capacity change from 0 to 512 [ 419.228797][T20135] EXT4-fs (loop7): 1 truncate cleaned up [ 419.235066][T20135] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.262562][T20147] loop8: detected capacity change from 0 to 512 [ 419.277030][T20147] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 419.289797][T13440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.303990][T20147] EXT4-fs (loop8): 1 truncate cleaned up [ 419.313381][T20147] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.342099][T20154] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5769'. [ 419.360785][T14791] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.432402][T20171] loop8: detected capacity change from 0 to 512 [ 419.439339][T20172] loop6: detected capacity change from 0 to 512 [ 419.446091][T20172] EXT4-fs: Ignoring removed mblk_io_submit option [ 419.453380][T20172] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 419.484143][T20172] EXT4-fs (loop6): 1 truncate cleaned up [ 419.491411][T20172] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.538231][T18614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.554436][T20177] loop8: detected capacity change from 0 to 512 [ 419.582767][T20180] loop6: detected capacity change from 0 to 512 [ 419.598048][T20180] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 419.619407][T20177] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.638909][T20180] EXT4-fs (loop6): 1 truncate cleaned up [ 419.642727][T20177] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.655394][T20180] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.700693][T20185] lo speed is unknown, defaulting to 1000 [ 419.700845][T14791] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.722179][T18614] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.741418][T20185] loop7: detected capacity change from 0 to 128 [ 419.820742][T20202] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5783'. [ 419.829903][T20197] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5788'. [ 419.839981][T20201] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5790'. [ 420.041358][T20231] pim6reg1: entered promiscuous mode [ 420.046813][T20231] pim6reg1: entered allmulticast mode [ 420.073901][T20235] loop8: detected capacity change from 0 to 512 [ 420.080791][T20235] EXT4-fs: Ignoring removed mblk_io_submit option [ 420.087793][T20235] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 420.098780][T20235] EXT4-fs (loop8): 1 truncate cleaned up [ 420.104815][T20235] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.170959][ T29] kauditd_printk_skb: 559 callbacks suppressed [ 420.170977][ T29] audit: type=1326 audit(2000000218.899:23113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20239 comm="syz.9.5808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9073eeec9 code=0x7ffc0000 [ 420.205351][ T29] audit: type=1326 audit(2000000218.899:23114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20239 comm="syz.9.5808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9073eeec9 code=0x7ffc0000 [ 420.229313][ T29] audit: type=1326 audit(2000000218.899:23115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20239 comm="syz.9.5808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9073eeec9 code=0x7ffc0000 [ 420.252985][ T29] audit: type=1326 audit(2000000218.899:23116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20239 comm="syz.9.5808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fb9073eeec9 code=0x7ffc0000 [ 420.276745][ T29] audit: type=1326 audit(2000000218.899:23117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20239 comm="syz.9.5808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9073eeec9 code=0x7ffc0000 [ 420.347572][T20249] loop9: detected capacity change from 0 to 512 [ 420.354285][T20249] EXT4-fs: Ignoring removed mblk_io_submit option [ 420.361344][T20249] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 420.372711][T20249] EXT4-fs (loop9): 1 truncate cleaned up [ 420.380372][T20249] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.417635][T20032] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 420.427232][T20032] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 420.437356][T20032] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 420.446683][T20032] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 420.538765][T20032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.587495][T20032] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.614082][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.621255][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.631194][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.638331][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.668641][ T29] audit: type=1400 audit(2000000219.399:23118): avc: denied { rmdir } for pid=18614 comm="syz-executor" name="file0" dev="tmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 420.804033][ T29] audit: type=1326 audit(2000000219.529:23119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20266 comm="syz.7.5815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3193ceec9 code=0x7ffc0000 [ 420.827862][ T29] audit: type=1326 audit(2000000219.529:23120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20266 comm="syz.7.5815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3193ceec9 code=0x7ffc0000 [ 420.853461][ T4990] bridge_slave_1: left allmulticast mode [ 420.859326][ T4990] bridge_slave_1: left promiscuous mode [ 420.865008][ T4990] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.872541][ T29] audit: type=1326 audit(2000000219.539:23121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20265 comm="syz.6.5814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce365beec9 code=0x7ffc0000 [ 420.896215][ T29] audit: type=1326 audit(2000000219.539:23122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20265 comm="syz.6.5814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce365beec9 code=0x7ffc0000 [ 420.973171][ T4990] bridge_slave_0: left allmulticast mode [ 420.979000][ T4990] bridge_slave_0: left promiscuous mode [ 420.984731][ T4990] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.031677][T14791] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.060118][T20278] loop7: detected capacity change from 0 to 512 [ 421.071455][T20278] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 421.092531][T20278] EXT4-fs (loop7): 1 truncate cleaned up [ 421.106082][T20278] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.145955][T13440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.200059][ T4990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.210220][ T4990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.220920][ T4990] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 421.229497][ T4990] bond0 (unregistering): Released all slaves [ 421.238130][T17539] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.252691][T20032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.274881][T20271] lo speed is unknown, defaulting to 1000 [ 421.307004][ T4990] hsr_slave_0: left promiscuous mode [ 421.320530][ T4990] hsr_slave_1: left promiscuous mode [ 421.321899][T20300] loop9: detected capacity change from 0 to 512 [ 421.330905][ T4990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.339610][ T4990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.347729][ T4990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.355136][ T4990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.366482][ T4990] team_slave_0: left promiscuous mode [ 421.371926][ T4990] team_slave_1: left promiscuous mode [ 421.380096][ T4990] veth1_macvtap: left promiscuous mode [ 421.385603][ T4990] veth0_macvtap: left promiscuous mode [ 421.391199][ T4990] veth1_vlan: left promiscuous mode [ 421.396423][ T4990] @ÿ: left promiscuous mode [ 421.463697][ T4990] team0 (unregistering): Port device team_slave_1 removed [ 421.473305][ T4990] team0 (unregistering): Port device team_slave_0 removed [ 421.520925][ T37] lo speed is unknown, defaulting to 1000 [ 421.526764][ T37] infiniband syz0: ib_query_port failed (-19) [ 421.533389][T20303] pim6reg1: entered promiscuous mode [ 421.538815][T20303] pim6reg1: entered allmulticast mode [ 421.591116][T20310] loop7: detected capacity change from 0 to 512 [ 421.611601][T20032] veth0_vlan: entered promiscuous mode [ 421.624727][T20032] veth1_vlan: entered promiscuous mode [ 421.658632][T20032] veth0_macvtap: entered promiscuous mode [ 421.673626][T20032] veth1_macvtap: entered promiscuous mode [ 421.693280][T20032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.708690][T20032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.725104][ T5001] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.749224][ T5001] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.769342][ T5001] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.780939][ T4990] ------------[ cut here ]------------ [ 421.786445][ T4990] WARNING: CPU: 0 PID: 4990 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x91/0x100 [ 421.796626][ T4990] Modules linked in: [ 421.800629][ T4990] CPU: 0 UID: 0 PID: 4990 Comm: kworker/u8:11 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 421.812325][ T4990] Tainted: [W]=WARN [ 421.816147][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 421.826320][ T4990] Workqueue: netns cleanup_net [ 421.831233][ T4990] RIP: 0010:xfrm6_tunnel_net_exit+0x91/0x100 [ 421.837386][ T4990] Code: f5 c4 a9 fc 4b 83 3c 3e 00 75 19 e8 39 62 8e fc 49 81 ff f8 07 00 00 74 1d e8 2b 62 8e fc 49 83 c7 08 eb d7 e8 20 62 8e fc 90 <0f> 0b 90 49 81 ff f8 07 00 00 75 e3 49 81 c6 00 08 00 00 31 db 49 [ 421.857078][ T4990] RSP: 0018:ffffc900129dbc78 EFLAGS: 00010293 [ 421.863229][ T4990] RAX: ffffffff84c8dd50 RBX: ffff888119196000 RCX: ffff8881031ec200 [ 421.871278][ T4990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888128be43f0 [ 421.879317][ T4990] RBP: ffffffff86c94960 R08: 0001ffff8684802f R09: 0000000000000000 [ 421.887354][ T4990] R10: 0000000000000000 R11: 0000000000180400 R12: ffffffff86c94980 [ 421.895350][ T4990] R13: ffff888119196028 R14: ffff888128be4000 R15: 00000000000003f0 [ 421.903401][ T4990] FS: 0000000000000000(0000) GS:ffff8882aee37000(0000) knlGS:0000000000000000 [ 421.907832][T20340] netlink: 'syz.9.5840': attribute type 1 has an invalid length. [ 421.912391][ T4990] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 421.912409][ T4990] CR2: 000000110c2a9e1c CR3: 0000000006834000 CR4: 00000000003506f0 [ 421.912427][ T4990] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 421.912440][ T4990] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 421.928904][T20340] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.934853][ T4990] Call Trace: [ 421.960788][ T4990] [ 421.963795][ T4990] ops_undo_list+0x278/0x410 [ 421.968450][ T4990] cleanup_net+0x2f4/0x4f0 [ 421.972978][ T4990] process_scheduled_works+0x4cb/0x9d0 [ 421.978565][ T4990] worker_thread+0x582/0x770 [ 421.983445][ T4990] kthread+0x489/0x510 [ 421.987583][ T4990] ? __pfx_worker_thread+0x10/0x10 [ 421.992882][ T4990] ? __pfx_kthread+0x10/0x10 [ 421.997580][ T4990] ret_from_fork+0x11f/0x1b0 [ 422.002234][ T4990] ? __pfx_kthread+0x10/0x10 [ 422.006955][ T4990] ret_from_fork_asm+0x1a/0x30 [ 422.011885][ T4990] [ 422.014974][ T4990] ---[ end trace 0000000000000000 ]--- [ 422.021311][ T4990] ------------[ cut here ]------------ [ 422.026777][ T4990] WARNING: CPU: 0 PID: 4990 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0xd5/0x100 [ 422.036990][ T4990] Modules linked in: [ 422.040948][ T4990] CPU: 0 UID: 0 PID: 4990 Comm: kworker/u8:11 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 422.052656][ T4990] Tainted: [W]=WARN [ 422.056476][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 422.066622][ T4990] Workqueue: netns cleanup_net [ 422.071438][ T4990] RIP: 0010:xfrm6_tunnel_net_exit+0xd5/0x100 [ 422.077491][ T4990] Code: b1 c4 a9 fc 49 83 3c 1e 00 75 19 e8 f5 61 8e fc 48 81 fb f8 07 00 00 74 1d e8 e7 61 8e fc 48 83 c3 08 eb d7 e8 dc 61 8e fc 90 <0f> 0b 90 48 81 fb f8 07 00 00 75 e3 e8 ca 61 8e fc 5b 41 5e 41 5f [ 422.097158][ T4990] RSP: 0018:ffffc900129dbc78 EFLAGS: 00010293 [ 422.103340][ T4990] RAX: ffffffff84c8dd94 RBX: 0000000000000008 RCX: ffff8881031ec200 [ 422.111380][ T4990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888128be4808 [ 422.119435][ T4990] RBP: ffffffff86c94960 R08: 0001ffff8684802f R09: 0000000000000000 [ 422.127452][ T4990] R10: 0000000000000000 R11: 0000000000180400 R12: ffffffff86c94980 [ 422.135494][ T4990] R13: ffff888119196028 R14: ffff888128be4800 R15: 00000000000007f8 [ 422.143565][ T4990] FS: 0000000000000000(0000) GS:ffff8882aee37000(0000) knlGS:0000000000000000 [ 422.152565][ T4990] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.159197][ T4990] CR2: 000000110c2a9e1c CR3: 0000000006834000 CR4: 00000000003506f0 [ 422.167190][ T4990] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 422.175252][ T4990] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 422.183288][ T4990] Call Trace: [ 422.186597][ T4990] [ 422.189582][ T4990] ops_undo_list+0x278/0x410 [ 422.194228][ T4990] cleanup_net+0x2f4/0x4f0 [ 422.198716][ T4990] process_scheduled_works+0x4cb/0x9d0 [ 422.204238][ T4990] worker_thread+0x582/0x770 [ 422.209348][ T4990] kthread+0x489/0x510 [ 422.213459][ T4990] ? __pfx_worker_thread+0x10/0x10 [ 422.218825][ T4990] ? __pfx_kthread+0x10/0x10 [ 422.223461][ T4990] ret_from_fork+0x11f/0x1b0 [ 422.228150][ T4990] ? __pfx_kthread+0x10/0x10 [ 422.232803][ T4990] ret_from_fork_asm+0x1a/0x30 [ 422.237707][ T4990] [ 422.240810][ T4990] ---[ end trace 0000000000000000 ]--- [ 422.258967][T20340] bond1 (unregistering): Released all slaves [ 422.289782][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.348860][ T4990] ------------[ cut here ]------------ [ 422.354395][ T4990] WARNING: CPU: 1 PID: 4990 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x179/0x1f0 [ 422.364079][ T4990] Modules linked in: [ 422.368086][ T4990] CPU: 1 UID: 0 PID: 4990 Comm: kworker/u8:11 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 422.379741][ T4990] Tainted: [W]=WARN [ 422.383583][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 422.393773][ T4990] Workqueue: netns cleanup_net [ 422.398620][ T4990] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 422.404207][ T4990] Code: 48 8d bb 70 0e 00 00 e8 c5 73 bb fc 48 8b bb 70 0e 00 00 e8 e9 01 c8 fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 a8 24 a0 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 9a 24 a0 fc 90 0f 0b 90 4c 89 f7 e8 8e [ 422.423988][ T4990] RSP: 0018:ffffc900129dbc60 EFLAGS: 00010293 [ 422.430203][ T4990] RAX: ffffffff84b71ac8 RBX: ffff888119196000 RCX: ffff8881031ec200 [ 422.438447][ T4990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888119196e40 [ 422.446485][ T4990] RBP: ffffffff86c8c7c0 R08: 0001ffff8684802f R09: 0000000000000000 [ 422.454690][ T4990] R10: ffffc900129dbbe8 R11: 0001c900129dbbe8 R12: ffffffff86c8c7e0 [ 422.462832][ T4990] R13: ffff888119196028 R14: ffff888119196e40 R15: ffff888119196000 [ 422.470857][ T4990] FS: 0000000000000000(0000) GS:ffff8882aef37000(0000) knlGS:0000000000000000 [ 422.479847][ T4990] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.486466][ T4990] CR2: 00007fff59f538d8 CR3: 0000000006834000 CR4: 00000000003506f0 [ 422.494483][ T4990] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 422.502737][ T4990] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 422.511164][ T4990] Call Trace: [ 422.514495][ T4990] [ 422.517527][ T4990] xfrm_net_exit+0x2d/0x60 [ 422.522021][ T4990] ops_undo_list+0x278/0x410 [ 422.526633][ T4990] cleanup_net+0x2f4/0x4f0 [ 422.531122][ T4990] process_scheduled_works+0x4cb/0x9d0 [ 422.536704][ T4990] worker_thread+0x582/0x770 [ 422.541383][ T4990] kthread+0x489/0x510 [ 422.545479][ T4990] ? __pfx_worker_thread+0x10/0x10 [ 422.550740][ T4990] ? __pfx_kthread+0x10/0x10 [ 422.555450][ T4990] ret_from_fork+0x11f/0x1b0 [ 422.560127][ T4990] ? __pfx_kthread+0x10/0x10 [ 422.564845][ T4990] ret_from_fork_asm+0x1a/0x30 [ 422.569670][ T4990] [ 422.572703][ T4990] ---[ end trace 0000000000000000 ]--- [ 422.604951][T20359] loop7: detected capacity change from 0 to 1024 [ 422.632591][T20359] EXT4-fs: Ignoring removed bh option [ 422.646214][T20359] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 422.701688][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.719583][T20359] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.720859][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.740609][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.749794][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.779920][T13440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.036786][T20407] pim6reg1: entered promiscuous mode [ 423.042363][T20407] pim6reg1: entered allmulticast mode [ 423.091564][T20418] netlink: 'syz.0.5872': attribute type 1 has an invalid length. [ 423.100195][T20418] __nla_validate_parse: 9 callbacks suppressed [ 423.100212][T20418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5872'. [ 423.152207][T20425] loop9: detected capacity change from 0 to 512 [ 423.159241][T20425] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 423.172384][T20425] EXT4-fs (loop9): 1 truncate cleaned up [ 423.179019][T20425] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.205843][T17539] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.229124][T20433] loop8: detected capacity change from 0 to 1024 [ 423.235683][T20435] loop9: detected capacity change from 0 to 512 [ 423.236151][T20433] EXT4-fs: Ignoring removed bh option [ 423.248667][T20435] EXT4-fs: Ignoring removed mblk_io_submit option [ 423.255396][T20433] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 423.265548][T20435] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 423.276880][T20435] EXT4-fs (loop9): 1 truncate cleaned up [ 423.283368][T20435] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.298097][T20433] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.329759][T14791] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.436055][T20445] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5881'. [ 423.534902][T20446] ================================================================== [ 423.543059][T20446] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 423.551201][T20446] [ 423.553555][T20446] write to 0xffff8881186c3168 of 8 bytes by task 20443 on cpu 1: [ 423.561292][T20446] filemap_splice_read+0x4f4/0x740 [ 423.566539][T20446] ext4_file_splice_read+0x8f/0xb0 [ 423.571682][T20446] splice_direct_to_actor+0x26f/0x680 [ 423.577133][T20446] do_splice_direct+0xda/0x150 [ 423.581931][T20446] do_sendfile+0x380/0x650 [ 423.586382][T20446] __x64_sys_sendfile64+0x105/0x150 [ 423.591615][T20446] x64_sys_call+0x2bb4/0x3000 [ 423.596413][T20446] do_syscall_64+0xd2/0x200 [ 423.600959][T20446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.606899][T20446] [ 423.609246][T20446] write to 0xffff8881186c3168 of 8 bytes by task 20446 on cpu 0: [ 423.616980][T20446] filemap_splice_read+0x4f4/0x740 [ 423.622143][T20446] ext4_file_splice_read+0x8f/0xb0 [ 423.627307][T20446] splice_direct_to_actor+0x26f/0x680 [ 423.632709][T20446] do_splice_direct+0xda/0x150 [ 423.637533][T20446] do_sendfile+0x380/0x650 [ 423.641988][T20446] __x64_sys_sendfile64+0x105/0x150 [ 423.647235][T20446] x64_sys_call+0x2bb4/0x3000 [ 423.651947][T20446] do_syscall_64+0xd2/0x200 [ 423.656600][T20446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.662618][T20446] [ 423.664959][T20446] value changed: 0x0000000000000297 -> 0x000000000000029a [ 423.672092][T20446] [ 423.674430][T20446] Reported by Kernel Concurrency Sanitizer on: [ 423.680596][T20446] CPU: 0 UID: 0 PID: 20446 Comm: syz.9.5877 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 423.691999][T20446] Tainted: [W]=WARN [ 423.695820][T20446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 423.705998][T20446] ================================================================== [ 424.140614][T17539] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.