last executing test programs: 2m31.340761037s ago: executing program 32 (id=1819): r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x7}]}, 0x28}}, 0x2800c0d8) write$binfmt_register(r1, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'ext4\x00', 0x3a, 'ext4\x00', 0x3a, './file0', 0x3a, [0x46, 0x50, 0x16]}, 0x34) tgkill(r0, r0, 0x21) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x8, 0x15, "22585ebc65a9032a7fd13ca3a319ce70e40863"}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000100)={0x5, 0x5, 0x2, 0x4, 0x14, "2bf749e0f3d17b034f59e1e89077242cae323f"}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0xfe, 0x4f2, &(0x7f0000000600)="$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") sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0xfc, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xc2, 0x6, "842cd642d91ed3e00f2d855748228a164ebaee97d8802cd0f1be699c5de1714431414c983e90ec32b02f6ebd9756413c38e201a5ca8643f6eb8f2f4338684fd36a59fede161263e11a163ada9f096fe934021715ea7a3928ad1ee1b1e0a4ce97b1360ba87f24b16f7d94deb59bff654fe49f8dd839a10d6184e88d72a76d000b79439cc01397546958748f7e8473f4036ed669f3e0970b340f843e5d69ebfde5f391139d37cd652de3d91b48184757d812b440d4716315c6f4d164559c7d"}]}, @NFT_MSG_DELRULE={0x15c, 0x8, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_USERDATA={0xbd, 0x7, 0x1, 0x0, "9b6a84899caebf6f88f17ab23eb8d47d016b6eb5b8bd5da528f7d242aa7e34d2dc1aa202e1c156ac30b7c7c6db9697d8aa9b4de912d9c788da932db3a8b99fac797c95a484058a5f852b115de770adb70adf2716d60691902f8e8dbdb483ae996a8429dd60c16948ae64ddc298604b255319ef9d9cdf348d027f76c9645d0e42da803d1dabe6c3c2b3568d82daaaf4e0e5e9d9ff2bd8cc76878ba50524471e4f54d4b62afce55bf234b84c6992b16780c9c9cb5c31ef23506b"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0x7c, 0x7, 0x1, 0x0, "ade46ecebf3fe4af0f0f92505354e0f268c0475f65cf6aa43545b109109d67c37fc15f00774aaed046cec76876422a594687b12863871707ebe664bbeb12756fa36bd3fff7513e7b5e5504a0fe18517181f2d66a6606bdd6a910aa805abcb9209d2a09ed4776f146fceed243da2a666f0e3c99a360676ef4"}]}, @NFT_MSG_NEWTABLE={0x84, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x50, 0x6, "6572f499b152599910a99c1324cf5457a2d9580aa36a24724662c9b0ffd6d1937e2750dd654f1878122f55b9a38330ef5107059565ce70d9106e44245b5bd7c5d2a452755d0c4a11a7c9d73d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x402, 0x0, 0x0, {0xa, 0x0, 0xa}}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x334}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x2, 0x7}, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1e2e81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r9, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "e4a18560d99f00", 0x800000}) write$sndseq(r9, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m16.948366206s ago: executing program 33 (id=2085): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, 0x0, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(r2, 0x5421, 0x0) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfeab, 0xf) sendto(r0, &(0x7f0000000100)="21e7a99ff004dabc806ab54c3cb288707b99d22df7e152edb3990448dbc750f969d4a4168b19e0f68d7d8b181fa2138a292d634a885d492f1934f486bf5723a2d43136483a1a735a95b081a52de43f06b489a627dec84d419c3b94b957f24b319c452972ea0efc56133ed043f1fbe831", 0x70, 0x0, &(0x7f0000000740)=@pppoe={0x18, 0x0, {0x2, @local, 'virt_wifi0\x00'}}, 0x80) 2m6.526368226s ago: executing program 34 (id=2271): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x40) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1m46.936418003s ago: executing program 35 (id=2683): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$eJzs3T1sG2UfAPD/neO3X3nf9JXeVwLUoQKkIlV1kn5AYWpXRKVKHZBYIHLcqIoTV7EDTZQh3StEBwSoS9lgYAQxMCAWRlYWEDNSRSOQmg5g5K80TZzglDouud9POvuee87+P8+d/499pzs5gMw62nhII56OiItJxMi6uqFoVx5trbe6slS8v7JUTKJev/RLEklE3FtZKnbWT9rPhyJiOSKeiohv8hHH081xqwuL0xPlcmmuXR6tzVwdrS4snrgyMzFVmirNnnrp5TNnT58ZPzm+/mX36+tL+Z319caPN9+98d2rt29++tmR5eL7E0mci+F23fp+PE6tbZKPcxuWn+5HsAFKBt0AHkmuneeNVPp/jESunfXd1Ed2tWlAn9X3RdSBjErkP2RU53dA4/i3M+3m748751sHII24q+2pVTPUOjcR+5vHJgd/TR46Mmkcbx7ezYayJy1fj4ixoaHNn/+k/fl7dGOPo4H01dfnWztq8/5P18af6DL+DHfOnf5NnfFvddP49yB+bovx72KPMX5/46ePtox/PeKZrvGTtfhJl/hpRLzVY/xbr395dqu6+scRx6J7/I5k+/PDo5evlEtjrceuMb46duSV7fp/cIv4rXO2+5tfM922f5fT2l198e3nzy5vE/+F57bf/922/4GIeK/H+P+998lrW9XduZ7cbfwK2On+TyIft3uM/+K5oz/0uCoAAAAAAAAAALADafNatiQtrM2naaHQuof3f3EwLVeqteOXK/Ozk61r3g5HPu1caTXSKieN8nj7etxO+eSG8qlcO2DuQLNcKFbKkwPuOwAAAAAAAAAAAAAAAAAAADwpDm24//+3XPP+/41/Vw3sVVv/5Tew18l/yK6H8z8ZWDuA3ef7HzKrLv8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/AAAAAAAAAAAAAAAAAAAAAAAAAADoi4sXLjSm+v2VpWKjPDm0MD9defvEZKk6XZiZLxaKlbmrhalKZapcKhQrM3/1fkmlcnUsZuevjdZK1dpodWHxzZnK/GznP0VL+b73CAAAAAAAAAAAAAAAAAAAAP55hptTkhYiIm3Op2mhEPHviDicRHL5Srk0FhH/iYjvc/l9jfL4oBsNAAAAAAAAAAAAAAAAAAAAe0x1YXF6olwuzWVkZmgnK0fE8uNtRuMdd/yqfHtfPSnb0EwWZgY8MAEAAAAAAAAAAAAAAAAAQAY9uOm311f80d8GAQAAAAAAAAAAAAAAAAAAQCalPycR0ZiOjTw/vLH2X8lqrvkcEe/cuvTBtYlabW68sfzu2vLah+3lJwfRfqBXnTzt5DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQHVhcXqiXC7N9XFm0H0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBR/BgAA///eANcP") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r2, r2, 0x0, 0xe3aa6ea) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000700)='htcp\x00', 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x101180) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x4, @empty, 0x5}, {0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000000}, r8, 0xfffffe4d}}, 0xffffffffffffff51) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000780)={0x3, 0x8a1d, 0xcdcb, 0x4, 0x4, 0x8}) close(r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x10001}, 0x76e0}) 1m45.615555749s ago: executing program 36 (id=2706): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x80) lseek(r2, 0x1100, 0x1) 1m42.541576666s ago: executing program 37 (id=2738): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0xf8, 0x8a, 0x21, @private1, @remote, 0x20, 0x700, 0xc0ae89c, 0x2}}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa00"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000080000000100000000000007000000000100000002000084d6000000040000000200000075000000070000000900000003000000006130"], 0x0, 0x50, 0x0, 0x1, 0x9}, 0x28) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) fcntl$addseals(r3, 0x409, 0xb) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0x200, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x3, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x1, 0x6, 0x8}, 0x4, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc000}, 0x2000a804) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x401}, 0x18) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSLCKTRMIOS(r7, 0x5457, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x1003d, 0x8f}) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x2) 1m42.095185372s ago: executing program 38 (id=2742): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=0x0], 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x32600) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000640)=[{0x1, 0x3, {0x0, 0x0, 0x4}, {0x2, 0x1, 0x2}, 0xfe, 0xff}, {0x2, 0x2, {0x1, 0x1, 0x3}, {0x0, 0xf0}, 0x47ed2fca324c8ec1, 0xfd}, {0x1, 0x3, {0x2, 0x1}, {0x2, 0xf0, 0x2}, 0xfd, 0xfd}], 0x60) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r6 = accept4$phonet_pipe(r3, &(0x7f0000000340), &(0x7f0000000380)=0x10, 0x80800) setsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, &(0x7f00000003c0)=0x7, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xff7ffffc, 0x0, 0x0, 0x400, 0x0, 0xfffffffe, 0x10000000, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1ff, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0xfffe, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x201000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x5, 0x0, 0x0, 0xffffffff, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x9, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x5, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0xfffffffa, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) r9 = syz_open_pts(r8, 0x42) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRES32=r10, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x18) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) r12 = dup3(r9, r8, 0x0) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r14, 0x0, 0x5}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r12, @ANYBLOB='\x00'/10]) 1m27.753523807s ago: executing program 39 (id=2989): r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r0, {0x5}}, './file1\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, r1, 0x5, 0x3, 0x4}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0xb) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x220040, 0x28) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000004"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), 0x0, 0x2}, 0x20) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x90, 0x4, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0x60, 0xc, "24693eda2998ec2109b8fca6911793b491c8718afd0e9a0754df120f8fdccafabdafe566456106dfb6484134eb375c007975d37bf860c388942a06065e7b9367062c00f2d6319f667fcbd1d62fb629e6ece9a0fc9ff91eb7e488fafc"}]}, 0x90}, 0x1, 0x0, 0x0, 0x40080}, 0x1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd65}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece"], 0x0}, 0x94) sendmsg$unix(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10cb6c133a2facc2}, 0x0) recvmsg$unix(r5, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r7, &(0x7f00000004c0)=ANY=[], 0xfdef) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0x1, 0x0}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e40)={r1, 0x20, &(0x7f0000000e00)={0x0, 0x0, 0x0, &(0x7f0000000d40)=""/162, 0xa2}}, 0x10) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000440)) timer_create(0x7, &(0x7f0000000a40)={0x0, 0x3f}, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m20.051819069s ago: executing program 40 (id=3119): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = gettid() r4 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r4, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) 1m12.97235569s ago: executing program 41 (id=3242): r0 = syz_io_uring_setup(0x6d96, &(0x7f0000000340)={0x0, 0x1060, 0x80, 0x0, 0x264}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)=']', 0x1}], 0x1, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000800)={'netdevsim0\x00', @link_local={0x1, 0x35}}) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 1m7.203869405s ago: executing program 42 (id=3298): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfcfa, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x0, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4}}}, 0x24}}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m0.128098547s ago: executing program 43 (id=3391): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x4, 0x84082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x3a, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100026662004025050102030109025c00020108007f0904000001020d000005240600011ca900ff0f0d240f010d000000010100040e44241ae4291209058103000402f4060d00000904010102020d000009058202ff0302900c090503020002dc0903000000000000"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0xb8}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000000000000000000ac1414bb000000000000000000000000000000e1000000000a0060603b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000e16400000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x2000, 0x10000, 0x7, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r4, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}, {{&(0x7f0000000080)=@file={0x1, '.\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}}], 0x2, 0x1000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000eaffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbcb25fc00000000000000000000000000004000", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000000000000000007ac65f8900000000000000000000000000000000000000146b7b8f0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500"/112], 0xb8}}, 0x4000) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 57.11724594s ago: executing program 44 (id=3431): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0x1ae58d6507e1eaca, &(0x7f0000000440)=ANY=[], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9a, &(0x7f0000000540)=[{}], 0x5, 0x10, &(0x7f0000000680), &(0x7f00000003c0), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000003002f00000000005d9bcef874950000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000440)={0x4}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r9, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@deltclass={0x34, 0x29, 0x20, 0x70bd2d, 0x25dfdbef, {0x0, 0x0, 0x0, r2, {0x10, 0xffff}, {0xfff2, 0xa}, {0x8, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_RATE={0x6, 0x5, {0x8, 0x2}}]}, 0x34}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11) prlimit64(0x0, 0x1, &(0x7f0000000340)={0xfffffffffffff000, 0x6}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=@delchain={0x40, 0x2c, 0xf31, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff2, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x6, 0x1, {0x0, 0xfff3}}]}}]}, 0x40}}, 0x4010) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) r13 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r13, 0xee01, 0xee00) keyctl$chown(0x4, r13, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r6}, &(0x7f0000000480), &(0x7f00000005c0)='%-010d \x00'}, 0x20) 55.922313226s ago: executing program 45 (id=3437): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c0003800c000180080001"], 0x8c}}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r3) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f00000011c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'nicvf0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x20040054) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x80, 0x0, 0xd, 0x2, {{0x1b, 0x4, 0x3, 0x1d, 0x6c, 0x64, 0x0, 0xbd, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x3c, 0x7c, 0x3, 0x2, [{@remote, 0x3}, {@loopback, 0xa}, {@loopback, 0xde}, {@remote, 0x12}, {@empty, 0x4}, {@rand_addr=0x64010100, 0x9b}, {@broadcast, 0x7}]}, @timestamp={0x44, 0x18, 0x11, 0x0, 0xd, [0x7, 0x9, 0xa2b4, 0x0, 0x7ff]}, @end, @noop, @end]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000c00)={0x530, r5, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x38, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1a, 0x4, "92e870c493cab26838b4b45b0a05fcdc5cdaed1d87bf"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xda4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xbc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '&}^$+\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4a}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'i_version'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6c2fa7e2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9696}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2b8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x49, 0x4, "3edd751600fa9e88b09217a758d54c5dd0a49c4b84cd1344515b0646ed412da7b3d230ca78ffd85bd4d806d051c39e40dcecd9841bb3f697362025d4c9760d71e3cd15e83a"}, @ETHTOOL_A_BITSET_VALUE={0x63, 0x4, "22c5835e4071523ede155ed44a70afb204c1a138f9e1ce9b779ee2963b6b499b1c31188f04b1bcd1bd3fca46414457f7fb78b5b97c6cba41e30945cf95c1f8b0f06ba6a8e39587388cc621d4066a027167f13b0b370d3b1e19ad79b2653203"}, @ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'data_err=ignore'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'nodioread_nolock'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ',{)o.%-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ext4\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nodiscard'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x38}]}]}, @ETHTOOL_A_BITSET_VALUE={0xf7, 0x4, "7603dd6e056eca2ae89eee9faaba4314e696f4957b27aa79094142f40006b14bbbf00156c21329feff592553a6e603445560092d695852461cf5ad4320d53979481dc9d4f357c5bab134b414295d66429493d808b6c74b7f238c2898ad2df39a5e394e3acca52088267f05d19169b82fa35f2922285e42ad1382dddb7efd2a3e7f10bae825ae4bb7ba7b8ca9130c711ea6194e380355e4ee25260122b30f09f8cc76f452e7d6990dcdda691468da1ca0ae70bcc51b0587cd548bf5284adfc94c631074f2737b8567f838387af0ada530058da00962a131134ae49c1ea51effac318945a22c557308bd378f27538ddc0f54d9b3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x530}, 0x1, 0x0, 0x0, 0x10}, 0x24048894) openat$autofs(0xffffffffffffff9c, 0x0, 0x7c7500, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000001200)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") 49.522449513s ago: executing program 46 (id=3507): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200), 0x10) close_range(r1, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) listen(r6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, 0xffffffffffffffff}, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="0800000005a605000900"/24], &(0x7f0000000440)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x4, 0x40, 0x2}, 0x10, 0x21136, r3, 0x0, &(0x7f0000000680)=[r5, r7, r8, r9, r10], 0x0, 0x10, 0x2}, 0x94) r11 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r11, &(0x7f0000000080), 0x10) sendmmsg(r11, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r12 = accept4$unix(r6, 0x0, 0x0, 0x0) recvfrom$unix(r12, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x14, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x91cce9779862c9}}}, &(0x7f0000000940)='GPL\x00', 0x7, 0x72, &(0x7f00000009c0)=""/114, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x3, 0x8, 0x0, 0x10}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[r7, r7, 0xffffffffffffffff, r9], &(0x7f0000000b00)=[{0x1, 0x1, 0x10}], 0x10, 0xfffff000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000780)='xen_mc_extend_args\x00', r13, 0x0, 0xf949}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x18) syz_open_dev$usbmon(&(0x7f00000000c0), 0xcfae, 0x84102) r14 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000dc0)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000ec0)=0xe8) mount$9p_unix(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0), 0x0, &(0x7f0000000f00)={'trans=unix,', {[{@cache_readahead}, {@msize={'msize', 0x3d, 0x1}}, {@dfltuid={'dfltuid', 0x3d, r14}}, {@dfltgid={'dfltgid', 0x3d, r15}}], [{@smackfshat={'smackfshat', 0x3d, 'mm_page_free\x00'}}, {@smackfstransmute}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/usbmon#\x00'}}, {@fsname={'fsname', 0x3d, ':'}}, {@euid_eq={'euid', 0x3d, r16}}, {@smackfsroot={'smackfsroot', 0x3d, 'kmem_cache_free\x00'}}, {@flag='nolazytime'}]}}) 47.511294365s ago: executing program 47 (id=3531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x40800) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x2, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x21d, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x400c8b4) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x10) 44.106508409s ago: executing program 48 (id=3569): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 36.253945083s ago: executing program 49 (id=3651): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = socket$inet6(0xa, 0x802, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff020400a4ffffffffffffffff1f2be82db1af0000000000", 0x18) 30.148244386s ago: executing program 7 (id=3719): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000800}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0x9, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x4000004) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000800)='objagg_destroy\x00'}, 0x18) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) personality(0x400000d) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000007c0)={r2}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x9, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x6d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0x100000000}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc211, 0x1) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) syz_genetlink_get_family_id$fou(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r6, r6, 0x0, 0x800000009) execveat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)={[&(0x7f0000000200)='kmem_cache_free\x00', &(0x7f0000000280)='rss_stat\x00', &(0x7f00000002c0)=',-\x00', &(0x7f0000000300)='#\x00', &(0x7f0000000340)='\'*.\x00', &(0x7f0000000380)='GPL\x00', &(0x7f0000000500)='rss_stat\x00']}, &(0x7f0000000640)={[&(0x7f0000000600)='GPL\x00']}, 0x1000) 29.85811464s ago: executing program 7 (id=3720): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x13400, 0xc8, 0x1e00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@nombcache}, {@debug}, {@noload}, {@nombcache}, {@noload}, {@nouid32}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00'}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 29.809871394s ago: executing program 7 (id=3721): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xffffff88}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r3, &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000340)=""/229, 0xe5}, {&(0x7f0000000440)=""/252, 0xfc}, {&(0x7f0000000040)=""/54, 0x36}, {&(0x7f0000000280)=""/69, 0x45}], 0x5, &(0x7f0000000640)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x40000003) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 29.546156244s ago: executing program 7 (id=3723): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = timerfd_create(0x8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x1e, 0x4, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000000)={@link_local, @random="000000113aed", @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x40, 0x3a, 0xff, @private1, @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x60, '\x00', {0x7, 0x6, "cadaf7", 0x0, 0x2f, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@srh={0xb3, 0x0, 0x4, 0x0, 0x4, 0x10, 0x8}], "95f2ea5eb6118fc0"}}}}}}}, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000200)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) timerfd_settime(r1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r6, 0x2007ffa) r7 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r8 = open(&(0x7f00000001c0)='./file1\x00', 0x185102, 0x0) sendfile(r7, r8, 0x0, 0x1000000201005) 29.542641355s ago: executing program 50 (id=3723): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = timerfd_create(0x8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x1e, 0x4, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000000)={@link_local, @random="000000113aed", @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x40, 0x3a, 0xff, @private1, @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x60, '\x00', {0x7, 0x6, "cadaf7", 0x0, 0x2f, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@srh={0xb3, 0x0, 0x4, 0x0, 0x4, 0x10, 0x8}], "95f2ea5eb6118fc0"}}}}}}}, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000200)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) timerfd_settime(r1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r6, 0x2007ffa) r7 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r8 = open(&(0x7f00000001c0)='./file1\x00', 0x185102, 0x0) sendfile(r7, r8, 0x0, 0x1000000201005) 26.158258368s ago: executing program 0 (id=3772): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000000180)={0xa, 0x2, 0x3, @empty}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) (async) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r4}, 0x9) (async) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r6 = fcntl$dupfd(r5, 0x0, r5) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000), &(0x7f0000000ec0)={0x0, 0xfb, 0x1015, 0x7, 0x6, "2f73c0f0356d3950aa1b727373908e95", "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"}, 0x1015, 0x6) (async) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @buffer={0x2, 0x50, &(0x7f00000000c0)=""/80}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 25.826234435s ago: executing program 0 (id=3777): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES64=r1, @ANYRESHEX=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 25.782323829s ago: executing program 51 (id=3777): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES64=r1, @ANYRESHEX=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 24.15140296s ago: executing program 52 (id=3789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$UHID_CREATE(r1, &(0x7f00000004c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000002c0)=""/98, 0x62, 0x5, 0x7, 0x4, 0x2, 0x2}}, 0x120) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x60, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000000500010006"], 0x6c}}, 0x40000) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000007c0)={&(0x7f0000002000)={[{&(0x7f0000000600)="d94f078c0cfa22642cab55aedd841ccca8176caaef4d1ed16b65ccd9338b128b67fb1e5d8a83c19748363f9050f9829e4ee5835d3dda47ad091ffdf94ff8d9ff9254ec6d2e03b1014ec820a40f809a92c92086b8f728a0b89d8ac04f", 0x5c}, {&(0x7f0000000680)="609bbf32d385808a9b2ca1a2eb6904b471917b8c57cdbdb895dd84e6d98071c1b51aa8fa14021c1f014e8299f7c017a7a029a918117331e3f34ce8bbac18ab187f5b9520cde78a2df63c49d8c7567c23f4c86759927cfc5f586ca6a107c24d608ec90f902a11fe8a58c00403fab90f026edfc85c52aad093ac1e10c3e78100f28b0e3842485b8df64f418fc7fc134fa3960cca8a6f09344a387a18c5840d5ede123055595122ebf264da8d89ebf3c66c5b", 0xb1}, {&(0x7f0000000740)="dfb95742cc313e203fd88b13e5517851496a3c8ca8b7fab1ca389ed5e8b77a42e8f917a68535b2c7f6d1dce4b202ab5f01a223b9fd48f24873aefb18158743afddd4e5c488c7fa3828c729546ea2121bd8630e6a792f8d4ad5c40dd7ac86cc4f", 0x60, 0x3}, {&(0x7f00000008c0)="676eb06fdbc60b7f4f7a61dd6bb20b2e38434d9dcbc1a24709aa3c13e3653fc83f078084fbfdb7f760063388428c1309ee448fdb2a123e71164cb2b22710a7aaa2729794201fae19394236f7915e4fd36a9ae1540dbe24b9cff9a7b5b832ec4ef04e0d8b4283a12622fe770a62c3646d6c39e18d4030ec945c3c04e8784d4c59e127bcc42fbe510992d31314a0655e0d117318828800dd754686eb9d79e6cc7d2c404409566e011198d5a2c21117fd7b5d93bf7872be4f5cd59cedf98813d9707ef2fd2cd1518dbded7de7669416fbb50962b692073951a9b0c5f86a57741e04aaf59aa40f58f541", 0xe8, 0x3}, {&(0x7f0000000400)="88fa", 0x2, 0x1}]}, 0x5}, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000f1ff060000000000000028fa", @ANYRES32=r0], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="a548d2ee3a1167ce477560988a79e0bc7ccdfda876cbbe432eb36774685b07741806f82e8bfbf7509f8b7252f08a9b30d7a7b5e4d17699d15fd143607fd4415974fd30bad23b7ed3a082904cf79a301dd719f843117f31cd50d1e0c8554180296bd0c61457f361dc2330906f0c9cccd8878bfb978449f5ca66d538764dc0ed631a1a5682118a61b1fa546058"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000003c0)={0x7, &(0x7f0000000380)=[{0x5, 0x90, 0x4, 0xa}, {0x3, 0x2, 0x7, 0x3}, {0x6, 0x4, 0x80, 0xf}, {0xffff, 0x6, 0x3, 0x7ff}, {0x9, 0x1, 0x8, 0xa}, {0x1000, 0x8, 0x80, 0x7}, {0x8, 0x4d, 0xf, 0xff}]}) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r9, 0x2284, &(0x7f0000000080)) 21.219001157s ago: executing program 6 (id=3816): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x850, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0xf}, {}, {0x7}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xd}}, @filter_kind_options=@f_cgroup={{0xb}, {0x818, 0x2, [@TCA_CGROUP_POLICE={0x814, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x10000, 0x6, 0x7, 0xb, 0xfffffffe, 0x0, 0x80, 0x10000, 0x4, 0x2, 0xd2, 0xffffffff, 0x6, 0x0, 0x0, 0x4, 0x7, 0x38fd, 0x10001, 0x7fff, 0x1, 0x9, 0xbbc6, 0x64b0, 0xfffffffa, 0x1c, 0x1e, 0x3, 0x9, 0x10000, 0x988, 0x4, 0x6, 0x10000, 0x756e, 0x8000, 0x10000, 0x3, 0x3ada, 0x401, 0x0, 0x1bc, 0x4, 0x9, 0x80000001, 0x3, 0x100, 0x2f2, 0x475f, 0xf970, 0xf7b, 0xf, 0x2707, 0x8, 0x6, 0x1000, 0x4, 0x10001, 0x5, 0x0, 0x5, 0x8, 0x101, 0x8001, 0x1, 0xffffff81, 0x2, 0xef, 0x80, 0x7, 0x8, 0x9, 0x9, 0x3ff000, 0xde49, 0x0, 0x5, 0x4, 0xa99, 0x2, 0x200, 0x8, 0x2, 0x36d000, 0x5, 0x2, 0x0, 0x101, 0x58, 0x0, 0xde5, 0xfff, 0x0, 0x1aa8, 0x9, 0x2, 0xf, 0x400, 0x200, 0x1, 0x4, 0x2, 0x0, 0x401, 0x1ff, 0x5, 0x1, 0x5, 0xfffffffa, 0x5, 0x3, 0x5, 0x3, 0x2, 0x1ac, 0xdd64, 0x8001, 0x5, 0x3, 0xffff, 0xfffffff8, 0x7, 0x8, 0x1000, 0x1, 0x8, 0x5, 0xb08, 0xa, 0xfe7f, 0xfffffff5, 0x6, 0x7, 0xff, 0x2, 0x101, 0x2, 0x1, 0x7ff, 0x1, 0x4, 0x6, 0x4, 0x7, 0x2, 0x4, 0x0, 0x4, 0x5, 0x6, 0x4, 0xab1, 0x74f1, 0x9, 0x4a, 0x2, 0x7d2, 0x8c8a, 0xc, 0x15, 0xf6, 0x5, 0x8, 0x7f, 0x0, 0x0, 0x9c, 0x1, 0x1, 0xfffffbff, 0x5, 0x80000001, 0x10, 0x8000, 0x0, 0x0, 0xd, 0x3, 0x4, 0x6, 0x2, 0x3, 0x7, 0xfffff843, 0x6, 0x6, 0x9, 0x9, 0xffffff93, 0xd, 0xfff, 0x4, 0x80000001, 0xf93, 0x6, 0xd, 0xd, 0x7, 0x9, 0x4, 0x7fffffff, 0x5, 0xe92e, 0x2, 0x8, 0x0, 0x2, 0x2, 0xd, 0x2, 0x80, 0x4, 0x90, 0xfffffbff, 0xb0bb, 0x4, 0xc0, 0x19fa, 0x2b, 0xfffffeff, 0x6, 0x7, 0x2, 0x8, 0x0, 0x9, 0x4, 0x4, 0x4, 0xfffff000, 0x7, 0x3dbc4d99, 0x4e, 0xcef, 0x80000000, 0x400, 0x7, 0x6103, 0xf, 0x5, 0x5, 0x40, 0x5, 0x6, 0x7, 0x6, 0xe9c8, 0x1a0, 0x3fe, 0x10001, 0x8000, 0x5, 0x1000, 0x4, 0xb13]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x9, 0x1, 0x7, 0x10, 0x8000, 0x0, 0x9, 0x2000000, 0x800004, 0x5, 0x7, 0x6, 0x8, 0xb48, 0x5, 0x9, 0x101, 0xa, 0x3, 0x5, 0xfff, 0x7, 0x10000000, 0xffffffff, 0x1d3e, 0x4, 0x22, 0xfffffffd, 0x80000000, 0x8, 0xffffffff, 0x200, 0x7fff, 0x20009, 0x5, 0x1, 0xfff, 0x402, 0x0, 0x0, 0x3d0, 0x3, 0x78b5, 0x8, 0x5, 0x9d, 0x5, 0x40, 0xf9e, 0x8, 0x1, 0xb, 0x6, 0x3, 0x8, 0x8, 0x800, 0x0, 0x3, 0xaa, 0x9, 0x4, 0x9, 0xfffffff9, 0x8, 0x7, 0x6, 0xffe, 0x800, 0x1, 0x6, 0x2, 0x81, 0x81, 0x5, 0x200, 0x401, 0x9464, 0x1, 0x3, 0x2, 0x9, 0x5a, 0x1a, 0x5fd, 0x81, 0x1, 0x7fffffff, 0x2, 0xf8c, 0x4, 0x6, 0x2, 0x0, 0x1, 0x6, 0xab99, 0xe, 0x1, 0x2, 0x3ff, 0x6, 0xb, 0x7f1, 0x7fffffff, 0x3, 0x40, 0x7, 0x1, 0x15, 0x1, 0x7fffffff, 0x1, 0x6, 0x3, 0x91, 0x0, 0x9, 0x4, 0x3, 0xffffff0d, 0xe, 0x7, 0xdc, 0x8, 0x80000001, 0xb, 0x6, 0x8, 0x0, 0x2f, 0x6, 0x10000, 0x0, 0x1407, 0x9, 0x5, 0x8, 0x81, 0x1, 0x9, 0x2, 0x10000, 0x9, 0x8, 0x5, 0x3, 0x0, 0x8000, 0x4, 0x7, 0x3, 0x400, 0x2, 0x6, 0x5, 0x4e38211e, 0x0, 0xa959, 0x67, 0x400, 0x1000, 0xaf, 0xfffffff9, 0x30cfd753, 0xe0, 0x4, 0x1, 0x800, 0x9, 0x4, 0x400, 0x39a, 0x2, 0x1ff, 0x1, 0x7fff, 0xffffffff, 0x40, 0x9742393, 0x0, 0x4ef5, 0x6, 0x80000001, 0xffff0fb7, 0x1, 0x0, 0x1, 0x0, 0xe, 0x3, 0x0, 0x5000, 0x4, 0xb14, 0x6, 0xf864eed, 0xc5, 0x8, 0x7, 0x125, 0x40, 0x2, 0x3ff, 0x9, 0x10000, 0x101, 0xc, 0x0, 0x9, 0x800, 0x7, 0x4, 0x3, 0x0, 0xf34a, 0x9, 0x18, 0x3ff, 0x1, 0xde, 0x0, 0x2, 0x77f, 0x0, 0x5, 0xcd0c, 0x0, 0x3, 0x0, 0xee, 0x4, 0x3ff, 0x4, 0x1, 0x1, 0x100, 0x5553, 0x4, 0xfffffffe, 0x25f76613, 0xffffffff, 0xc7, 0x4, 0x1000, 0xf0, 0x3, 0x1, 0x7f, 0x3, 0x7fff, 0x5, 0x3, 0x101, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}]}]}}]}, 0x850}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98010000060a09040000000000000000020000020900010073797a30000000000900020073797a320000000068000480640001800b0001006e756d67656e000054000280080004400000000508000240000002000800024000000002080004400000000408000240fffff478080004400000000408000340000000000800024000000001080001"], 0x1c0}, 0x1, 0x0, 0x0, 0x8080}, 0x2400c0c4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x850, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0xf}, {}, {0x7}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xd}}, @filter_kind_options=@f_cgroup={{0xb}, {0x818, 0x2, [@TCA_CGROUP_POLICE={0x814, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x10000, 0x6, 0x7, 0xb, 0xfffffffe, 0x0, 0x80, 0x10000, 0x4, 0x2, 0xd2, 0xffffffff, 0x6, 0x0, 0x0, 0x4, 0x7, 0x38fd, 0x10001, 0x7fff, 0x1, 0x9, 0xbbc6, 0x64b0, 0xfffffffa, 0x1c, 0x1e, 0x3, 0x9, 0x10000, 0x988, 0x4, 0x6, 0x10000, 0x756e, 0x8000, 0x10000, 0x3, 0x3ada, 0x401, 0x0, 0x1bc, 0x4, 0x9, 0x80000001, 0x3, 0x100, 0x2f2, 0x475f, 0xf970, 0xf7b, 0xf, 0x2707, 0x8, 0x6, 0x1000, 0x4, 0x10001, 0x5, 0x0, 0x5, 0x8, 0x101, 0x8001, 0x1, 0xffffff81, 0x2, 0xef, 0x80, 0x7, 0x8, 0x9, 0x9, 0x3ff000, 0xde49, 0x0, 0x5, 0x4, 0xa99, 0x2, 0x200, 0x8, 0x2, 0x36d000, 0x5, 0x2, 0x0, 0x101, 0x58, 0x0, 0xde5, 0xfff, 0x0, 0x1aa8, 0x9, 0x2, 0xf, 0x400, 0x200, 0x1, 0x4, 0x2, 0x0, 0x401, 0x1ff, 0x5, 0x1, 0x5, 0xfffffffa, 0x5, 0x3, 0x5, 0x3, 0x2, 0x1ac, 0xdd64, 0x8001, 0x5, 0x3, 0xffff, 0xfffffff8, 0x7, 0x8, 0x1000, 0x1, 0x8, 0x5, 0xb08, 0xa, 0xfe7f, 0xfffffff5, 0x6, 0x7, 0xff, 0x2, 0x101, 0x2, 0x1, 0x7ff, 0x1, 0x4, 0x6, 0x4, 0x7, 0x2, 0x4, 0x0, 0x4, 0x5, 0x6, 0x4, 0xab1, 0x74f1, 0x9, 0x4a, 0x2, 0x7d2, 0x8c8a, 0xc, 0x15, 0xf6, 0x5, 0x8, 0x7f, 0x0, 0x0, 0x9c, 0x1, 0x1, 0xfffffbff, 0x5, 0x80000001, 0x10, 0x8000, 0x0, 0x0, 0xd, 0x3, 0x4, 0x6, 0x2, 0x3, 0x7, 0xfffff843, 0x6, 0x6, 0x9, 0x9, 0xffffff93, 0xd, 0xfff, 0x4, 0x80000001, 0xf93, 0x6, 0xd, 0xd, 0x7, 0x9, 0x4, 0x7fffffff, 0x5, 0xe92e, 0x2, 0x8, 0x0, 0x2, 0x2, 0xd, 0x2, 0x80, 0x4, 0x90, 0xfffffbff, 0xb0bb, 0x4, 0xc0, 0x19fa, 0x2b, 0xfffffeff, 0x6, 0x7, 0x2, 0x8, 0x0, 0x9, 0x4, 0x4, 0x4, 0xfffff000, 0x7, 0x3dbc4d99, 0x4e, 0xcef, 0x80000000, 0x400, 0x7, 0x6103, 0xf, 0x5, 0x5, 0x40, 0x5, 0x6, 0x7, 0x6, 0xe9c8, 0x1a0, 0x3fe, 0x10001, 0x8000, 0x5, 0x1000, 0x4, 0xb13]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x9, 0x1, 0x7, 0x10, 0x8000, 0x0, 0x9, 0x2000000, 0x800004, 0x5, 0x7, 0x6, 0x8, 0xb48, 0x5, 0x9, 0x101, 0xa, 0x3, 0x5, 0xfff, 0x7, 0x10000000, 0xffffffff, 0x1d3e, 0x4, 0x22, 0xfffffffd, 0x80000000, 0x8, 0xffffffff, 0x200, 0x7fff, 0x20009, 0x5, 0x1, 0xfff, 0x402, 0x0, 0x0, 0x3d0, 0x3, 0x78b5, 0x8, 0x5, 0x9d, 0x5, 0x40, 0xf9e, 0x8, 0x1, 0xb, 0x6, 0x3, 0x8, 0x8, 0x800, 0x0, 0x3, 0xaa, 0x9, 0x4, 0x9, 0xfffffff9, 0x8, 0x7, 0x6, 0xffe, 0x800, 0x1, 0x6, 0x2, 0x81, 0x81, 0x5, 0x200, 0x401, 0x9464, 0x1, 0x3, 0x2, 0x9, 0x5a, 0x1a, 0x5fd, 0x81, 0x1, 0x7fffffff, 0x2, 0xf8c, 0x4, 0x6, 0x2, 0x0, 0x1, 0x6, 0xab99, 0xe, 0x1, 0x2, 0x3ff, 0x6, 0xb, 0x7f1, 0x7fffffff, 0x3, 0x40, 0x7, 0x1, 0x15, 0x1, 0x7fffffff, 0x1, 0x6, 0x3, 0x91, 0x0, 0x9, 0x4, 0x3, 0xffffff0d, 0xe, 0x7, 0xdc, 0x8, 0x80000001, 0xb, 0x6, 0x8, 0x0, 0x2f, 0x6, 0x10000, 0x0, 0x1407, 0x9, 0x5, 0x8, 0x81, 0x1, 0x9, 0x2, 0x10000, 0x9, 0x8, 0x5, 0x3, 0x0, 0x8000, 0x4, 0x7, 0x3, 0x400, 0x2, 0x6, 0x5, 0x4e38211e, 0x0, 0xa959, 0x67, 0x400, 0x1000, 0xaf, 0xfffffff9, 0x30cfd753, 0xe0, 0x4, 0x1, 0x800, 0x9, 0x4, 0x400, 0x39a, 0x2, 0x1ff, 0x1, 0x7fff, 0xffffffff, 0x40, 0x9742393, 0x0, 0x4ef5, 0x6, 0x80000001, 0xffff0fb7, 0x1, 0x0, 0x1, 0x0, 0xe, 0x3, 0x0, 0x5000, 0x4, 0xb14, 0x6, 0xf864eed, 0xc5, 0x8, 0x7, 0x125, 0x40, 0x2, 0x3ff, 0x9, 0x10000, 0x101, 0xc, 0x0, 0x9, 0x800, 0x7, 0x4, 0x3, 0x0, 0xf34a, 0x9, 0x18, 0x3ff, 0x1, 0xde, 0x0, 0x2, 0x77f, 0x0, 0x5, 0xcd0c, 0x0, 0x3, 0x0, 0xee, 0x4, 0x3ff, 0x4, 0x1, 0x1, 0x100, 0x5553, 0x4, 0xfffffffe, 0x25f76613, 0xffffffff, 0xc7, 0x4, 0x1000, 0xf0, 0x3, 0x1, 0x7f, 0x3, 0x7fff, 0x5, 0x3, 0x101, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}]}]}}]}, 0x850}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98010000060a09040000000000000000020000020900010073797a30000000000900020073797a320000000068000480640001800b0001006e756d67656e000054000280080004400000000508000240000002000800024000000002080004400000000408000240fffff478080004400000000408000340000000000800024000000001080001"], 0x1c0}, 0x1, 0x0, 0x0, 0x8080}, 0x2400c0c4) (async) 20.892025203s ago: executing program 6 (id=3818): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0xeaffffff) 20.782738402s ago: executing program 6 (id=3819): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc020000000000000000000000000000000000000000000000000000000000000000000300000000020000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c400050000000000000000000000000000000000000000003200000000000000ac14140c000000000000000000000000000000000000ff00000000000000000001000000fc02000000000000000000000000000000000000320000000000000000000000000000000000ffffac1414bb00000098bd"], 0x17c}}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc020000000000000000000000000000000000000000000000000000000000000000000300000000020000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c400050000000000000000000000000000000000000000003200000000000000ac14140c000000000000000000000000000000000000ff00000000000000000001000000fc02000000000000000000000000000000000000320000000000000000000000000000000000ffffac1414bb00000098bd"], 0x17c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000a37e8cf9590385b1568e3bab7be449b4724686f734955732acab105c70074be7f0de9f2bf27551c126386c569e2601d585918a8b12017666807aed6e201c605ff274015426d3766da56a82055fc21f9d2c3f6ba142ec9c363590680e14e1a26c25ac569501011d93ede4aefe2511e6dbc194e43862a19c4fc15f3584a4f8794f2b938802fd86f895dc056ea62e66c51d6b8c5af4a6c061d14f6a2595872f03bef5afcde500455524d295451db7259900265d0a50cb456b3596a787a5574ad38a0c4463a7613f9ff3c2c8ccfec3d191bce4fd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$qrtrtun(0xffffffffffffffff, &(0x7f00000004c0)=""/57, 0x39) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x3, 0xde5, 0x1, 0xbd}, {0x401, 0xb, 0x3, 0xa6d}]}}]}}]}, 0xa4}}, 0x24040084) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000006080)=@newchain={0x444c, 0x64, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xd, 0x5}, {0x3, 0x2}, {0x6, 0x8}}, [@filter_kind_options=@f_route={{0xa}, {0xac, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xc}}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x71}, @TCA_ROUTE4_IIF={0x8, 0x4, r8}, @TCA_ROUTE4_ACT={0x90, 0x6, [@m_mpls={0x8c, 0x20, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0xffff3e5a, 0x8, 0xc7d, 0x9}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x24}, @TCA_MPLS_LABEL={0x8, 0x5, 0x3f624}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_PROTO={0x6, 0x4, 0x809b}]}, {0x1c, 0x6, "eb8897604682d0c08f4eb324ff347df24a06bc07f097cc16"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x68}}, @TCA_RATE={0x6, 0x5, {0x66, 0x8}}, @filter_kind_options=@f_bpf={{0x8}, {0x8c, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8, 0x6, r2}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x40, 0x7, 0x9, 0x2}, {0x0, 0x5, 0x5}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_OPS={{0x6, 0x4, 0x8}, {0x44, 0x5, [{0x0, 0x3, 0x8, 0x6}, {0x8, 0x0, 0x5, 0x2}, {0x8001, 0x5, 0xc, 0x4}, {0x9524, 0x5, 0x8, 0xaf}, {0x0, 0x0, 0x5, 0x3}, {0x3ff, 0x8, 0x0, 0x3}, {0x2, 0x3, 0x6, 0x7ff}, {0xffff, 0x84, 0xbe, 0x7}]}}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x42b4, 0x2, [@TCA_MATCHALL_ACT={0x42a8, 0x2, [@m_vlan={0x1040, 0x16, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf65}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1c3}]}, {0x1004, 0x6, "5eb873a593ba354cd3a7535779a35de6650589cb1746453f524b1c68326382a56a028162ee6d41216d4ee36e6559670d391a7965d43fb5cefa901e5606b74d237cd173be30b6b9944d7211ab4ce53cf36d741c0ce9311b9d39ebd79b2678c3fbae65ecbb6069315bec1fc4e786f02eb493ba53e76e6ca27a8ef26c5e23dfab2c112f04fd5eab103bc9c1057d6bcdacece1ff28828bbe4a7497b6164916e4db2fa79204b9614f2a06586a969b68120220a2d3132c9c68d69184742295dc2fd4d8e72e6875f628f15ad1072d2e6209cbe6924332afd27663fcdb36a48c0c4aa6abb3ac5c5ffec0ec90142b94f350011ece5b6a069531055f8300ab218cf72211960cf4c897538630bd0cb77dd997727657b4109dc73ad30a424891771f65221e3f3ce1e69b5f69c71c4dade769bf70421dfe5761a43c6f8dc7b87978cb5057c102e5c5b9745882393ac853177a95f1cda0a4d250be35f71a9406925f6e9fc4a68986f33b6f194fcad14191df7538921a1b36ba9f63f3161e706d1b5a44250e670fbe7763ae52e6d427a41645a4e19d8ea3ce1f88467705291f0f66a46590be807bb49235baf2ce35da09829b52e0c51443b03882c2d6836e6b987835a101d1cc40cd545b402d0fdfcffe89e06fceb8f4ad69703cc9be6ad3918370cb3f2b7506760131acc2b37f3a7995637782b9610c931a4e67b00f5da8bfa940910e8082982d7753e9568039f2735f14b790d280561bff4d6dfd3ea79b31faa34d71f39fd0aa402edebd5fcc0ba7e089ed405c8f53daad1e3cd7782e9aeb7bd3cc648b55af84247ce83f2a0559941911cbc42a225b1ca88bad43a65f7eee08db6c9d9fbb982b581778e4796b44ee3c59ead812fdaa0b8f10bf52b65e8e1d1c5df912d9bb37841eb71d8ed034388cbf508ac09e8d1ca02a38dd37ee08b4ceb7c26c4b5c2fc10b7541deb9fc309a76912012f04bccb2edf0d19e1feb0e6c6fc6e11ec2caa3c0c2a99df3e22c07de5b8a5c5fbb9230865ffb203bc9accf896dc16ae8044f79e405dc6d6d9b74cfa69c5389ed370cd761e77529b33880fef4d230acad8d679590b4251f07c9003a6401293fdcfa2183a33b018b8086be56ca77e782a993c0a7593e4967c3642530026c3828d1b07abe8562ed73ddb134c2c8e6de8416f98a023a06870a7e3a9864beae170fc61d66a9240aef2a121945898959403b9ec2e63cb96811702201cad71d8aa686b4040f16124d3cf5deb2b884ae8c7fb3794ffa313ce7ed76ab1ebc7d7bdccb03c6b9831cd935dc7f5c59fd5efbf006381bdb175f8f0166e3ad35ba27427c22cf3d013d29cf65dec6ff13b117c5a009f18fb2b5f15638e12b41b76eb6dfad01a6575754e5bff67d4900e6f84a784c77e5a184caf94044d65ecf8daf80f62e83070ec9a2de1db22565b3e4a19deeb503f7ef7df58d531579abe4a607b6d8fe55cbfe8d537bd941eca8e1dd4c6ea5fc795fe1deccedc3708f5ccbad959d26c800c8f2784bb454c3ae863181cef9c186dc0468fc25813586939a3590316f3b5d4a5507d05a97965555eebb8d98412368efa81e479ffed79b5ed881925338fde86df7cb70433d57b9b67e6e61a96508182df4f7a7a3dfc0537b1ab33d7ec32b8e166cf4d5df4d0cea05294d234c5668f6af9767520f32a0fdb2c4bf875e56f21401d1fc46fe737c378c1426539538164b578e6cddbdd655277d56ab797ff50502faf3c9a2af60fce549a17ef716fcd4fb0bfbb830128b69deae9ad7d11a30d6379c02a53f11e69a6a7db496be96634faef1f0536bf864e993f3031eb0153b1380d616e83a4aa87a43e718cacfb473259fdf748ec831133e83dedf8a0de52bca3059d91b740e524dbe91cb25787d1f0be833e8cd41f130ba31301b21a5507496150fca3b75d48668abb047d2b68f25416b09f7e36f65eb4bbb745cb7bbc7fc424da7cba340ca423ad827de5e40e91eafe46a178b8c189d7ba0207ae39391abd14141ffa572662842aec658cbe7ff46aa0a132c667fd81a5493f48364e6880b047f0676b4cdfc333d8f28c5de0411e7b0324f9f94e382b7dc8da8af15f12ab3c2bdd10c937bf3d024911d5b0863fd2d8284b67343c3d3eb47ea5bf5bf3a7491d99fffd2b43c4cebc1455d0af4d52f1620dc6fb8ddbc9ea1e7004d2ae950e5d9e0727d2ef29094c7cac85af317cfc7dbdc1d7165c89e2ba0e15c6f28cf39869321264536cbe2adf00abbcddfc682585d774115fa5de56e4e97241d6058d5f9744d8fef42b16f1f0fe2df96e400c3423f2a990dff483002279ce25694edd96c67239737088436ea3f2c3864553a042a6df9bbac89aa702e8eb3c934f28cf3de0fe7afad5d90d7406d60292651fcb28d5331ae45a9fbcaf39bafd548fce9fc563ba4f45f1bfcc1166e6fa982b011fd27ac73f42825be54ccd3ce9c68a957323c0ed01e2a1b10d720d970920c1610be5632ccf0b2c9b3365bb4249fabd199872728bb98f1aa492311dfd64d14a9190c90dd8888376624c46fede9740a1d91532c222a22ae6bfedc301ad97415747d7f88fc243800ea0bb067e9ef471e056c96c5cdddd6113b0777fe28862afded1fe6365a8f2c21fd67dd6e17cfb856a5b0e1b32e941443ba396fcb08b914d8b31eef3948233e7f42adaad309a2d6e2b49516fe56c000aff53992d97d6a84fa2164a24d9106020bc5d0b54a28c30b18ee631f30f49d5295c7fdb9c27b4d44945a6a0912e9f71a977a9e8107fb9e914548f74d2723694178801ecf515c47601d1bb3782198a7aeec438a62ad622ae4063a6bd8f969f91bc0cc66889607abf57ac6e94150ecf33b36b6a728749c79910cefaaa26a28740def573b1a5e9d63ebf876b898ced232cfc45829213e6673cad17890a118955d8effec3420f7ad7d1139e921a23add557ac2424f80930ca781232a65a8334bbaf6449465ff808b7a0da227696ac34752934a55fedb634612e21fbd2894780ff98effd63ab3c92f5d2cc34b7be0f7d40b03cc2177d811b309063ec20304c819baa06d72d341729dd1fcc9f9845df1da74326678946532bad9daacca5bea356fb74b39d6a87ea655e490eade71bb7ca735b24cf3ad6b085aa06aa5ed2f647e6078e65c49eabe91e9da3475460b3a8c51bd7641c0b121f7ee3f9ef50bf51fe0452fdfb6707a74a2d99a8e39403f9546f225a6a56a3c95174ad1e0e807bac850379ba098c68de895d4c5a0e309a137f69cd6b9b7eb222fb60e73abe8e2720fd472c792eac1193f90ad0ff67be276b74d8c8986b4bd4001f3c549e5bb911b5eb10bfc7f95d3196f5a049fb39734e9bbdbff3b6cbff8cac1b4a52b26de3cae90927fdf433e937810bb3994268b38c9b872009830f5239aa9a1b3a36849559ea80221f6b96fcafda7f2ea281e7abc418c01ec52bb8a78223a2b62e4f0023690492acfb1856d6ef0928eb8e4d6c7ccb19144c59cd949a0b41696750e3b369bbf24ea11bb786d86627974c16f781ec3dd69aca19ff82909f4bdc734c0bde90b5c09914d526d6c7a528a9e62723abf59ad42b1e7483aa48726c59d65e5b37c9d606f89e345ba6ea223ff11648e653b5310cdb14851331b374895e334650be8da56c85a5fde4e3ad6bb748cfd6e90c79b5b94a77b21b3d67423c6a2ba911631e6bb6f2147a74a521a46d7089fbbc3aba5d26b4aa44733363cfb8e0bd496aca342d753e44f0d2bc4fb12295e1790249c97d47c63c54ea49c67b5b6762f04659f1bdae24ecf8f971c2a4391561ec4dd516bf8d985579cb8fbbe4b91b49a6c4c49e06575d7bbe39750f078a3c6a67087176ba053907c63fbda6c4a53d8a09a0394ef6029a13e539baf84547d45f4a2d286b17bb7f8f514879ae45e742d7ec7ad3a21c8a58367420c6bfc4b675b993089b76d684de4057fb8e500e08544773c1f041b44e3b1693381104d06cc1a82f6cf91ee59dc17bf9591ad1b0e2b5ab1cf33536bb78f2d2a2fae7d05f5da7fbe68db51f414e31a18d51f0febf7b262cb9b639cbcbb3bd9d65ad72450e9c6a03d49cb56707c016247ed4db48fb05d21d980a3cb656d22a3e645e0fac4259162d17479b54479cef0ba08c417e62bc938d2c378060fa6a8ef2a583866b5a7456486257f4816d3276ed75543555d2c37579f03806e6cc9a9e482d7318c142ea595534e0481329c40741328a3901ab22c48f2cc4ec3c6fc33d270c0a18e537c058d6cc7263c5da8d329396f48be492df530e95ceb2824597dd9efae8452978c505f559d426a7caec992d523cd858d3776c9408933c047b6931d958aec27d5926e3d294e04ebb6ad89a84d427d22c4639c4129bd2c6a511243eed2370317109483ecc929edf730d46430cc2358b772c3bd0e3f7b52e7adfda5306c85419a62769514d5055bbd49fe6c232210ff5e4a15872b86f0c669b6e005e5a7015bf0d88fc1c2af3fbbf7dc321e6bf5196017435908c6c8dd5d540b0dd42dce09429bd35ab7c6a6638a1362a34d2410de2ead8a7c4900f69c57660486f46f1621a85e9b3434d71263af2540d8144e2cb50d6e87a33a792bfff1465886808f823fec9ea2441144d91668e598425ff920155c09440af33491d267421740f6a2b9d18c7302da8314f5c7ae5720fddfd575a8a9439d2841ebcba1e622cff18584756d73befd31fd1c3ac8a09e619b470f8090655871296b0fd82de2f34cdf4ec7fbe8f1017642a991e4fb43dee6080b38025ad2e87684c101b477640fbfd657cc72d98e5403d91f563fc933bf4ffbe2abaf256a417ae7bb0d51f40a76012cb0d556a4204c65163009215582b4c293f7c57b39af77fe04e97291e39326ae6b60499aa397660c1dd9c62fa42e5169ee27ec03ee192e9285bd83620aff47ce9d7d237ee8027f97501d8749c2f3c7e206e83b5c63d6380ef9550e57b62e1593637cfa930cafd29319060ceea5b536c026773b984756d3ca6c7ce308511d778c41328a52597c12b08a6f795a111b7d153faecef8fd26e99f3931231776351b21cae261aca634be7143bd9539cf2219be0f6698ad18fd8e702a7af0e8888b669a946db8d0211fb8d576b6d8d7fe69409c1f09883644a73b2e6c7293edcf23683863e2fae787ad6975c7e3179ef6e1e0bd88682df03f5e1c8b79a360df72897a76e21877369b4c40d4e825e45c55e0c0238ad4fe18d3c6e5b0025859c64ec0d3c70681cafc7e51c00b81f0b29b7fdac4fb139b2d6cf25b092ac92b1942818bdc4f0f1f947245887ba5289a9289bdc848453bc19f347d474c951e7ba3770f2caaa8e8eb903db853aec7cfbb054e12ad0a48b2cf7114f423f22b9ce0cee94bf9c14494544644dbe22a2d8132234692657f1bd96542688107068ffa8a6615b1771f030aaec5f0a15bc21ed4104487c79c76f335180e16ba15bc61acbce9952b167b9f3e9fe8d899b7a0d3816e5306516e24a9fa8e8ece2c2a64c3c8ab48aa3e40808092c2c259c3b7a916b280685a9c274465173957a391ca4b91b6b2afb88419b1d2430ddd9a63fd5c4e8996dd288011eb15bef299089bf4be693ff8fe113f492ca07252cfe70ad43d275a933c55092ca7dcd23e8425cf66c745cd83a529008e9a9a52df0e06fb465ee34a1f6ae27541dbd831baceb9dd8702636035eb879334c975f611174454caac63c6279df9f9c3ee3e9fad66caed2f52b2b0424de9e2395c75a8fb6915ac5a300f05620f73189c62af6b8158345e0974b0eb04942e46d9331d98fce42b6a009e56ac81d42809795925ec450a28c6d96abc73e367fab5dc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x10a0, 0x1e, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3ff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x81, 0xfffffffffffffffd, 0x5, 0xfffffffe}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xe3, 0x7, 0x3, 0x3, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x80000001, 0x401, 0x8, 0xc0, 0x100}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xf, 0x5, 0x6, 0x1, 0x9}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0x1050, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffb06}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x83}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0xfc, 0x23, 0x0, 0x0, {{0x9}, {0x4}, {0xce, 0x6, "212cd3beb18c9a45b63034c0949080aa47350de6335c91154dc5917955c53f28bbcc2d7b5c210363744badc857debc28498aaf717f42fbf2b51a43ce6a626b8fcfe1c5c1de0c2ee2ed17705b663a1372f23be23d7547760c10a27f6928927e5740565cc4def4bfe194bbfe9ac8ead4eeebc8153b330361e0dbaaa54e951f291ef63e21ce2b845af99ce1794fd31bd46c064cef241aa7d81db1e6f73a15b935be4a01451cf2fef4fa5407e3ee78a4a33c4c900e0a5ae9c3a7a4a0db63201296ed584aad5af693d099f54b"}, {0xc, 0x7, {0x1}}, {0xfffffffffffffde9, 0x8, {0x3, 0xb20bbf0e2c9db166}}}}, @m_skbedit={0x1078, 0x18, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2513, 0x4, 0x3, 0x5, 0x10001}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0xf, 0x6, 0x2}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xffc1}}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x444c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xc7f}, 0x18) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x1020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x1020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r11, 0x0, 0x0, 0x1000f4) (async) fallocate(r11, 0x0, 0x0, 0x1000f4) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) (async) r12 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r12, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) bind$inet6(r9, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000003aaaa2a86dd61fbddf000083afffe8000000000000000000000000000bbff0200000000000000000000000000018100907800020008"], 0x0) 20.590092428s ago: executing program 6 (id=3820): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000600000000000000000000000033d2d0a61c3966b0a04f95914e8e23b07dfa7ca39934b81eac041526e4518ba9884f7ffe0a815f5e125b4e4f74cb2019694a27a19d8378133a45114459fd91692272ad046f5a0fe9228c8abb332023830f685e67cd70f7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000200000700000000010000001811000079fd85eaa56111d98caf946d00d749cc1502006a8ee85054c1095e275925c500d5b60919a93028bc9266a46849feb44ba5e0b9f2a9af91cfe5cebb03523c2832566a30b57a001194e60500000000000000aec10022205d1146b65825cdbc967f8ef96658ae126513b207c56000d3924e073af1a4362b0f5780bdfd0cdf5193d736ac0000e6ffffff00"/177, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2b40, 0x410, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x480, 0x7f, 0x0, 0x1, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r4, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) pivot_root(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write2(0x11, &(0x7f00000002c0)={0x7, 0xffffffffffffffff, 0x4000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) 17.71148216s ago: executing program 6 (id=3856): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)='%pS \x00'}, 0x20) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') (async) prctl$PR_SET_NAME(0xf, 0x0) (async, rerun: 32) signalfd(r1, &(0x7f0000000200)={[0x9]}, 0x8) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000b0626b9d21e23f89000020758725000062e547915f06000000ff0000ecffc5a1000000000000070100c17f6b9784982c2b244800f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa1fd8977dc87ae549076d2259fb3a55ae28002b30880145a"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) syz_io_uring_setup(0x7393, &(0x7f0000000440)={0x0, 0x1a5d, 0x10000, 0x2, 0x2e7}, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180400000000000000000000000000001801000069"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0xfffffffffffffff8}, 0x18) (async) memfd_secret(0x0) (async) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) (async) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) 16.577517841s ago: executing program 4 (id=3877): socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) (async) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) (async) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000200)=""/120) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010102}}, 0x24) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000040000000a"], 0x48) (async, rerun: 64) getsockopt(r2, 0x4, 0x8, &(0x7f0000000280)=""/50, &(0x7f00000002c0)=0x32) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x10) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) 16.552530124s ago: executing program 4 (id=3878): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r3, 0x0, 0xfffffffffffffff4}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904efff00000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 16.395334246s ago: executing program 4 (id=3879): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x68001, 0x0) r2 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240008c1}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) getsockopt$sock_buf(r0, 0x1, 0xa, &(0x7f00000014c0)=""/4096, &(0x7f0000000140)=0x1000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x8) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'caif0\x00', @multicast}) write$tun(r9, &(0x7f0000000380)=ANY=[@ANYBLOB="00200000ffffffffffffbbbbbbbbbbbb08004500003c0000000000299078ac1e0001e00000010300000000289078dafc3fec9ba84c93cf0da2c96b6791f99df0c319ce5300"/78], 0x4e) 16.146837257s ago: executing program 4 (id=3881): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x13400, 0xc8, 0x1e00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@nombcache}, {@debug}, {@noload}, {@nombcache}, {@noload}, {@nouid32}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00'}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 15.97417351s ago: executing program 4 (id=3883): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000001240)={@multicast2, @remote, r2}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000a80)='ext4\x00', &(0x7f0000000880)='./file1\x00', 0xb0800, &(0x7f0000000000)={[{@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xff}}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@quota}, {@journal_checksum}]}, 0x1, 0x56f, &(0x7f0000000140)="$eJzs3U9oHNUfAPDvzGZ/7a+tpoKCSg9FhQqlm6R/tHpqr2Kh0IPgRcNmG0o23ZLdaBNySO5F6EFUeqk3PXhUPHgQLx69elEEb0KxQaHpQVf2XxKTTdzUbLZ2Ph+Y7Hvzdvf73sx+JzuPGTaAzDra+JNGPBMRF5OI4XVtQ9FuPNp63sryQvH+8kIxiXr90q9JJBFxb3mh2Hl+0n48GBGLEfF0RHyTjziebo5bnZufGi+XSzPt+kht+tpIdW7+xJXp8cnSZOnqqZdfOXP29Jmxk2PrX3a/vv698jsb640fb75347vXbt/89LMji8X3x5M4F4fabevHsZta2yQf5zasP92PYAOUDLoDPJBctHK/4akYjlw767upD+9Zt4A9UN8XUQcyKpH/kFGd7wGN89/OspffP+6cb000NOKutJdWy1BrbiL2N0/zD/yWrJ2ZJFufo8BOLC5FxOjQ0ObPf9L+/D240d3oIH319fnWjtq8/9PV409sPP5ENOcN/+3nI9Yd/1Y2Hf/W4ue6xE8i4mKPMf5486ePtoy/FPFs1/jJavykS/w0It7uMf6tN748u1Vb/eOIY9E9fkey/fzwyOUr5dJo62/XGF8dO/LqduM/sEX81pzt/sOxxfbvMq3d1Rfffv7c4jbxX3x++/3fbfv/vNRj8Ih44t4nr2/Vdmcpudv4FrDT/Z9EPm73GP+lc0d/6L23AAAAAAAAAABAr9LmtWxJWlgtp2mh0LqH98k4kJYr1drxy5XZqxOta94ORz7tXGk13KonjfpYs7xWP7mhfirXDpj7f7NeKFbKEwMeOwAAAAAAAAAAAAAAAAAAADwsDm64///3XPP+/40/Vw08qvycHmSX/Ifs+nv+JwPrB7D3/P+HzKrLf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5Bd8h8AAAAAAAAAAAAAAAAAAAAAAAAAAPri4oULjaV+f3mh2KhPDM3NTlXeOTFRqk4VpmeLhWJl5lphslKZLJcKxcr0P71fUqlcG42rs9dHaqVqbaQ6N//WdGVxtbmU7/N4AAAAAAAAAAAAAAAAAAAA4L/oUHNJ0kJEpM1ymhYKEY9FxOEkkstXyqXRiHg8Ir7P5fc16mOD7jQAAAAAAAAAAAAAAAAAAAA8Yqpz81Pj5XJpJiOFoZ08OSIWd7cbjXfc8avy7X31sGxDhSwUBnxgAgAAAAAAAAAAAAAAAACADFq76bfXV/zZ3w4BAAAAAAAAAAAAAAAAAABAJqW/JBHRWI4Nv3BoY+v/kpVc8zEi3r116YPr47XazFhj/d3V9bUP2+tPDqL/QK86edrJYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBNdW5+arxcLs30sTDoMQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8iL8CAAD//7PR13w=") 15.809976594s ago: executing program 4 (id=3884): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') (fail_nth: 1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = socket$key(0xf, 0x3, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) sendmsg$key(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x2, 0x13, 0x7, 0x6, 0x2, 0x0, 0x70bd29, 0x25dfdbfc}, 0x10}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000000), &(0x7f00000005c0)=r9}, 0x20) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000008, 0x3, 0x4, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r10, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r10, 0x40505330, &(0x7f00000004c0)={0x800100, 0xfffffffd, 0x0, 0x8, 0x9, 0x6}) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20040041) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) 15.794491354s ago: executing program 53 (id=3884): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') (fail_nth: 1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = socket$key(0xf, 0x3, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) sendmsg$key(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x2, 0x13, 0x7, 0x6, 0x2, 0x0, 0x70bd29, 0x25dfdbfc}, 0x10}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000000), &(0x7f00000005c0)=r9}, 0x20) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000008, 0x3, 0x4, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r10, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r10, 0x40505330, &(0x7f00000004c0)={0x800100, 0xfffffffd, 0x0, 0x8, 0x9, 0x6}) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20040041) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) 15.73372511s ago: executing program 6 (id=3888): socket(0x1a, 0x4, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r3}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x94) r4 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000000)={@random="167303537f12", @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x19, 0x0, 0x0, @empty, @local, {[@routing={0x84, 0x0, 0x0, 0x0, 0x11}], "223427d5c9a46b9fa14172170a01358931"}}}}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xfffffffc, 0x1, 0xffffffffffffffff, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002"], 0x20}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='[,\x00', &(0x7f0000000140)=',-\x10*\x00', 0x0) close(r8) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r9 = inotify_init1(0x800) inotify_add_watch(r9, &(0x7f00000002c0)='./file0\x00', 0x500082c) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f00000001c0), &(0x7f00000000c0)='system_u:object_r:sendmail_exec_t:s0\x00', 0x25, 0x1) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYRESHEX=r6], 0x3c}}, 0x0) 15.73064442s ago: executing program 54 (id=3888): socket(0x1a, 0x4, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r3}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x94) r4 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000000)={@random="167303537f12", @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x19, 0x0, 0x0, @empty, @local, {[@routing={0x84, 0x0, 0x0, 0x0, 0x11}], "223427d5c9a46b9fa14172170a01358931"}}}}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xfffffffc, 0x1, 0xffffffffffffffff, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002"], 0x20}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='[,\x00', &(0x7f0000000140)=',-\x10*\x00', 0x0) close(r8) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r9 = inotify_init1(0x800) inotify_add_watch(r9, &(0x7f00000002c0)='./file0\x00', 0x500082c) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f00000001c0), &(0x7f00000000c0)='system_u:object_r:sendmail_exec_t:s0\x00', 0x25, 0x1) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYRESHEX=r6], 0x3c}}, 0x0) 11.897636389s ago: executing program 5 (id=3924): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000600)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e21, 0xff, @private2, 0x81}}}, 0x90) 11.89686922s ago: executing program 5 (id=3925): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) fchmodat(0xffffffffffffffff, 0x0, 0x100) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r5, r5, 0x0, 0xe0000000) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r6 = open_tree(r4, &(0x7f0000000180)='./file1\x00', 0x100) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r5, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bind$packet(r6, &(0x7f00000003c0)={0x11, 0xf8, r7, 0x1, 0x1, 0x6, @random="202434919884"}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r13}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f00000003c0)='./file0\x00') sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r12}}, 0x24}}, 0x0) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0xa8, 0x3565, @vifc_lcl_ifindex=r12, @multicast2}, 0x10) 11.462922704s ago: executing program 5 (id=3928): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) 11.380818291s ago: executing program 5 (id=3930): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x13400, 0xc8, 0x1e00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@nombcache}, {@debug}, {@noload}, {@nombcache}, {@noload}, {@nouid32}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00'}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 10.955912495s ago: executing program 5 (id=3934): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x100002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x5}, 0x0, 0x4, 0x0, 0x3, 0x8, 0x20005, 0xd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0xffeb, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x4000000}, 0x40004) recvmmsg(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x4000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) statfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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") 10.670181398s ago: executing program 5 (id=3935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) readlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000005c0)=""/15, 0xf) sched_setscheduler(0x0, 0x2, 0x0) getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f00000000c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x533201, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0100000014000100fe8000000000000000000000000000aa1400010000000000000000000000000000000001140001000000000000000000000000000000000114000100fe8000"/83], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) accept(r0, &(0x7f00000008c0)=@can, &(0x7f0000000940)=0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='ata_tf_load\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r8}]}]}, 0x28}}, 0x10040080) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, r8, &(0x7f0000000040)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r9, 0x0, 0x1d, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc79", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) 10.64438882s ago: executing program 55 (id=3935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) readlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000005c0)=""/15, 0xf) sched_setscheduler(0x0, 0x2, 0x0) getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f00000000c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x533201, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0100000014000100fe8000000000000000000000000000aa1400010000000000000000000000000000000001140001000000000000000000000000000000000114000100fe8000"/83], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) accept(r0, &(0x7f00000008c0)=@can, &(0x7f0000000940)=0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='ata_tf_load\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r8}]}]}, 0x28}}, 0x10040080) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, r8, &(0x7f0000000040)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r9, 0x0, 0x1d, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc79", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) 10.359830493s ago: executing program 8 (id=3937): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f00000008c0), &(0x7f0000000880)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4}, 0x10) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000000a00)=""/225, 0xe1}], 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xfffffffffffff001}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x3) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000700)={0x3, &(0x7f00000006c0)=[{0x7c85, 0x3, 0xff, 0xd8000000}, {0xb9b, 0x7, 0x0, 0x40}, {0x9, 0xa, 0xe, 0x4a}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r8}, 0x38) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4e, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x3, r11, 0xfffffffd}, 0xc) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff34, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12, 0x0, 0x2}, 0x18) 10.329966446s ago: executing program 8 (id=3938): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f4e230003a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = memfd_secret(0x80000) getsockname$packet(r4, &(0x7f0000000080), &(0x7f0000000380)=0x14) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180"], 0x44}}, 0x20008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='i2c_reply\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r6 = fspick(0xffffffffffffffff, &(0x7f0000000280)='./file2\x00', 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) syz_io_uring_setup(0x6c51, &(0x7f00000003c0)={0x0, 0xc6f4, 0x8, 0x3, 0x212, 0x0, r4}, &(0x7f0000000500), &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 10.244246953s ago: executing program 8 (id=3939): name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x13) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0x2, 0x2}, 0x6) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, r9, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xffe, &(0x7f0000003480)=ANY=[], 0x0) sendmmsg(r2, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}], 0x1, 0xc88c4) 10.14945921s ago: executing program 8 (id=3941): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x13400, 0xc8, 0x1e00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@nombcache}, {@debug}, {@noload}, {@nombcache}, {@noload}, {@nouid32}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00'}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 10.039589939s ago: executing program 8 (id=3942): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000010c0)={0xc4, @remote, 0x4e20, 0x2, 'none\x00', 0x9, 0x5, 0x2}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0xfffffffffffffdc0, {0xa, 0x4e20, 0x7ff, @rand_addr=' \x01\x00', 0xd}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0xd0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5a", 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0xfc6, 0x5, 0x3039d05d, 0xffff, 0x7fff], 0x7, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 9.507849472s ago: executing program 8 (id=3946): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) ioctl$EVIOCRMFF(r0, 0x40095505, 0x0) 9.479639445s ago: executing program 56 (id=3946): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) ioctl$EVIOCRMFF(r0, 0x40095505, 0x0) 6.877724394s ago: executing program 1 (id=3971): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x48800) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0xfffffffc) socket$nl_netfilter(0x10, 0x3, 0xc) mlockall(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$loop(0x0, 0x47ffffa, 0x1a6c42) socket$inet_udp(0x2, 0x2, 0x0) dup(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x59, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0xe8030000, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x38}}, 0x0) (fail_nth: 1) 6.042693112s ago: executing program 1 (id=3973): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}, 0x1, 0x0, 0x0, 0x204c000}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 5.94196503s ago: executing program 1 (id=3974): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000680)=@newtaction={0xa0, 0x30, 0x9, 0x2, 0x25dfdbfb, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x6, 0x4}, {0x35, 0x9, 0x5}, {0x0, 0x0, 0x3b}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x2}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000200)) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000000), &(0x7f00000005c0)=r9}, 0x20) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r11}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r6}, 0x10) 5.772807534s ago: executing program 1 (id=3976): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x13400, 0xc8, 0x1e00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@nombcache}, {@debug}, {@noload}, {@nombcache}, {@noload}, {@nouid32}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00'}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 5.752883075s ago: executing program 7 (id=3936): pipe(&(0x7f0000000400)) (async) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e3080", 0x4, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000060000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@sg0, 0x0, 0x0) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) close(r6) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x4) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="a921123951fb007b5a3a61684fb5ec6c8167ccfc66750cb6eb609aabf92d516609c3cff4eef7507b81b22401d54a41dd456dc9a5e8a7a40ebc0e2a8193bc6ecf3d5ec148"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x3, 0x666, &(0x7f0000000900)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9734010021200000440012800900ca0a6c40979b9d21e7fe652135020100766c616e000000003400028000080000000000001c0004800c000100f7ffffff090000000c000100060000000600"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) rseq(&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x5, 0x8, 0x9}}, 0x20, 0x1, 0x0) 5.44372726s ago: executing program 1 (id=3979): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x2, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffff4, 0x0, 0x0) 5.361531297s ago: executing program 7 (id=3981): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = signalfd4(r0, &(0x7f0000000000)={[0x57]}, 0x8, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x258c0000, 0x7, 0x3, 0xe8, r1, 0x1948000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0xe}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 5.175116952s ago: executing program 1 (id=3982): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003043e498eadf27be679db5b6e7110b516b6af1abb579a4a133641958ef90533d8da3e2ee1ab9ad28842ecf19b468debaea963acbc2eeb9b910326137105157b29f292a468be081f5cbbcac399e74d4c4fd66d50fb672bac3e0be390c67df44a1da19079fcb4dbf3f88dc48479d0de079b67a69d4313798078c50778efa3f"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000100)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xb}, 0x1c) listen(r2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x6b, 0x1, 0x1, 0x8f}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000, 0x0, 0x20004}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {0xf}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd, 0x0, 0x0, 0xd}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, {0x0, 0x2000, 0x0, 0xfffffffe}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x2, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd, 0x0, 0xffffffff, 0x1}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x3, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, {}, {0xb, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0xfffffff7, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd, 0x0, 0xffffffff}, {0x6}, {0x7f, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x6fdf}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {0x0, 0xfffffffc, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x7fff, 0x80}, {0x10000000, 0x0, 0x0, 0x4, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x6}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x3}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x5}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {0x4}, {}, {}, {0x3}, {0xc}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r5, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x4fc388bd, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 5.166912662s ago: executing program 0 (id=3947): r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x18) r6 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) syz_clone(0x4080b000, 0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0) (async) syz_clone(0x4080b000, 0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r8, {0xfc77}}, './file0\x00'}) write$ppp(r9, &(0x7f0000000480)="779c082e596c9c69e42ccea56eabfd4ae716a51382aaef757592450ca0e84fd8b84e9d5afca37dd51c203f35fa67ac558215bf2d5e092c20d4d4a1fdbd4b16287c2880cfdb42cee07f6f58a321dc46d1b07a9634f478791c854fc0ede9805de838347fe0a6f0654c93cb182f55f25fe231bdcaee4d2887293665b98a7d399df81a2a76d6f21a53d27ee8e81d2e311e3adb95a4350ad1a679ebc2bbbd92fb160f18a8670efeee28770bc7af72b3", 0xad) 5.113590517s ago: executing program 57 (id=3982): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003043e498eadf27be679db5b6e7110b516b6af1abb579a4a133641958ef90533d8da3e2ee1ab9ad28842ecf19b468debaea963acbc2eeb9b910326137105157b29f292a468be081f5cbbcac399e74d4c4fd66d50fb672bac3e0be390c67df44a1da19079fcb4dbf3f88dc48479d0de079b67a69d4313798078c50778efa3f"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000100)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xb}, 0x1c) listen(r2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x6b, 0x1, 0x1, 0x8f}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000, 0x0, 0x20004}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {0xf}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd, 0x0, 0x0, 0xd}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, {0x0, 0x2000, 0x0, 0xfffffffe}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x2, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd, 0x0, 0xffffffff, 0x1}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x3, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, {}, {0xb, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0xfffffff7, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd, 0x0, 0xffffffff}, {0x6}, {0x7f, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x6fdf}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {0x0, 0xfffffffc, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x7fff, 0x80}, {0x10000000, 0x0, 0x0, 0x4, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x6}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x3}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x5}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {0x4}, {}, {}, {0x3}, {0xc}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r5, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x4fc388bd, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 4.618210027s ago: executing program 0 (id=3989): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x13400, 0xc8, 0x1e00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@nombcache}, {@debug}, {@noload}, {@nombcache}, {@noload}, {@nouid32}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00'}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 4.335850189s ago: executing program 0 (id=3991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001039010000002000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x0) 2.886251077s ago: executing program 0 (id=4004): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) set_mempolicy_home_node(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x0) mlockall(0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600050000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x40808) 2.886055377s ago: executing program 58 (id=4004): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) set_mempolicy_home_node(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x0) mlockall(0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600050000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x40808) 2.398412566s ago: executing program 2 (id=4012): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) signalfd4(r0, &(0x7f0000000080)={[0x290938d]}, 0x8, 0x80800) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r1) 2.300671774s ago: executing program 2 (id=4013): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@nouser_xattr}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0x28011, r2, 0x4000) 2.10910417s ago: executing program 2 (id=4015): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x20258e, &(0x7f0000000480)={[{@oldalloc}, {@errors_remount}, {@init_itable}, {@noblock_validity}, {@block_validity}, {@quota}]}, 0x1, 0x44f, &(0x7f0000000780)="$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") r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x3, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r6, &(0x7f00000004c0)=ANY=[], 0xb8) r7 = syz_pidfd_open(r5, 0x0) pidfd_send_signal(r7, 0x2, 0x0, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r10, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x1200850, &(0x7f0000000100)=ANY=[@ANYBLOB="757466383d312c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c696f636861727365743d73703836322c696f636861727365743d63703433372c73686f72746e616d653d77696e39352c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c756e695f786c6174653d302c003c24d06816418f4be78ed4fbfe47efc82f966a602a8db43ad053c978bbd3501706515140ef63c2a58653ced497550b22917b09702604bc162c57e05beec5bb0c11fc2f9238b25e4527e24bab534e9ba458d92a597c3fee89f57053a4a1535771c9877b3ab101fb26937779cff75a95a296fafddf11280fafeb9bd5f2da4a88b43f3e4d5b1a9aed1f659d88f914548fba990603b0d4f14adda86d459c62701d3d6f007c7e50da9608a03eff5843f6739a8ec5ff33791394a5c075018b5d92bbd7d9874589f3561fbdfc44653bb6c56b522a3413"], 0x1, 0x37c, &(0x7f0000000ec0)="$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") add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) 1.98406766s ago: executing program 9 (id=4017): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) copy_file_range(r0, 0x0, r0, 0x0, 0x863, 0x0) creat(&(0x7f00000001c0)='./file1\x00', 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x70}, 0x1, 0x7}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="090000000100000000000000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000000000000000fabc0080000000000000cde9c35705e86d688dfd4e490f377bd6486e5bd81c13252986ea851336eda18d5868df42485c14cf0119745735a5b077b5e20031f4a4f046ab80090fdf62d33db963d9e0ac63d4447dbff1f09db0f999631d51a84dacbbdfb2c22ab24dacb5e22945f7e788f77143dea6137751080262a39882dbfcba48a97dca37111fb93990966a4c129515ccb421570d21778af18e2d37f06e55e214a520deeb99", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000ca00000207170000181100006f15c9931a43f5a4bc9a0ec46140de84eefbada4ca3b30414a44e853dafe70b8604011bd8d92766308914e927e39b17b432ec9d2a0a86d0bab1038eda12ab2a1bbf3bc5370b3452befbe7e2c9f9f292a0e7787536ddf7982adfe0f2029eb248f90b2f11fb4135da4f51e0364aadba6cbcb2bc4479f198ceccb30da9f009ecf6ea888f67f43f52bf4ed2f7ae542fe40df16e47f114c3ed4aecd6b879989fd7fb8b3d9cbf0e2020f6076e6f8f6ccce1c4694fdfe971a0aa9678ec498c159301ee42176d7287fb802aba1fdf44253167eabc9b1d61f2497a4c55bfde66020616eb0490db3", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5}, 0x0, 0xff00000000000001, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlock(&(0x7f00004bc000/0x4000)=nil, 0x4000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x10) 1.838331131s ago: executing program 9 (id=4018): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000200), 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x3, 0x3, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8054}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0xf, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8855}, 0x4004040) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000002000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.690032053s ago: executing program 2 (id=4019): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8000}, 0x2800c051) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0x10) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1.654721176s ago: executing program 2 (id=4020): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x13400, 0xc8, 0x1e00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@nombcache}, {@debug}, {@noload}, {@nombcache}, {@noload}, {@nouid32}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00'}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 1.561942004s ago: executing program 9 (id=4021): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x9) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) finit_module(r3, &(0x7f0000000540)='%^+-}.\'!+\x00y_iJt(\xf19\x1dD\xceQ\x89U\x86}5m\x94\xdc0\r\xfa\x00@Q:\xe8>\xe0z\xc3&\xa5O\xc8\x01\xcf\x1d\a\xd2\x8f\xb1\xcc\xc5\xf5\xc6I]\xd9L\x81\xaf\xf0\xf8\x14tI^`\xa2\x15\xf1\x88\x11\xad\xff\xbeK\xda\x1a\"\x19\xad\xb7\xadh\xd7f2\x13\xf9\xe0\x84V\x84\x1b\xd1\x12\xc5\xe7\x9d\xf0\x11\xf3.0\xf9\xfaq-\x8c\xcbF\x96\xcd\xc73\x8eg\x18Afuc\xba\xe7\x9b\xb3\xea\xbc6\xb1\xb7^\\\xc0\x8d\xd20+n\x86,\xa6|@\xe1(\xcf\x15\x84\xc4\x0f\xe69\xffU\b\x92\x05\xa2\x86\x14\x85-\x03:?\x81r\xca\xde\xea\xe10\xaa\x8b\xbb\xe2\x83_w+\x9d\x95\xfc\xdf\x1f\xa0\x1e\xb3V\xe6\xc7\x975`\xbcc\xcf\x9eHAY\xbc\xd5\x03\xe7KN\x8e=,D\xb3\x96>\v\xe6p\x940]\xc9\xa7\xb0\x95r0\x19O(~>\x17Y\xe0I\xb4Q\\\x80\x81\x83\x0f`\xf3\x03\x87\r', 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0x5}) write$sndseq(r2, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r5}, 0x18) sendmmsg$inet(r4, &(0x7f0000004440)=[{{&(0x7f0000001ac0)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}}], 0x1, 0x20004001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r8 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x8}) io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf250d000000040002801400028008000600080000000800080000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x404c011) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r11, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 1.523605687s ago: executing program 9 (id=4022): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x13400, 0xc8, 0x1e00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@nombcache}, {@debug}, {@noload}, {@nombcache}, {@noload}, {@nouid32}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00'}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 1.462024411s ago: executing program 2 (id=4023): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bind$packet(r0, &(0x7f0000000300)={0x11, 0x1b, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) r4 = geteuid() quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000801, r4, &(0x7f0000000000)={0x80000001, 0x400, 0x40008, 0x8, 0xfffffffffffffaac, 0x8, 0x2000000008000000, 0x9, 0x5}) bind$packet(r0, &(0x7f0000000280)={0x11, 0xf8, r1, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}}, 0x14) 1.324678013s ago: executing program 9 (id=4024): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000f00)={{r0}, "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"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r3, 0x0, 0xfffffffffffffff4}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) setresgid(0xee00, 0xee01, 0x0) setresgid(0xee01, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1.180891674s ago: executing program 3 (id=4025): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x11, &(0x7f0000000240)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbc}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f000000a1c0)=[{{&(0x7f0000000f80)={0xa, 0x4e22, 0x10, @mcast1, 0x40}, 0x1c, 0x0, 0x0, &(0x7f00000033c0)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x88}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x30}}, {{&(0x7f0000003480)={0xa, 0x4e21, 0x6, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000049c0)=[@hoplimit={{0x14, 0x29, 0x34, 0xff}}], 0x18}}, {{&(0x7f0000005cc0)={0xa, 0x4e24, 0xc, @loopback, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000061c0)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x2f}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x32}}}], 0x30}}], 0x3, 0x10000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1c1b080cd29d308098e00000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) 1.10732099s ago: executing program 3 (id=4026): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) copy_file_range(r0, 0x0, r0, 0x0, 0x863, 0x0) creat(&(0x7f00000001c0)='./file1\x00', 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x70}, 0x1, 0x7}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="090000000100000000000000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000000000000000fabc0080000000000000cde9c35705e86d688dfd4e490f377bd6486e5bd81c13252986ea851336eda18d5868df42485c14cf0119745735a5b077b5e20031f4a4f046ab80090fdf62d33db963d9e0ac63d4447dbff1f09db0f999631d51a84dacbbdfb2c22ab24dacb5e22945f7e788f77143dea6137751080262a39882dbfcba48a97dca37111fb93990966a4c129515ccb421570d21778af18e2d37f06e55e214a520deeb99", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000ca00000207170000181100006f15c9931a43f5a4bc9a0ec46140de84eefbada4ca3b30414a44e853dafe70b8604011bd8d92766308914e927e39b17b432ec9d2a0a86d0bab1038eda12ab2a1bbf3bc5370b3452befbe7e2c9f9f292a0e7787536ddf7982adfe0f2029eb248f90b2f11fb4135da4f51e0364aadba6cbcb2bc4479f198ceccb30da9f009ecf6ea888f67f43f52bf4ed2f7ae542fe40df16e47f114c3ed4aecd6b879989fd7fb8b3d9cbf0e2020f6076e6f8f6ccce1c4694fdfe971a0aa9678ec498c159301ee42176d7287fb802aba1fdf44253167eabc9b1d61f2497a4c55bfde66020616eb0490db3", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5}, 0x0, 0xff00000000000001, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlock(&(0x7f00004bc000/0x4000)=nil, 0x4000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x10) 1.011740028s ago: executing program 3 (id=4027): mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x400008, &(0x7f0000000880)=ANY=[@ANYBLOB='00000000000003,gid']) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000040)={0x1, 0x1}) 989.71852ms ago: executing program 9 (id=4028): stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r0) 943.418154ms ago: executing program 59 (id=4028): stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r0) 192.839084ms ago: executing program 3 (id=4030): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 153.869797ms ago: executing program 3 (id=4031): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = msgget$private(0x0, 0x588) r3 = getegid() stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r6 = gettid() setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000003c0)={{0x67, @rand_addr=0x64010101, 0x4e24, 0x1, 'rr\x00', 0x30, 0x8, 0x5a}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x4e24, 0x3, 0xd, 0x7f, 0x7ff}}, 0x44) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) fchown(0xffffffffffffffff, 0x0, 0xee01) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r10, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r8, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000300)={{0x0, 0xffffffffffffffff, r3, 0xee01, r4, 0x20, 0x9}, 0x0, 0x0, 0x0, 0xa, 0x7, 0xafc, 0x3, 0x2, 0x2, 0x4, r5, r6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x1100) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x118) write$cgroup_devices(r11, &(0x7f0000000000)=ANY=[@ANYBLOB='b 8:'], 0x9) write$P9_RLERRORu(r11, &(0x7f0000000240)={0xe, 0x7, 0x1, {{0x1, '#'}, 0x3}}, 0xe) 0s ago: executing program 3 (id=4032): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000001d711862000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x64, 0x4, 0x0, 0x0, 0x0, 0x8, 0xa0040, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = accept(r2, &(0x7f0000000200)=@alg, &(0x7f0000000280)=0x80) pwritev2(r4, 0x0, 0xff5c, 0x540e, 0xfffffff4, 0x3) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) tee(0xffffffffffffffff, r3, 0x2, 0xc) kernel console output (not intermixed with test programs): hange from 0 to 1024 [ 276.576971][T15937] lo speed is unknown, defaulting to 1000 [ 276.601560][T15937] lo speed is unknown, defaulting to 1000 [ 276.632707][T15955] loop7: detected capacity change from 0 to 764 [ 276.674768][T15953] rdma_rxe: rxe_newlink: failed to add syz_tun [ 276.724383][T15955] iso9660: Unknown parameter 'ÿÿÿ' [ 276.769304][T15965] loop5: detected capacity change from 0 to 512 [ 276.785877][T15969] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 276.792459][T15969] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 276.802044][T15969] vhci_hcd vhci_hcd.0: Device attached [ 276.808237][T15965] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 276.820646][T15970] vhci_hcd: connection closed [ 276.820946][ T4564] vhci_hcd: stop threads [ 276.831341][ T4564] vhci_hcd: release socket [ 276.835913][ T4564] vhci_hcd: disconnect device [ 276.841991][T15965] EXT4-fs (loop5): 1 truncate cleaned up [ 276.848152][T15965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.940089][T15976] ------------[ cut here ]------------ [ 276.945783][T15976] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000)(1) [ 276.966008][T15976] WARNING: CPU: 0 PID: 15976 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 276.976466][T15976] Modules linked in: [ 276.980388][T15976] CPU: 0 UID: 0 PID: 15976 Comm: syz.6.3698 Not tainted syzkaller #0 PREEMPT(voluntary) [ 276.990396][T15976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 277.001002][T15976] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 277.007399][T15976] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 92 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 277.027297][T15976] RSP: 0018:ffffc90002ecb440 EFLAGS: 00010292 [ 277.033482][T15976] RAX: baf1530d26b61400 RBX: ffff88812cce7840 RCX: 0000000000080000 [ 277.041619][T15976] RDX: ffffc90002161000 RSI: 000000000001cf75 RDI: 000000000001cf76 [ 277.049763][T15976] RBP: 0000000000000000 R08: 0001c90002ecb27f R09: 0000000000000000 [ 277.058042][T15976] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88812cce7800 [ 277.066081][T15976] R13: ffff888113710000 R14: ffff888113710000 R15: ffff88812cce7838 [ 277.074143][T15976] FS: 00007f7a5abff6c0(0000) GS:ffff8882aee43000(0000) knlGS:0000000000000000 [ 277.083110][T15976] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.089865][T15976] CR2: 0000000000000000 CR3: 000000012a9a6000 CR4: 00000000003506f0 [ 277.097907][T15976] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 277.106036][T15976] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 277.114124][T15976] Call Trace: [ 277.117209][T15955] loop7: detected capacity change from 0 to 128 [ 277.117429][T15976] [ 277.126722][T15976] reg_set_min_max+0x1eb/0x260 [ 277.131276][T15955] msdos: Bad value for 'fmask' [ 277.131578][T15976] check_cond_jmp_op+0x1080/0x16e0 [ 277.141532][T15976] do_check+0x332a/0x7a10 [ 277.145993][T15976] do_check_common+0xc3a/0x12a0 [ 277.147395][T15980] loop0: detected capacity change from 0 to 1024 [ 277.150979][T15976] bpf_check+0x942b/0xd9e0 [ 277.161823][T15976] ? __rcu_read_unlock+0x4f/0x70 [ 277.166329][T15980] EXT4-fs: Ignoring removed bh option [ 277.166827][T15976] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 277.178195][T15976] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 277.183882][T15976] ? __vmap_pages_range_noflush+0xbb3/0xbd0 [ 277.189897][T15976] ? pcpu_block_update+0x232/0x3b0 [ 277.195101][T15976] ? _find_next_zero_bit+0x64/0xa0 [ 277.200242][T15976] ? pcpu_block_refresh_hint+0x157/0x170 [ 277.206051][T15976] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 277.212166][T15976] ? css_rstat_updated+0xb7/0x240 [ 277.217315][T15976] ? __rcu_read_unlock+0x4f/0x70 [ 277.222303][T15976] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 277.228182][T15976] ? should_fail_ex+0x30/0x280 [ 277.233069][T15976] ? selinux_bpf_prog_load+0x36/0xf0 [ 277.238431][T15976] ? should_failslab+0x8c/0xb0 [ 277.243225][T15976] ? __kmalloc_cache_noprof+0x189/0x320 [ 277.248878][T15976] ? selinux_bpf_prog_load+0xbf/0xf0 [ 277.254214][T15976] ? security_bpf_prog_load+0x2c/0xa0 [ 277.259628][T15976] bpf_prog_load+0xedd/0x1070 [ 277.264378][T15976] ? security_bpf+0x2b/0x90 [ 277.268920][T15976] __sys_bpf+0x462/0x7b0 [ 277.273208][T15976] __x64_sys_bpf+0x41/0x50 [ 277.277703][T15976] x64_sys_call+0x2aea/0x2ff0 [ 277.280378][T15980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 277.282498][T15976] do_syscall_64+0xd2/0x200 [ 277.299527][T15976] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 277.305667][T15976] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 277.311528][T15976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.317507][T15976] RIP: 0033:0x7f7a5c19ebe9 [ 277.321950][T15976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.341698][T15976] RSP: 002b:00007f7a5abff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 277.350165][T15976] RAX: ffffffffffffffda RBX: 00007f7a5c3c5fa0 RCX: 00007f7a5c19ebe9 [ 277.358213][T15976] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 277.366381][T15976] RBP: 00007f7a5c221e19 R08: 0000000000000000 R09: 0000000000000000 [ 277.374435][T15976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.382431][T15976] R13: 00007f7a5c3c6038 R14: 00007f7a5c3c5fa0 R15: 00007ffd39c7f568 [ 277.390474][T15976] [ 277.393616][T15976] ---[ end trace 0000000000000000 ]--- [ 277.402945][T15211] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 277.404179][T15777] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.426314][T15990] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3703'. [ 277.524686][ T3378] usb 7-1: enqueue for inactive port 0 [ 277.530337][ T3378] usb 7-1: enqueue for inactive port 0 [ 277.612726][ T3378] vhci_hcd: vhci_device speed not set [ 277.635303][T16003] syzkaller1: entered promiscuous mode [ 277.640827][T16003] syzkaller1: entered allmulticast mode [ 277.840514][T16023] FAULT_INJECTION: forcing a failure. [ 277.840514][T16023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.855489][T16023] CPU: 1 UID: 0 PID: 16023 Comm: syz.5.3712 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 277.855523][T16023] Tainted: [W]=WARN [ 277.855532][T16023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 277.855597][T16023] Call Trace: [ 277.855602][T16023] [ 277.855611][T16023] __dump_stack+0x1d/0x30 [ 277.855637][T16023] dump_stack_lvl+0xe8/0x140 [ 277.855661][T16023] dump_stack+0x15/0x1b [ 277.855680][T16023] should_fail_ex+0x265/0x280 [ 277.855706][T16023] should_fail+0xb/0x20 [ 277.855802][T16023] should_fail_usercopy+0x1a/0x20 [ 277.855858][T16023] _copy_from_user+0x1c/0xb0 [ 277.855911][T16023] ___sys_sendmsg+0xc1/0x1d0 [ 277.855952][T16023] __x64_sys_sendmsg+0xd4/0x160 [ 277.856007][T16023] x64_sys_call+0x191e/0x2ff0 [ 277.856052][T16023] do_syscall_64+0xd2/0x200 [ 277.856082][T16023] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 277.856105][T16023] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 277.856156][T16023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.856244][T16023] RIP: 0033:0x7f08aa1aebe9 [ 277.856263][T16023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.856286][T16023] RSP: 002b:00007f08a8c17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.856312][T16023] RAX: ffffffffffffffda RBX: 00007f08aa3d5fa0 RCX: 00007f08aa1aebe9 [ 277.856328][T16023] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000009 [ 277.856344][T16023] RBP: 00007f08a8c17090 R08: 0000000000000000 R09: 0000000000000000 [ 277.856357][T16023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.856368][T16023] R13: 00007f08aa3d6038 R14: 00007f08aa3d5fa0 R15: 00007ffcd9a31648 [ 277.856390][T16023] [ 277.857053][T16013] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3710'. [ 277.934014][T16022] loop7: detected capacity change from 0 to 1024 [ 277.935014][T16022] EXT4-fs: Ignoring removed bh option [ 277.939507][T16020] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16020 comm=syz.6.3710 [ 277.971105][T16022] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 278.480066][T15360] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 278.561876][T16029] 9pnet_fd: p9_fd_create_tcp (16029): problem connecting socket to 127.0.0.1 [ 278.684702][T15996] Set syz1 is full, maxelem 65536 reached [ 278.719318][T16036] tipc: Enabled bearer , priority 0 [ 278.793758][T16031] netlink: 268 bytes leftover after parsing attributes in process `syz.7.3714'. [ 278.884481][T16042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=16042 comm=syz.7.3719 [ 279.130811][T16047] loop7: detected capacity change from 0 to 512 [ 279.139667][T16047] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 279.150071][T16047] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042e119, mo2=0002] [ 279.158184][T16047] System zones: 1-12 [ 279.162374][T16047] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.3720: corrupted in-inode xattr: e_value size too large [ 279.176645][T16047] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.3720: couldn't read orphan inode 15 (err -117) [ 279.189496][T16047] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.217213][T15360] EXT4-fs error (device loop7): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 279.229910][T15360] EXT4-fs error (device loop7): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 279.352621][T16050] loop5: detected capacity change from 0 to 8192 [ 279.394386][T16050] loop5: p1 p4 < > [ 279.398490][T16050] loop5: p1 start 4261412864 is beyond EOD, truncated [ 279.418316][T15360] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.490645][T16053] loop5: detected capacity change from 0 to 1024 [ 279.503202][T16053] EXT4-fs: Ignoring removed bh option [ 279.511489][T16053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 279.545274][T15777] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 279.599146][ T3378] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 279.606780][ T3378] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 279.615167][T16073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.625469][T16073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.633530][ T3378] hid-generic 0000:0003:0000.0001: hidraw0: HID v0.03 Device [syz0] on syz0 [ 279.638845][T16056] lo speed is unknown, defaulting to 1000 [ 279.661706][T16056] lo speed is unknown, defaulting to 1000 [ 279.753170][T16081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3730'. [ 279.763964][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3730'. [ 279.779557][T16056] chnl_net:caif_netlink_parms(): no params data found [ 279.811725][T16085] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 279.838454][T16056] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.845607][T16056] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.853022][T16056] bridge_slave_0: entered allmulticast mode [ 279.859636][T16056] bridge_slave_0: entered promiscuous mode [ 279.867134][T16056] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.875831][T16056] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.883248][T16056] bridge_slave_1: entered allmulticast mode [ 279.889921][T16056] bridge_slave_1: entered promiscuous mode [ 279.912331][T16056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.923607][T16056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.944186][T16092] netlink: 204 bytes leftover after parsing attributes in process `syz.6.3733'. [ 279.955814][T16056] team0: Port device team_slave_0 added [ 279.964319][T16056] team0: Port device team_slave_1 added [ 279.991503][T16056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.999875][T16056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.027414][T16056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.043309][T16056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.050413][T16056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.078394][T16056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.090645][T16096] netlink: 'syz.6.3734': attribute type 10 has an invalid length. [ 280.098647][T16097] netlink: 'syz.6.3734': attribute type 10 has an invalid length. [ 280.120554][T16096] : (slave dummy0): Enslaving as an active interface with an up link [ 280.133870][T16056] hsr_slave_0: entered promiscuous mode [ 280.146557][T16056] hsr_slave_1: entered promiscuous mode [ 280.153222][T16056] debugfs: 'hsr0' already exists in 'hsr' [ 280.159098][T16056] Cannot create hsr debugfs directory [ 280.239607][T16056] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.262657][T16104] loop0: detected capacity change from 0 to 512 [ 280.269646][T16104] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 280.282704][T16104] EXT4-fs (loop0): 1 truncate cleaned up [ 280.288749][T16104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.303589][T16056] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.349961][T16056] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.398693][T16056] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.424448][T15211] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.442929][ T29] kauditd_printk_skb: 456 callbacks suppressed [ 280.442948][ T29] audit: type=1326 audit(1756089805.258:32181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16108 comm="syz.0.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069350ebe9 code=0x7ffc0000 [ 280.473009][ T29] audit: type=1326 audit(1756089805.258:32182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16108 comm="syz.0.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069350ebe9 code=0x7ffc0000 [ 280.496714][ T29] audit: type=1326 audit(1756089805.258:32183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16108 comm="syz.0.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f069350ebe9 code=0x7ffc0000 [ 280.520539][ T29] audit: type=1326 audit(1756089805.258:32184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16108 comm="syz.0.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069350ebe9 code=0x7ffc0000 [ 280.544217][ T29] audit: type=1326 audit(1756089805.258:32185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16108 comm="syz.0.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069350ebe9 code=0x7ffc0000 [ 280.589805][T16056] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 280.602007][T16056] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 280.612142][T16056] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 280.625961][T16056] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 280.688532][T16056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.704847][T16056] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.715064][ T4587] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.722172][ T4587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.738510][ T4571] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.745720][ T4571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.771529][T16121] FAULT_INJECTION: forcing a failure. [ 280.771529][T16121] name failslab, interval 1, probability 0, space 0, times 0 [ 280.784380][T16121] CPU: 0 UID: 0 PID: 16121 Comm: syz.0.3741 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 280.784419][T16121] Tainted: [W]=WARN [ 280.784425][T16121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 280.784437][T16121] Call Trace: [ 280.784447][T16121] [ 280.784454][T16121] __dump_stack+0x1d/0x30 [ 280.784479][T16121] dump_stack_lvl+0xe8/0x140 [ 280.784503][T16121] dump_stack+0x15/0x1b [ 280.784523][T16121] should_fail_ex+0x265/0x280 [ 280.784617][T16121] should_failslab+0x8c/0xb0 [ 280.784642][T16121] kmem_cache_alloc_node_noprof+0x57/0x320 [ 280.784674][T16121] ? __alloc_skb+0x101/0x320 [ 280.784698][T16121] __alloc_skb+0x101/0x320 [ 280.784769][T16121] netlink_alloc_large_skb+0xba/0xf0 [ 280.784876][T16121] netlink_sendmsg+0x3cf/0x6b0 [ 280.784931][T16121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.784954][T16121] __sock_sendmsg+0x145/0x180 [ 280.784982][T16121] ____sys_sendmsg+0x31e/0x4e0 [ 280.785008][T16121] ___sys_sendmsg+0x17b/0x1d0 [ 280.785179][T16121] __x64_sys_sendmsg+0xd4/0x160 [ 280.785212][T16121] x64_sys_call+0x191e/0x2ff0 [ 280.785233][T16121] do_syscall_64+0xd2/0x200 [ 280.785260][T16121] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 280.785283][T16121] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 280.785368][T16121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.785394][T16121] RIP: 0033:0x7f069350ebe9 [ 280.785412][T16121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.785449][T16121] RSP: 002b:00007f0691f77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.785469][T16121] RAX: ffffffffffffffda RBX: 00007f0693735fa0 RCX: 00007f069350ebe9 [ 280.785482][T16121] RDX: 0000000000000840 RSI: 0000200000000280 RDI: 0000000000000007 [ 280.785544][T16121] RBP: 00007f0691f77090 R08: 0000000000000000 R09: 0000000000000000 [ 280.785559][T16121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.785573][T16121] R13: 00007f0693736038 R14: 00007f0693735fa0 R15: 00007ffc8da2ab98 [ 280.785590][T16121] [ 280.836397][T16056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.049343][ T29] audit: type=1326 audit(1756089805.888:32186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16135 comm="syz.6.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5c19ebe9 code=0x7ffc0000 [ 281.074655][ T29] audit: type=1326 audit(1756089805.888:32187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16135 comm="syz.6.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5c19ebe9 code=0x7ffc0000 [ 281.105765][ T29] audit: type=1326 audit(1756089805.888:32188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16135 comm="syz.6.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f7a5c19ebe9 code=0x7ffc0000 [ 281.129632][ T29] audit: type=1326 audit(1756089805.888:32189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16135 comm="syz.6.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5c19ebe9 code=0x7ffc0000 [ 281.153264][ T29] audit: type=1326 audit(1756089805.888:32190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16135 comm="syz.6.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5c19ebe9 code=0x7ffc0000 [ 281.295426][T16056] veth0_vlan: entered promiscuous mode [ 281.312448][T16056] veth1_vlan: entered promiscuous mode [ 281.356807][T16056] veth0_macvtap: entered promiscuous mode [ 281.364782][T16056] veth1_macvtap: entered promiscuous mode [ 281.381971][T16056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.403667][T16056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.415911][ T4571] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.431856][ T4571] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.452802][ T4571] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.461968][T16142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3746'. [ 281.473592][T16142] bridge_slave_1: left allmulticast mode [ 281.479268][T16142] bridge_slave_1: left promiscuous mode [ 281.485126][T16142] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.497296][T16161] FAULT_INJECTION: forcing a failure. [ 281.497296][T16161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.512179][T16161] CPU: 1 UID: 0 PID: 16161 Comm: syz.0.3751 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 281.512222][T16161] Tainted: [W]=WARN [ 281.512231][T16161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.512248][T16161] Call Trace: [ 281.512256][T16161] [ 281.512325][T16161] __dump_stack+0x1d/0x30 [ 281.512353][T16161] dump_stack_lvl+0xe8/0x140 [ 281.512378][T16161] dump_stack+0x15/0x1b [ 281.512398][T16161] should_fail_ex+0x265/0x280 [ 281.512424][T16161] should_fail+0xb/0x20 [ 281.512446][T16161] should_fail_usercopy+0x1a/0x20 [ 281.512524][T16161] _copy_from_user+0x1c/0xb0 [ 281.512583][T16161] bpf_test_init+0xdf/0x160 [ 281.512633][T16161] bpf_prog_test_run_nf+0x186/0x560 [ 281.512676][T16161] ? __rcu_read_unlock+0x4f/0x70 [ 281.512709][T16161] ? __pfx_bpf_prog_test_run_nf+0x10/0x10 [ 281.512769][T16161] bpf_prog_test_run+0x22a/0x390 [ 281.512814][T16161] __sys_bpf+0x4b9/0x7b0 [ 281.512846][T16161] __x64_sys_bpf+0x41/0x50 [ 281.512873][T16161] x64_sys_call+0x2aea/0x2ff0 [ 281.512899][T16161] do_syscall_64+0xd2/0x200 [ 281.512981][T16161] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 281.513007][T16161] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 281.513044][T16161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.513071][T16161] RIP: 0033:0x7f069350ebe9 [ 281.513090][T16161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.513113][T16161] RSP: 002b:00007f0691f77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.513137][T16161] RAX: ffffffffffffffda RBX: 00007f0693735fa0 RCX: 00007f069350ebe9 [ 281.513212][T16161] RDX: 0000000000000015 RSI: 0000200000000580 RDI: 000000000000000a [ 281.513227][T16161] RBP: 00007f0691f77090 R08: 0000000000000000 R09: 0000000000000000 [ 281.513242][T16161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.513257][T16161] R13: 00007f0693736038 R14: 00007f0693735fa0 R15: 00007ffc8da2ab98 [ 281.513276][T16161] [ 281.732943][T16142] bridge_slave_0: left allmulticast mode [ 281.738861][T16142] bridge_slave_0: left promiscuous mode [ 281.744576][T16142] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.787890][T16162] netlink: 268 bytes leftover after parsing attributes in process `syz.6.3747'. [ 281.882808][ T4530] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.060306][T16178] loop4: detected capacity change from 0 to 164 [ 282.173336][T16192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3762'. [ 282.315204][T16198] syz1: rxe_newlink: already configured on syz_tun [ 282.446608][T16204] syzkaller0: Caught tx_queue_len zero misconfig [ 282.464369][T16204] vlan0: entered allmulticast mode [ 282.548867][T16169] 9pnet_fd: p9_fd_create_tcp (16169): problem connecting socket to 127.0.0.1 [ 282.593534][T16210] loop0: detected capacity change from 0 to 1024 [ 282.625564][T16212] loop0: detected capacity change from 0 to 512 [ 282.678233][T16212] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 282.697745][T16212] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042e119, mo2=0002] [ 282.720734][T16212] System zones: 1-12 [ 282.725206][T16212] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.3769: corrupted in-inode xattr: e_value size too large [ 282.768724][T16212] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3769: couldn't read orphan inode 15 (err -117) [ 282.800797][T16218] random: crng reseeded on system resumption [ 282.811923][T16212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.919654][T15211] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 282.962580][T15211] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 283.021880][T16190] Set syz1 is full, maxelem 65536 reached [ 283.091024][T15211] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.265427][T16239] 9pnet_fd: p9_fd_create_tcp (16239): problem connecting socket to 127.0.0.1 [ 283.279908][T16230] rdma_rxe: rxe_newlink: failed to add syz_tun [ 283.475593][T16247] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 283.534116][T16250] netlink: 'syz.5.3781': attribute type 3 has an invalid length. [ 283.812365][T16223] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.819696][T16223] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.887341][T16223] : (slave dummy0): Releasing backup interface [ 284.186944][T16254] loop3: detected capacity change from 0 to 512 [ 284.196531][T16254] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 284.207209][T16254] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 284.210123][T16241] Set syz1 is full, maxelem 65536 reached [ 284.221822][T16254] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 284.232794][T16254] System zones: 0-2, 18-18, 34-35 [ 284.238430][T16254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 284.284177][T16223] bridge_slave_0: left promiscuous mode [ 284.289999][T16223] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.317419][T16259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3784'. [ 284.326325][T16259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3784'. [ 284.359138][T15024] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /47/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 284.400665][T16223] bridge_slave_1: left allmulticast mode [ 284.406655][T16223] bridge_slave_1: left promiscuous mode [ 284.412512][T16223] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.427193][T16223] : (slave bond_slave_0): Releasing backup interface [ 284.446355][T16223] : (slave bond_slave_1): Releasing backup interface [ 284.485261][T16223] bond0: (slave veth3): Releasing active interface [ 284.491876][T16223] bond0: (slave veth3): the permanent HWaddr of slave - aa:21:cd:55:36:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 284.509339][T16223] vlan2: entered promiscuous mode [ 284.515479][T16223] bond0: (slave vlan2): Releasing active interface [ 284.522056][T16223] vlan2: left promiscuous mode [ 284.528874][T15811] lo speed is unknown, defaulting to 1000 [ 284.534391][T16247] pim6reg1: entered promiscuous mode [ 284.534715][T15811] sz1: Port: 1 Link DOWN [ 284.540203][T16247] pim6reg1: entered allmulticast mode [ 284.590002][T15823] syz1: Port: 1 Link DOWN [ 284.601695][ T4528] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.616908][T14197] lo speed is unknown, defaulting to 1000 [ 284.623428][ T4528] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.632006][ T4528] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.648916][ T4528] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.737673][T16258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.751991][T16273] FAULT_INJECTION: forcing a failure. [ 284.751991][T16273] name failslab, interval 1, probability 0, space 0, times 0 [ 284.764807][T16273] CPU: 0 UID: 0 PID: 16273 Comm: syz.5.3787 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 284.764846][T16273] Tainted: [W]=WARN [ 284.764854][T16273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.764870][T16273] Call Trace: [ 284.764876][T16273] [ 284.764885][T16273] __dump_stack+0x1d/0x30 [ 284.764910][T16273] dump_stack_lvl+0xe8/0x140 [ 284.764974][T16273] dump_stack+0x15/0x1b [ 284.764992][T16273] should_fail_ex+0x265/0x280 [ 284.765016][T16273] should_failslab+0x8c/0xb0 [ 284.765119][T16273] kmem_cache_alloc_node_noprof+0x57/0x320 [ 284.765151][T16273] ? __alloc_skb+0x101/0x320 [ 284.765190][T16273] __alloc_skb+0x101/0x320 [ 284.765284][T16273] netlink_alloc_large_skb+0xba/0xf0 [ 284.765326][T16273] netlink_sendmsg+0x3cf/0x6b0 [ 284.765356][T16273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.765379][T16273] __sock_sendmsg+0x145/0x180 [ 284.765475][T16273] ____sys_sendmsg+0x31e/0x4e0 [ 284.765504][T16273] ___sys_sendmsg+0x17b/0x1d0 [ 284.765591][T16273] __x64_sys_sendmsg+0xd4/0x160 [ 284.765703][T16273] x64_sys_call+0x191e/0x2ff0 [ 284.765727][T16273] do_syscall_64+0xd2/0x200 [ 284.765761][T16273] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 284.765835][T16273] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 284.765860][T16273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.765922][T16273] RIP: 0033:0x7f08aa1aebe9 [ 284.765939][T16273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.765960][T16273] RSP: 002b:00007f08a8c17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.765979][T16273] RAX: ffffffffffffffda RBX: 00007f08aa3d5fa0 RCX: 00007f08aa1aebe9 [ 284.765991][T16273] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 284.766002][T16273] RBP: 00007f08a8c17090 R08: 0000000000000000 R09: 0000000000000000 [ 284.766013][T16273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.766102][T16273] R13: 00007f08aa3d6038 R14: 00007f08aa3d5fa0 R15: 00007ffcd9a31648 [ 284.766125][T16273] [ 284.785220][T16242] lo speed is unknown, defaulting to 1000 [ 285.002105][T16242] lo speed is unknown, defaulting to 1000 [ 285.079493][T16291] loop4: detected capacity change from 0 to 512 [ 285.098765][T16294] 9pnet_fd: p9_fd_create_tcp (16294): problem connecting socket to 127.0.0.1 [ 285.157769][T16291] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 285.171404][T16242] chnl_net:caif_netlink_parms(): no params data found [ 285.185681][T16291] EXT4-fs (loop4): mount failed [ 285.253147][T16242] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.260390][T16242] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.267823][T16242] bridge_slave_0: entered allmulticast mode [ 285.276273][T16242] bridge_slave_0: entered promiscuous mode [ 285.286110][T16312] syz_tun: entered allmulticast mode [ 285.294427][T16242] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.294590][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3796'. [ 285.303198][T16242] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.318206][T16242] bridge_slave_1: entered allmulticast mode [ 285.325149][T16242] bridge_slave_1: entered promiscuous mode [ 285.365158][T16312] syz_tun (unregistering): left allmulticast mode [ 285.385091][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 285.385109][ T29] audit: type=1326 audit(1756089810.446:32558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16303 comm="syz.6.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5c19ebe9 code=0x7ffc0000 [ 285.422184][T16242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.431600][T16280] lo speed is unknown, defaulting to 1000 [ 285.437931][T16280] lo speed is unknown, defaulting to 1000 [ 285.446195][T16242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.452228][ T29] audit: type=1326 audit(1756089810.498:32559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16303 comm="syz.6.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5c19ebe9 code=0x7ffc0000 [ 285.486666][ T29] audit: type=1326 audit(1756089810.551:32560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16303 comm="syz.6.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a5c19d550 code=0x7ffc0000 [ 285.511728][ T29] audit: type=1326 audit(1756089810.551:32561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16303 comm="syz.6.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5c19ebe9 code=0x7ffc0000 [ 285.535667][ T29] audit: type=1326 audit(1756089810.551:32562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16303 comm="syz.6.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5c19ebe9 code=0x7ffc0000 [ 285.561441][ T29] audit: type=1326 audit(1756089810.551:32563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16303 comm="syz.6.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f7a5c19ebe9 code=0x7ffc0000 [ 285.586551][ T29] audit: type=1326 audit(1756089810.551:32564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16303 comm="syz.6.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5c19ebe9 code=0x7ffc0000 [ 285.610287][ T29] audit: type=1326 audit(1756089810.551:32565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16303 comm="syz.6.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5c19ebe9 code=0x7ffc0000 [ 285.635369][ T29] audit: type=1326 audit(1756089810.572:32566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16303 comm="syz.6.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f7a5c19ebe9 code=0x7ffc0000 [ 285.659105][ T29] audit: type=1326 audit(1756089810.572:32567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16303 comm="syz.6.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5c19ebe9 code=0x7ffc0000 [ 285.695378][T16242] team0: Port device team_slave_0 added [ 285.710635][T16242] team0: Port device team_slave_1 added [ 285.758536][T16242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.765574][T16242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.791654][T16242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.817742][T16242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.825470][T16242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.851404][T16242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.908792][T16280] chnl_net:caif_netlink_parms(): no params data found [ 285.951305][T16242] hsr_slave_0: entered promiscuous mode [ 285.957775][T16242] hsr_slave_1: entered promiscuous mode [ 285.963909][T16242] debugfs: 'hsr0' already exists in 'hsr' [ 285.969673][T16242] Cannot create hsr debugfs directory [ 285.982991][T16327] loop5: detected capacity change from 0 to 8192 [ 285.990411][T16329] netlink: 'syz.6.3801': attribute type 21 has an invalid length. [ 285.998620][T16327] vfat: Unknown parameter '18446744073709551615ÿÿ' [ 286.046023][T16338] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3802'. [ 286.180064][T16346] FAULT_INJECTION: forcing a failure. [ 286.180064][T16346] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 286.194900][T16346] CPU: 1 UID: 0 PID: 16346 Comm: syz.4.3804 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 286.194976][T16346] Tainted: [W]=WARN [ 286.194984][T16346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.194999][T16346] Call Trace: [ 286.195007][T16346] [ 286.195015][T16346] __dump_stack+0x1d/0x30 [ 286.195042][T16346] dump_stack_lvl+0xe8/0x140 [ 286.195064][T16346] dump_stack+0x15/0x1b [ 286.195129][T16346] should_fail_ex+0x265/0x280 [ 286.195150][T16346] should_fail_alloc_page+0xf2/0x100 [ 286.195177][T16346] __alloc_frozen_pages_noprof+0xff/0x360 [ 286.195213][T16346] alloc_pages_mpol+0xb3/0x250 [ 286.195301][T16346] alloc_pages_noprof+0x90/0x130 [ 286.195364][T16346] kimage_alloc_control_pages+0x2ec/0x7d0 [ 286.195398][T16346] ? alloc_pages_mpol+0x201/0x250 [ 286.195488][T16346] machine_kexec_prepare+0xbf/0xaf0 [ 286.195511][T16346] ? kimage_alloc_control_pages+0x77b/0x7d0 [ 286.195553][T16346] ? __pfx_alloc_pgt_page+0x10/0x10 [ 286.195661][T16346] do_kexec_load+0x3c2/0x500 [ 286.195684][T16346] __se_sys_kexec_load+0x134/0x160 [ 286.195710][T16346] __x64_sys_kexec_load+0x55/0x70 [ 286.195770][T16346] x64_sys_call+0x2898/0x2ff0 [ 286.195796][T16346] do_syscall_64+0xd2/0x200 [ 286.195830][T16346] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 286.195862][T16346] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 286.195887][T16346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.195909][T16346] RIP: 0033:0x7f40a0a1ebe9 [ 286.195960][T16346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.195983][T16346] RSP: 002b:00007f409f47f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 286.196006][T16346] RAX: ffffffffffffffda RBX: 00007f40a0c45fa0 RCX: 00007f40a0a1ebe9 [ 286.196026][T16346] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000003e00 [ 286.196042][T16346] RBP: 00007f409f47f090 R08: 0000000000000000 R09: 0000000000000000 [ 286.196056][T16346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.196070][T16346] R13: 00007f40a0c46038 R14: 00007f40a0c45fa0 R15: 00007fff20436f58 [ 286.196092][T16346] [ 286.432351][T16343] : renamed from bond0 (while UP) [ 286.448146][T16280] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.457010][T16280] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.464171][T16349] loop5: detected capacity change from 0 to 512 [ 286.473299][T16280] bridge_slave_0: entered allmulticast mode [ 286.481331][T16349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.481956][T16280] bridge_slave_0: entered promiscuous mode [ 286.494312][T16349] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.510810][T16350] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 286.520283][T16350] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 286.537943][T16280] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.545029][T16280] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.553055][T16280] bridge_slave_1: entered allmulticast mode [ 286.559952][T16280] bridge_slave_1: entered promiscuous mode [ 286.597037][T16280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.620702][T16242] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.638779][T16280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.665204][T15777] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.677572][T16280] team0: Port device team_slave_0 added [ 286.693977][T16242] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.706235][T16280] team0: Port device team_slave_1 added [ 286.731182][T16280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.738207][T16280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.766252][T16280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.789008][T16363] loop4: detected capacity change from 0 to 1024 [ 286.796227][T16363] EXT4-fs: Ignoring removed bh option [ 286.805493][T16363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 286.822305][T16242] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.834371][T16280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.843003][T16280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.868990][T16280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.931102][T16242] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.962465][T16280] hsr_slave_0: entered promiscuous mode [ 286.981638][T16280] hsr_slave_1: entered promiscuous mode [ 286.992059][T16280] debugfs: 'hsr0' already exists in 'hsr' [ 286.999340][T16280] Cannot create hsr debugfs directory [ 287.046073][T16367] loop5: detected capacity change from 0 to 2048 [ 287.060073][T16242] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 287.081785][T16242] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 287.103720][T16242] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 287.117262][T16242] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 287.182342][T16280] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.224629][T16242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.237958][T16280] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.258660][T16242] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.269785][ T4587] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.276901][ T4587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.294107][T16280] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.313299][ T4587] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.320424][ T4587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.365146][T16280] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.466574][T16242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.499198][T16280] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 287.511598][T16280] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 287.547247][T16056] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 287.562644][T16280] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 287.583448][T16280] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 287.704161][T16280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.722755][T16280] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.749604][ T4528] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.756711][ T4528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.789072][T16406] FAULT_INJECTION: forcing a failure. [ 287.789072][T16406] name failslab, interval 1, probability 0, space 0, times 0 [ 287.803242][T16406] CPU: 1 UID: 0 PID: 16406 Comm: syz.4.3815 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 287.803288][T16406] Tainted: [W]=WARN [ 287.803295][T16406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.803306][T16406] Call Trace: [ 287.803360][T16406] [ 287.803369][T16406] __dump_stack+0x1d/0x30 [ 287.803396][T16406] dump_stack_lvl+0xe8/0x140 [ 287.803435][T16406] dump_stack+0x15/0x1b [ 287.803455][T16406] should_fail_ex+0x265/0x280 [ 287.803480][T16406] should_failslab+0x8c/0xb0 [ 287.803578][T16406] __kvmalloc_node_noprof+0x123/0x4e0 [ 287.803610][T16406] ? vmemdup_user+0x26/0xd0 [ 287.803662][T16406] ? should_fail_usercopy+0x1a/0x20 [ 287.803688][T16406] vmemdup_user+0x26/0xd0 [ 287.803712][T16406] path_setxattrat+0x1b6/0x310 [ 287.803794][T16406] __x64_sys_fsetxattr+0x6b/0x80 [ 287.803828][T16406] x64_sys_call+0x1ced/0x2ff0 [ 287.803854][T16406] do_syscall_64+0xd2/0x200 [ 287.803897][T16406] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 287.803924][T16406] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 287.803949][T16406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.804002][T16406] RIP: 0033:0x7f40a0a1ebe9 [ 287.804022][T16406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.804045][T16406] RSP: 002b:00007f409f47f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 287.804069][T16406] RAX: ffffffffffffffda RBX: 00007f40a0c45fa0 RCX: 00007f40a0a1ebe9 [ 287.804085][T16406] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000007 [ 287.804152][T16406] RBP: 00007f409f47f090 R08: 0000000000000000 R09: 0000000000000000 [ 287.804176][T16406] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000001 [ 287.804191][T16406] R13: 00007f40a0c46038 R14: 00007f40a0c45fa0 R15: 00007fff20436f58 [ 287.804215][T16406] [ 287.824635][T16280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 287.930236][T16411] netlink: 260 bytes leftover after parsing attributes in process `syz.6.3816'. [ 287.947328][T16280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.032821][T16411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3816'. [ 288.055118][ T4528] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.062245][ T4528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.103118][T16242] veth0_vlan: entered promiscuous mode [ 288.135799][T16242] veth1_vlan: entered promiscuous mode [ 288.246509][T16280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.261417][T16242] veth0_macvtap: entered promiscuous mode [ 288.281430][T16242] veth1_macvtap: entered promiscuous mode [ 288.326873][T16242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.360738][T16242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.390673][ T4530] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.415090][ T4540] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.442834][ T4528] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.461466][ T4528] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.499475][T16280] veth0_vlan: entered promiscuous mode [ 288.528178][T16280] veth1_vlan: entered promiscuous mode [ 288.591475][T16280] veth0_macvtap: entered promiscuous mode [ 288.615500][T16280] veth1_macvtap: entered promiscuous mode [ 288.635887][T16280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.647002][T16446] loop8: detected capacity change from 0 to 1024 [ 288.655833][T16280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.665356][T16446] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 288.687173][ T4528] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.709969][ T4528] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.719242][T16446] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #3: block 1: comm syz.8.3821: lblock 1 mapped to illegal pblock 1 (length 1) [ 288.736820][T16446] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.3821: Failed to acquire dquot type 0 [ 288.750980][T16446] EXT4-fs error (device loop8): ext4_free_blocks:6696: comm syz.8.3821: Freeing blocks not in datazone - block = 0, count = 4096 [ 288.751563][ T4528] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.777129][T16446] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.3821: Invalid inode bitmap blk 0 in block_group 0 [ 288.781512][ T4528] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.802619][ T4571] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:48: lblock 1 mapped to illegal pblock 1 (length 1) [ 288.822632][ T4571] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:48: Failed to release dquot type 0 [ 288.823564][T16446] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 288.847214][T16446] EXT4-fs (loop8): 1 orphan inode deleted [ 288.950714][T16458] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3824'. [ 289.295644][T16469] loop8: detected capacity change from 0 to 512 [ 289.313895][T16469] ext4 filesystem being mounted at /7/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.326954][T16469] program syz.8.3829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.456525][T16475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3831'. [ 289.657861][T16480] futex_wake_op: syz.5.3833 tries to shift op by 36; fix this program [ 289.753630][T16491] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 289.760875][T16490] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 289.760875][T16490] program syz.2.3838 not setting count and/or reply_len properly [ 289.799436][T16490] pimreg: entered allmulticast mode [ 289.807082][T16490] pimreg: left allmulticast mode [ 289.865135][T16494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3838'. [ 290.009114][T16503] 9pnet_fd: p9_fd_create_tcp (16503): problem connecting socket to 127.0.0.1 [ 290.231297][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 290.231313][ T29] audit: type=1400 audit(1756089816.541:32916): avc: denied { listen } for pid=16508 comm="syz.5.3844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 290.699080][ T29] audit: type=1326 audit(1756089817.024:32917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16514 comm="syz.4.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a0a1ebe9 code=0x7ffc0000 [ 290.705539][T16515] FAULT_INJECTION: forcing a failure. [ 290.705539][T16515] name failslab, interval 1, probability 0, space 0, times 0 [ 290.722943][ T29] audit: type=1326 audit(1756089817.024:32918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16514 comm="syz.4.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a0a1ebe9 code=0x7ffc0000 [ 290.722994][ T29] audit: type=1326 audit(1756089817.024:32919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16514 comm="syz.4.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40a0a1d550 code=0x7ffc0000 [ 290.723054][ T29] audit: type=1326 audit(1756089817.024:32920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16514 comm="syz.4.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f40a0a1d69f code=0x7ffc0000 [ 290.809803][T16515] CPU: 1 UID: 0 PID: 16515 Comm: syz.4.3847 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 290.809907][T16515] Tainted: [W]=WARN [ 290.809930][T16515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.810023][T16515] Call Trace: [ 290.810031][T16515] [ 290.810041][T16515] __dump_stack+0x1d/0x30 [ 290.810108][T16515] dump_stack_lvl+0xe8/0x140 [ 290.810127][T16515] dump_stack+0x15/0x1b [ 290.810146][T16515] should_fail_ex+0x265/0x280 [ 290.810171][T16515] should_failslab+0x8c/0xb0 [ 290.810202][T16515] kmem_cache_alloc_node_noprof+0x57/0x320 [ 290.810334][T16515] ? __alloc_skb+0x101/0x320 [ 290.810357][T16515] __alloc_skb+0x101/0x320 [ 290.810376][T16515] ? audit_log_start+0x365/0x6c0 [ 290.810415][T16515] audit_log_start+0x380/0x6c0 [ 290.810454][T16515] audit_seccomp+0x48/0x100 [ 290.810606][T16515] ? __seccomp_filter+0x68c/0x10d0 [ 290.810633][T16515] __seccomp_filter+0x69d/0x10d0 [ 290.810712][T16515] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 290.810741][T16515] ? vfs_write+0x7e8/0x960 [ 290.810778][T16515] ? kmem_cache_free+0xdf/0x300 [ 290.810810][T16515] __secure_computing+0x82/0x150 [ 290.810848][T16515] syscall_trace_enter+0xcf/0x1e0 [ 290.810927][T16515] do_syscall_64+0xac/0x200 [ 290.810964][T16515] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 290.810993][T16515] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 290.811063][T16515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.811112][T16515] RIP: 0033:0x7f40a0a1ebe9 [ 290.811131][T16515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.811153][T16515] RSP: 002b:00007f409f47f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 290.811176][T16515] RAX: ffffffffffffffda RBX: 00007f40a0c45fa0 RCX: 00007f40a0a1ebe9 [ 290.811192][T16515] RDX: 0000200000000080 RSI: 0000200000003380 RDI: 0000200000000180 [ 290.811259][T16515] RBP: 00007f409f47f090 R08: 0000000000000000 R09: 0000000000000000 [ 290.811322][T16515] R10: 000000000000002c R11: 0000000000000246 R12: 0000000000000001 [ 290.811334][T16515] R13: 00007f40a0c46038 R14: 00007f40a0c45fa0 R15: 00007fff20436f58 [ 290.811352][T16515] [ 290.811544][T16515] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 290.932692][ T29] audit: type=1326 audit(1756089818.279:32921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.8.3851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc086debe9 code=0x7ffc0000 [ 290.936331][T16515] audit: out of memory in audit_log_start [ 290.964974][T16524] loop2: detected capacity change from 0 to 256 [ 290.989304][ T29] audit: type=1326 audit(1756089818.279:32922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.8.3851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7efc086debe9 code=0x7ffc0000 [ 291.048477][T16524] 9pnet_fd: Insufficient options for proto=fd [ 291.070106][ T29] audit: type=1326 audit(1756089818.279:32923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.8.3851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc086debe9 code=0x7ffc0000 [ 291.154435][T16530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3853'. [ 291.388742][T16528] syzkaller0: entered promiscuous mode [ 291.401637][T16528] syzkaller0: entered allmulticast mode [ 291.437163][ T4530] smc: removing ib device syz1 [ 291.455039][T16543] loop4: detected capacity change from 0 to 2048 [ 291.467469][T16543] EXT4-fs: Ignoring removed nobh option [ 291.489697][T16543] EXT4-fs mount: 4 callbacks suppressed [ 291.489716][T16543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.525753][T16551] netlink: 'syz.2.3861': attribute type 5 has an invalid length. [ 291.533627][T16551] netlink: 'syz.2.3861': attribute type 11 has an invalid length. [ 291.808049][T16561] IPv4: Oversized IP packet from 127.202.26.0 [ 291.849554][T16565] loop8: detected capacity change from 0 to 128 [ 291.867625][T16565] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 291.895044][T16565] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 291.943763][T16563] netlink: 268 bytes leftover after parsing attributes in process `syz.5.3864'. [ 291.978376][T16242] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 292.116734][T16571] loop8: detected capacity change from 0 to 1024 [ 292.146816][T16571] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.192080][T16571] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3868'. [ 292.254685][T16056] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.269577][T16242] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.408300][T16588] lo speed is unknown, defaulting to 1000 [ 292.438201][T16588] lo speed is unknown, defaulting to 1000 [ 292.479545][T16599] 9pnet_fd: p9_fd_create_tcp (16599): problem connecting socket to 127.0.0.1 [ 292.511553][T16601] vlan2: entered allmulticast mode [ 292.674928][T16604] pim6reg1: entered promiscuous mode [ 292.680337][T16604] pim6reg1: entered allmulticast mode [ 292.905281][T16609] loop4: detected capacity change from 0 to 512 [ 292.914682][T16609] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 292.932725][T16609] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042e119, mo2=0002] [ 292.944004][T16609] System zones: 1-12 [ 292.954108][T16609] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.3881: corrupted in-inode xattr: e_value size too large [ 292.972858][T16609] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3881: couldn't read orphan inode 15 (err -117) [ 293.009521][T16614] netlink: 268 bytes leftover after parsing attributes in process `syz.8.3880'. [ 293.012446][T16609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.051656][T16056] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 293.082361][T16056] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 293.162265][T16056] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.314057][T16627] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3890'. [ 293.429838][T16620] lo speed is unknown, defaulting to 1000 [ 293.438951][T16620] lo speed is unknown, defaulting to 1000 [ 293.457343][T16630] lo speed is unknown, defaulting to 1000 [ 293.507794][T16630] lo speed is unknown, defaulting to 1000 [ 293.628818][T16655] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.656583][T16620] chnl_net:caif_netlink_parms(): no params data found [ 293.693972][T16655] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.734380][T16630] chnl_net:caif_netlink_parms(): no params data found [ 293.749095][T16655] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.788470][T16620] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.795711][T16620] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.803144][T16620] bridge_slave_0: entered allmulticast mode [ 293.809822][T16620] bridge_slave_0: entered promiscuous mode [ 293.817625][T16620] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.819177][T16666] 9pnet_fd: p9_fd_create_tcp (16666): problem connecting socket to 127.0.0.1 [ 293.824753][T16620] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.830424][T16620] bridge_slave_1: entered allmulticast mode [ 293.848840][T16620] bridge_slave_1: entered promiscuous mode [ 293.869017][T16655] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.908487][T16620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.925463][T16620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.947484][T16630] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.954598][T16630] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.961904][T16630] bridge_slave_0: entered allmulticast mode [ 293.968748][T16630] bridge_slave_0: entered promiscuous mode [ 293.981672][T16630] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.988876][T16630] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.997154][T16630] bridge_slave_1: entered allmulticast mode [ 294.004233][T16630] bridge_slave_1: entered promiscuous mode [ 294.011990][T16620] team0: Port device team_slave_0 added [ 294.019718][T16620] team0: Port device team_slave_1 added [ 294.039294][ T4590] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.070325][T16620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.077318][T16620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.085365][T16671] netlink: 'syz.5.3897': attribute type 7 has an invalid length. [ 294.104197][T16620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.119527][T16630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.134422][T16620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.142820][T16620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.169058][T16620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.181856][ T4530] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.190426][ T4530] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.199373][ T4530] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.224673][T16630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.236537][T16677] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3899'. [ 294.290834][T16620] hsr_slave_0: entered promiscuous mode [ 294.298587][T16620] hsr_slave_1: entered promiscuous mode [ 294.304793][T16620] debugfs: 'hsr0' already exists in 'hsr' [ 294.310608][T16620] Cannot create hsr debugfs directory [ 294.321021][T16630] team0: Port device team_slave_0 added [ 294.330540][T16630] team0: Port device team_slave_1 added [ 294.370976][T16688] FAULT_INJECTION: forcing a failure. [ 294.370976][T16688] name failslab, interval 1, probability 0, space 0, times 0 [ 294.385630][T16688] CPU: 1 UID: 0 PID: 16688 Comm: syz.8.3902 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 294.385671][T16688] Tainted: [W]=WARN [ 294.385678][T16688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.385690][T16688] Call Trace: [ 294.385696][T16688] [ 294.385704][T16688] __dump_stack+0x1d/0x30 [ 294.385764][T16688] dump_stack_lvl+0xe8/0x140 [ 294.385787][T16688] dump_stack+0x15/0x1b [ 294.385887][T16688] should_fail_ex+0x265/0x280 [ 294.385913][T16688] should_failslab+0x8c/0xb0 [ 294.385986][T16688] __kmalloc_noprof+0xa5/0x3e0 [ 294.386012][T16688] ? io_cache_alloc_new+0x2a/0xb0 [ 294.386107][T16688] io_cache_alloc_new+0x2a/0xb0 [ 294.386199][T16688] io_sqe_buffer_register+0xf2/0x1430 [ 294.386246][T16688] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 294.386295][T16688] ? __kvmalloc_node_noprof+0x398/0x4e0 [ 294.386400][T16688] ? io_sqe_buffers_register+0xc2/0x530 [ 294.386454][T16688] io_sqe_buffers_register+0x2ac/0x530 [ 294.386492][T16688] __se_sys_io_uring_register+0xa9f/0xeb0 [ 294.386520][T16688] ? fput+0x8f/0xc0 [ 294.386554][T16688] ? ksys_write+0x192/0x1a0 [ 294.386643][T16688] __x64_sys_io_uring_register+0x55/0x70 [ 294.386670][T16688] x64_sys_call+0x18a3/0x2ff0 [ 294.386697][T16688] do_syscall_64+0xd2/0x200 [ 294.386747][T16688] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 294.386776][T16688] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 294.386811][T16688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.386832][T16688] RIP: 0033:0x7efc086debe9 [ 294.386881][T16688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.386899][T16688] RSP: 002b:00007efc0713f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 294.386917][T16688] RAX: ffffffffffffffda RBX: 00007efc08905fa0 RCX: 00007efc086debe9 [ 294.386929][T16688] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 294.386941][T16688] RBP: 00007efc0713f090 R08: 0000000000000000 R09: 0000000000000000 [ 294.386953][T16688] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 294.386965][T16688] R13: 00007efc08906038 R14: 00007efc08905fa0 R15: 00007ffeb25116f8 [ 294.387066][T16688] [ 294.636015][T16630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.643052][T16630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.650827][T16692] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3903'. [ 294.669038][T16630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.691775][T16692] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3903'. [ 294.714704][T16630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.721779][T16630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.721814][T16690] loop8: detected capacity change from 0 to 8192 [ 294.748084][T16695] loop5: detected capacity change from 0 to 164 [ 294.754156][T16630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.838329][T16630] hsr_slave_0: entered promiscuous mode [ 294.850024][T16630] hsr_slave_1: entered promiscuous mode [ 294.856249][T16630] debugfs: 'hsr0' already exists in 'hsr' [ 294.862051][T16630] Cannot create hsr debugfs directory [ 294.880038][ C1] sd 0:0:1:0: [sda] tag#6449 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 294.890461][ C1] sd 0:0:1:0: [sda] tag#6449 CDB: Write(6) 0a 00 00 00 00 00 00 00 00 00 00 00 [ 294.915975][T16700] loop5: detected capacity change from 0 to 128 [ 294.946764][T16698] infiniband syz1: set active [ 294.951536][T16698] infiniband syz1: added syz_tun [ 294.957929][T16703] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3908'. [ 294.977394][T16620] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.993173][T16698] RDS/IB: syz1: added [ 294.998404][T16698] smc: adding ib device syz1 with port count 1 [ 295.004947][T16698] smc: ib device syz1 port 1 has pnetid [ 295.034307][T16620] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.055805][T16708] lo speed is unknown, defaulting to 1000 [ 295.073735][T16708] lo speed is unknown, defaulting to 1000 [ 295.125723][T16620] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.208245][T16711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19632 sclass=netlink_route_socket pid=16711 comm=+}[@ [ 295.257368][T16620] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.270291][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 295.270360][ T29] audit: type=1400 audit(1756089822.826:33043): avc: denied { lock } for pid=16717 comm="syz.5.3911" path="/41/file0" dev="tmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 295.358614][ T29] audit: type=1326 audit(1756089822.921:33044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16722 comm="syz.5.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08aa1aebe9 code=0x7ffc0000 [ 295.389991][ T29] audit: type=1326 audit(1756089822.952:33045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16722 comm="syz.5.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08aa1aebe9 code=0x7ffc0000 [ 295.413943][ T29] audit: type=1326 audit(1756089822.952:33046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16722 comm="syz.5.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08aa1aebe9 code=0x7ffc0000 [ 295.437557][ T29] audit: type=1326 audit(1756089822.952:33047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16722 comm="syz.5.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08aa1aebe9 code=0x7ffc0000 [ 295.461479][ T29] audit: type=1326 audit(1756089822.952:33048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16722 comm="syz.5.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08aa1aebe9 code=0x7ffc0000 [ 295.485101][ T29] audit: type=1326 audit(1756089822.952:33049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16722 comm="syz.5.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08aa1aebe9 code=0x7ffc0000 [ 295.497705][T16723] loop5: detected capacity change from 0 to 1024 [ 295.508831][ T29] audit: type=1326 audit(1756089822.952:33050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16722 comm="syz.5.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08aa1aebe9 code=0x7ffc0000 [ 295.508866][ T29] audit: type=1326 audit(1756089822.952:33051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16722 comm="syz.5.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08aa1aebe9 code=0x7ffc0000 [ 295.509034][ T29] audit: type=1326 audit(1756089822.952:33052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16722 comm="syz.5.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08aa1aebe9 code=0x7ffc0000 [ 295.590881][T16723] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 295.613982][T16620] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 295.631260][T16630] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.642840][T16620] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 295.653657][T16620] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 295.664535][T16620] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 295.690930][T16729] loop5: detected capacity change from 0 to 512 [ 295.702613][T16630] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.715528][T16729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.729637][T16729] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.773245][T16630] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.826929][T16630] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.875277][T16620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.888967][T16620] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.910041][T16620] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 295.922466][T16620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.953640][ T4530] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.960905][ T4530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.972704][T15777] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.975982][ T4530] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.988920][ T4530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.080901][T16630] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 296.107020][T16630] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 296.140633][T16630] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 296.164809][T16630] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 296.249553][T16620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.283218][T16747] netlink: 268 bytes leftover after parsing attributes in process `syz.8.3916'. [ 296.424156][T16630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.465888][T16630] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.497823][ T4528] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.504959][ T4528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.567420][ T4571] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.574536][ T4571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.597137][T16758] netlink: 268 bytes leftover after parsing attributes in process `syz.5.3917'. [ 296.667378][T16620] veth0_vlan: entered promiscuous mode [ 296.705415][T16620] veth1_vlan: entered promiscuous mode [ 296.757069][T16620] veth0_macvtap: entered promiscuous mode [ 296.785723][T16620] veth1_macvtap: entered promiscuous mode [ 296.818424][T16620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.852585][T16630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.884806][T16777] netlink: 'syz.8.3920': attribute type 1 has an invalid length. [ 296.886371][T16620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.933535][ T4587] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.985115][ T4587] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.013921][ T4587] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.049834][ T4587] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.092482][T16630] veth0_vlan: entered promiscuous mode [ 297.120145][T16630] veth1_vlan: entered promiscuous mode [ 297.178816][T16630] veth0_macvtap: entered promiscuous mode [ 297.209785][T16630] veth1_macvtap: entered promiscuous mode [ 297.260384][T16630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.306048][T16630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.330264][T16796] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3925'. [ 297.383069][T16791] Set syz1 is full, maxelem 65536 reached [ 297.417438][ T4540] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.437912][T16796] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3925'. [ 297.458434][ T4540] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.497143][ T4540] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.514802][ T4540] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.526362][T16802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3889'. [ 297.565070][T16804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.581927][T16806] FAULT_INJECTION: forcing a failure. [ 297.581927][T16806] name failslab, interval 1, probability 0, space 0, times 0 [ 297.593040][T16804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.594695][T16806] CPU: 1 UID: 0 PID: 16806 Comm: syz.5.3928 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 297.594740][T16806] Tainted: [W]=WARN [ 297.594749][T16806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 297.594765][T16806] Call Trace: [ 297.594773][T16806] [ 297.594783][T16806] __dump_stack+0x1d/0x30 [ 297.594857][T16806] dump_stack_lvl+0xe8/0x140 [ 297.594913][T16806] dump_stack+0x15/0x1b [ 297.594936][T16806] should_fail_ex+0x265/0x280 [ 297.594966][T16806] should_failslab+0x8c/0xb0 [ 297.595002][T16806] kmem_cache_alloc_node_noprof+0x57/0x320 [ 297.595042][T16806] ? __alloc_skb+0x101/0x320 [ 297.595136][T16806] __alloc_skb+0x101/0x320 [ 297.595249][T16806] ? audit_log_start+0x365/0x6c0 [ 297.595290][T16806] audit_log_start+0x380/0x6c0 [ 297.595355][T16806] audit_seccomp+0x48/0x100 [ 297.595398][T16806] ? __seccomp_filter+0x68c/0x10d0 [ 297.595492][T16806] __seccomp_filter+0x69d/0x10d0 [ 297.595523][T16806] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 297.595579][T16806] ? vfs_write+0x7e8/0x960 [ 297.595616][T16806] __secure_computing+0x82/0x150 [ 297.595669][T16806] syscall_trace_enter+0xcf/0x1e0 [ 297.595701][T16806] do_syscall_64+0xac/0x200 [ 297.595738][T16806] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 297.595788][T16806] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 297.595871][T16806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.595900][T16806] RIP: 0033:0x7f08aa1aebe9 [ 297.595920][T16806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.595946][T16806] RSP: 002b:00007f08a8c16f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 297.595973][T16806] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f08aa1aebe9 [ 297.596058][T16806] RDX: 00007f08a8c16f20 RSI: 0000000000000058 RDI: 00007f08a8c16f20 [ 297.596076][T16806] RBP: 00007f08a8c17090 R08: 0000000000000000 R09: 0000000000000058 [ 297.596095][T16806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.596125][T16806] R13: 00007f08aa3d6038 R14: 00007f08aa3d5fa0 R15: 00007ffcd9a31648 [ 297.596151][T16806] [ 297.859729][T16810] loop5: detected capacity change from 0 to 512 [ 297.872705][T16810] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 297.894777][T16810] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042e119, mo2=0002] [ 297.903066][T16810] System zones: 1-12 [ 297.919167][T16810] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.3930: corrupted in-inode xattr: e_value size too large [ 297.971195][T16810] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3930: couldn't read orphan inode 15 (err -117) [ 297.994280][T16810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.076030][T15777] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 298.105577][T16823] lo speed is unknown, defaulting to 1000 [ 298.112103][T16823] lo speed is unknown, defaulting to 1000 [ 298.142981][T15777] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 298.299064][T16823] lo speed is unknown, defaulting to 1000 [ 298.305464][T16823] lo speed is unknown, defaulting to 1000 [ 298.331318][T15777] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.482469][T16823] lo speed is unknown, defaulting to 1000 [ 298.493334][T16823] lo speed is unknown, defaulting to 1000 [ 298.601556][T16826] lo speed is unknown, defaulting to 1000 [ 298.610272][T16826] lo speed is unknown, defaulting to 1000 [ 298.854281][T16848] loop8: detected capacity change from 0 to 512 [ 298.863558][T16848] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 298.877263][T16848] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042e119, mo2=0002] [ 298.887450][T16848] System zones: 1-12 [ 298.893571][T16848] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.3941: corrupted in-inode xattr: e_value size too large [ 298.908490][T16848] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.3941: couldn't read orphan inode 15 (err -117) [ 298.922904][T16848] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.986378][T16242] EXT4-fs error (device loop8): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 299.061437][T16242] EXT4-fs error (device loop8): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 299.105244][T16826] chnl_net:caif_netlink_parms(): no params data found [ 299.132720][T16855] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3943'. [ 299.150939][T16855] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16855 comm=syz.1.3943 [ 299.199103][T16860] FAULT_INJECTION: forcing a failure. [ 299.199103][T16860] name failslab, interval 1, probability 0, space 0, times 0 [ 299.212015][T16860] CPU: 0 UID: 0 PID: 16860 Comm: syz.1.3944 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 299.212049][T16860] Tainted: [W]=WARN [ 299.212056][T16860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 299.212150][T16860] Call Trace: [ 299.212159][T16860] [ 299.212169][T16860] __dump_stack+0x1d/0x30 [ 299.212195][T16860] dump_stack_lvl+0xe8/0x140 [ 299.212214][T16860] dump_stack+0x15/0x1b [ 299.212309][T16860] should_fail_ex+0x265/0x280 [ 299.212334][T16860] should_failslab+0x8c/0xb0 [ 299.212369][T16860] kmem_cache_alloc_node_noprof+0x57/0x320 [ 299.212487][T16860] ? perf_event_alloc+0x14c/0x1740 [ 299.212546][T16860] perf_event_alloc+0x14c/0x1740 [ 299.212665][T16860] __se_sys_perf_event_open+0x4a5/0x11c0 [ 299.212746][T16860] ? __rcu_read_unlock+0x4f/0x70 [ 299.212789][T16860] __x64_sys_perf_event_open+0x67/0x80 [ 299.212820][T16860] x64_sys_call+0x7bd/0x2ff0 [ 299.212841][T16860] do_syscall_64+0xd2/0x200 [ 299.212949][T16860] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 299.212979][T16860] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 299.213008][T16860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.213062][T16860] RIP: 0033:0x7f087018ebe9 [ 299.213082][T16860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.213107][T16860] RSP: 002b:00007f086ebef038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 299.213132][T16860] RAX: ffffffffffffffda RBX: 00007f08703b5fa0 RCX: 00007f087018ebe9 [ 299.213144][T16860] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00002000000004c0 [ 299.213158][T16860] RBP: 00007f086ebef090 R08: 0000000000000000 R09: 0000000000000000 [ 299.213170][T16860] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 299.213215][T16860] R13: 00007f08703b6038 R14: 00007f08703b5fa0 R15: 00007ffeb2bb3028 [ 299.213238][T16860] [ 299.409110][T16826] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.417488][T16826] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.424897][T16826] bridge_slave_0: entered allmulticast mode [ 299.431770][T16826] bridge_slave_0: entered promiscuous mode [ 299.441406][T16826] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.448529][T16826] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.464722][T16826] bridge_slave_1: entered allmulticast mode [ 299.475951][T16826] bridge_slave_1: entered promiscuous mode [ 299.485925][T16242] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.550876][T16826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.571391][T16826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.716383][T16826] team0: Port device team_slave_0 added [ 299.738792][T16826] team0: Port device team_slave_1 added [ 299.815914][T16862] Set syz1 is full, maxelem 65536 reached [ 299.823479][T16826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.830446][T16826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.856449][T16826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.868738][T16826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.875779][T16826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.901805][T16826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.976080][T16826] hsr_slave_0: entered promiscuous mode [ 299.982438][T16826] hsr_slave_1: entered promiscuous mode [ 299.988761][T16826] debugfs: 'hsr0' already exists in 'hsr' [ 299.994535][T16826] Cannot create hsr debugfs directory [ 300.009228][T16864] lo speed is unknown, defaulting to 1000 [ 300.024113][T16864] lo speed is unknown, defaulting to 1000 [ 300.045047][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 300.045091][ T29] audit: type=1326 audit(1756089827.835:33320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16878 comm="syz.1.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087018ebe9 code=0x7ffc0000 [ 300.090755][ T29] audit: type=1326 audit(1756089827.866:33321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16878 comm="syz.1.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f087018ebe9 code=0x7ffc0000 [ 300.114442][ T29] audit: type=1326 audit(1756089827.866:33322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16878 comm="syz.1.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087018ebe9 code=0x7ffc0000 [ 300.139372][ T29] audit: type=1326 audit(1756089827.866:33323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16878 comm="syz.1.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f087018ebe9 code=0x7ffc0000 [ 300.163093][ T29] audit: type=1326 audit(1756089827.866:33324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16878 comm="syz.1.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087018ebe9 code=0x7ffc0000 [ 300.186877][ T29] audit: type=1326 audit(1756089827.866:33325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16878 comm="syz.1.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f087018ebe9 code=0x7ffc0000 [ 300.213903][ T29] audit: type=1326 audit(1756089827.866:33326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16878 comm="syz.1.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087018ebe9 code=0x7ffc0000 [ 300.237709][ T29] audit: type=1326 audit(1756089827.866:33327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16878 comm="syz.1.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f087018ebe9 code=0x7ffc0000 [ 300.262805][ T29] audit: type=1326 audit(1756089827.866:33328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16878 comm="syz.1.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087018ebe9 code=0x7ffc0000 [ 300.286422][ T29] audit: type=1326 audit(1756089827.866:33329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16878 comm="syz.1.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087018ebe9 code=0x7ffc0000 [ 300.342697][T16826] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.358560][T16889] loop1: detected capacity change from 0 to 2048 [ 300.376467][T16889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.408185][T16826] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.445859][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3954'. [ 300.461050][T16826] bond0: (slave netdevsim1): Releasing backup interface [ 300.478740][T16826] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.501977][T16893] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.509298][T16893] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.558327][T16826] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.606910][T16630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.665781][T16864] chnl_net:caif_netlink_parms(): no params data found [ 300.669792][T16905] FAULT_INJECTION: forcing a failure. [ 300.669792][T16905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.687207][T16905] CPU: 1 UID: 0 PID: 16905 Comm: syz.9.3957 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 300.687259][T16905] Tainted: [W]=WARN [ 300.687267][T16905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 300.687283][T16905] Call Trace: [ 300.687291][T16905] [ 300.687301][T16905] __dump_stack+0x1d/0x30 [ 300.687324][T16905] dump_stack_lvl+0xe8/0x140 [ 300.687343][T16905] dump_stack+0x15/0x1b [ 300.687441][T16905] should_fail_ex+0x265/0x280 [ 300.687465][T16905] should_fail+0xb/0x20 [ 300.687500][T16905] should_fail_usercopy+0x1a/0x20 [ 300.687545][T16905] _copy_from_user+0x1c/0xb0 [ 300.687647][T16905] ___sys_sendmsg+0xc1/0x1d0 [ 300.687694][T16905] __x64_sys_sendmsg+0xd4/0x160 [ 300.687727][T16905] x64_sys_call+0x191e/0x2ff0 [ 300.687753][T16905] do_syscall_64+0xd2/0x200 [ 300.687786][T16905] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 300.687860][T16905] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 300.688004][T16905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.688032][T16905] RIP: 0033:0x7fb68ae9ebe9 [ 300.688051][T16905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.688074][T16905] RSP: 002b:00007fb6898ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.688097][T16905] RAX: ffffffffffffffda RBX: 00007fb68b0c5fa0 RCX: 00007fb68ae9ebe9 [ 300.688168][T16905] RDX: 000000000004c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 300.688184][T16905] RBP: 00007fb6898ff090 R08: 0000000000000000 R09: 0000000000000000 [ 300.688200][T16905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.688215][T16905] R13: 00007fb68b0c6038 R14: 00007fb68b0c5fa0 R15: 00007ffc7c8e8cc8 [ 300.688339][T16905] [ 300.733911][T16826] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 300.951010][T16826] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 300.979958][T16826] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 301.000504][T16826] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 301.059816][T16864] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.066931][T16864] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.094173][T16864] bridge_slave_0: entered allmulticast mode [ 301.101544][T16912] netlink: 268 bytes leftover after parsing attributes in process `syz.1.3956'. [ 301.104914][T16864] bridge_slave_0: entered promiscuous mode [ 301.125379][T16864] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.132523][T16864] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.140051][T16864] bridge_slave_1: entered allmulticast mode [ 301.147014][T16864] bridge_slave_1: entered promiscuous mode [ 301.187745][T16864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.231474][T16864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.264079][T16926] loop9: detected capacity change from 0 to 2048 [ 301.265350][T16931] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3963'. [ 301.293656][T16864] team0: Port device team_slave_0 added [ 301.307777][T16926] Alternate GPT is invalid, using primary GPT. [ 301.314178][T16926] loop9: p2 p3 p7 [ 301.327608][T16931] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 301.335860][T16931] 0ªî{X¹¦: entered allmulticast mode [ 301.341933][T16931] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 301.363128][T16864] team0: Port device team_slave_1 added [ 301.411297][T16864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.418349][T16864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.445678][T16864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.461534][T16864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.468571][T16864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.496059][T16864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.530635][T16826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.548853][T16937] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3965'. [ 301.566592][T16864] hsr_slave_0: entered promiscuous mode [ 301.573045][T16864] hsr_slave_1: entered promiscuous mode [ 301.582608][T16941] netlink: 'syz.1.3967': attribute type 3 has an invalid length. [ 301.590486][T16941] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3967'. [ 301.591071][T16864] debugfs: 'hsr0' already exists in 'hsr' [ 301.605421][T16864] Cannot create hsr debugfs directory [ 301.627191][T16942] loop9: detected capacity change from 0 to 1024 [ 301.642599][T16942] EXT4-fs: Ignoring removed orlov option [ 301.676212][T16942] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.722690][T16937] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 301.781607][T16620] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.825202][T16826] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.896821][T16951] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3968'. [ 301.906010][T16951] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3968'. [ 301.915034][T16951] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3968'. [ 301.924448][T16951] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3968'. [ 301.933639][T16951] netlink: 'syz.9.3968': attribute type 6 has an invalid length. [ 301.970546][T16939] Set syz1 is full, maxelem 65536 reached [ 301.979169][ T4540] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.986369][ T4540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.002944][ T4540] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.010240][ T4540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.108944][T16958] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 302.193880][T16826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.346721][T16864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 302.370015][T16864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 302.396449][T16864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 302.426298][T16864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 302.507927][T16961] FAULT_INJECTION: forcing a failure. [ 302.507927][T16961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.521303][T16961] CPU: 0 UID: 0 PID: 16961 Comm: syz.1.3971 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 302.521337][T16961] Tainted: [W]=WARN [ 302.521344][T16961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.521357][T16961] Call Trace: [ 302.521363][T16961] [ 302.521370][T16961] __dump_stack+0x1d/0x30 [ 302.521392][T16961] dump_stack_lvl+0xe8/0x140 [ 302.521443][T16961] dump_stack+0x15/0x1b [ 302.521459][T16961] should_fail_ex+0x265/0x280 [ 302.521486][T16961] should_fail+0xb/0x20 [ 302.521504][T16961] should_fail_usercopy+0x1a/0x20 [ 302.521587][T16961] _copy_from_user+0x1c/0xb0 [ 302.521636][T16961] ___sys_sendmsg+0xc1/0x1d0 [ 302.521681][T16961] __x64_sys_sendmsg+0xd4/0x160 [ 302.521714][T16961] x64_sys_call+0x191e/0x2ff0 [ 302.521748][T16961] do_syscall_64+0xd2/0x200 [ 302.521821][T16961] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 302.521865][T16961] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 302.521890][T16961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.521911][T16961] RIP: 0033:0x7f087018ebe9 [ 302.521926][T16961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.521949][T16961] RSP: 002b:00007f086ebef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.522028][T16961] RAX: ffffffffffffffda RBX: 00007f08703b5fa0 RCX: 00007f087018ebe9 [ 302.522044][T16961] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 000000000000000b [ 302.522063][T16961] RBP: 00007f086ebef090 R08: 0000000000000000 R09: 0000000000000000 [ 302.522075][T16961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.522087][T16961] R13: 00007f08703b6038 R14: 00007f08703b5fa0 R15: 00007ffeb2bb3028 [ 302.522105][T16961] [ 302.543668][T16864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.754846][T16864] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.792641][ T4590] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.799752][ T4590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.838395][ T4590] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.845675][ T4590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.934730][T16826] veth0_vlan: entered promiscuous mode [ 302.949321][T16826] veth1_vlan: entered promiscuous mode [ 303.000412][T16826] veth0_macvtap: entered promiscuous mode [ 303.047705][T16826] veth1_macvtap: entered promiscuous mode [ 303.072083][T16826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.080850][T16864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.106525][T16826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.136071][T16994] pim6reg1: entered promiscuous mode [ 303.141447][T16994] pim6reg1: entered allmulticast mode [ 303.171407][ T4590] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.208081][ T4590] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.234938][ T4590] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.278593][ T4590] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.288069][T17002] loop1: detected capacity change from 0 to 512 [ 303.324923][T17002] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 303.355776][T17002] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042e119, mo2=0002] [ 303.363962][T17002] System zones: 1-12 [ 303.408585][T17002] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.3976: corrupted in-inode xattr: e_value size too large [ 303.452173][T17002] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3976: couldn't read orphan inode 15 (err -117) [ 303.492810][T16864] veth0_vlan: entered promiscuous mode [ 303.526247][T17002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.549528][T16864] veth1_vlan: entered promiscuous mode [ 303.580590][T16630] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 303.625773][T16864] veth0_macvtap: entered promiscuous mode [ 303.630840][T16630] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 303.650481][T17024] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.665597][T17023] loop9: detected capacity change from 0 to 1024 [ 303.669939][T16864] veth1_macvtap: entered promiscuous mode [ 303.695529][T16864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.708019][T17023] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.710081][T16864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.743207][ T4571] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.752454][ T4571] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.763635][ T4540] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.794716][T16630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.816906][ T4540] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.968610][T17034] lo speed is unknown, defaulting to 1000 [ 303.985784][T17034] lo speed is unknown, defaulting to 1000 [ 303.992190][T16620] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.027452][T17035] lo speed is unknown, defaulting to 1000 [ 304.046608][T17038] loop9: detected capacity change from 0 to 128 [ 304.053766][T17038] FAT-fs (loop9): bogus number of reserved sectors [ 304.061763][T17038] FAT-fs (loop9): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 304.071156][T17038] FAT-fs (loop9): Can't find a valid FAT filesystem [ 304.089247][T17035] lo speed is unknown, defaulting to 1000 [ 304.207695][T17051] netlink: 'syz.2.3986': attribute type 1 has an invalid length. [ 304.228084][T17051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.265337][T17039] lo speed is unknown, defaulting to 1000 [ 304.272101][T17039] lo speed is unknown, defaulting to 1000 [ 304.440028][T17063] loop0: detected capacity change from 0 to 512 [ 304.467797][T17063] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 304.513611][T17063] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042e119, mo2=0002] [ 304.521794][T17063] System zones: 1-12 [ 304.534472][T17024] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.545057][T17063] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.3989: corrupted in-inode xattr: e_value size too large [ 304.599702][T17063] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3989: couldn't read orphan inode 15 (err -117) [ 304.613004][T17063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.645247][T17039] chnl_net:caif_netlink_parms(): no params data found [ 304.686758][T16864] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 304.719292][T17056] Set syz1 is full, maxelem 65536 reached [ 304.756472][T16864] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 304.760814][T17039] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.775547][T17039] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.788718][T17039] bridge_slave_0: entered allmulticast mode [ 304.795648][T17039] bridge_slave_0: entered promiscuous mode [ 304.809666][T17039] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.816856][T17039] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.832708][T17039] bridge_slave_1: entered allmulticast mode [ 304.842009][T17039] bridge_slave_1: entered promiscuous mode [ 304.870274][T17073] syz_tun: entered allmulticast mode [ 304.878210][T17039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.889783][T17039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.917819][T17039] team0: Port device team_slave_0 added [ 304.929187][T17072] syz_tun: left allmulticast mode [ 304.935588][T17039] team0: Port device team_slave_1 added [ 304.963189][T17039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.970222][T17039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.996696][T17039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.009013][T17039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.016030][T17039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.042067][T17039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.083170][T17039] hsr_slave_0: entered promiscuous mode [ 305.090022][T17039] hsr_slave_1: entered promiscuous mode [ 305.096161][T17039] debugfs: 'hsr0' already exists in 'hsr' [ 305.102483][T17039] Cannot create hsr debugfs directory [ 305.136264][T17024] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.153916][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 305.153934][ T29] audit: type=1326 audit(1756089835.212:33436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17081 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01d31ebe9 code=0x7ffc0000 [ 305.183862][ T29] audit: type=1326 audit(1756089835.212:33437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17081 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01d31ebe9 code=0x7ffc0000 [ 305.208397][ T29] audit: type=1326 audit(1756089835.243:33438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17081 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fa01d31ebe9 code=0x7ffc0000 [ 305.232011][ T29] audit: type=1326 audit(1756089835.243:33439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17081 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01d31ebe9 code=0x7ffc0000 [ 305.255891][ T29] audit: type=1326 audit(1756089835.243:33440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17081 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01d31ebe9 code=0x7ffc0000 [ 305.279661][ T29] audit: type=1326 audit(1756089835.243:33441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17081 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa01d31ebe9 code=0x7ffc0000 [ 305.303985][ T29] audit: type=1326 audit(1756089835.264:33442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17081 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01d31ebe9 code=0x7ffc0000 [ 305.327750][ T29] audit: type=1326 audit(1756089835.264:33443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17081 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa01d31ebe9 code=0x7ffc0000 [ 305.351517][ T29] audit: type=1326 audit(1756089835.264:33444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17081 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01d31ebe9 code=0x7ffc0000 [ 305.375126][ T29] audit: type=1326 audit(1756089835.264:33445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17081 comm="syz.2.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fa01d31ebe9 code=0x7ffc0000 [ 305.413678][T17088] program syz.2.3998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.455124][T17039] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.469279][T17091] loop9: detected capacity change from 0 to 512 [ 305.476616][T17092] loop2: detected capacity change from 0 to 512 [ 305.477070][T17091] ext4: Unknown parameter 'fsuuid' [ 305.503682][T17092] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.3999: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 305.523391][T17092] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.3999: Bad quota inode: 3, type: 0 [ 305.534735][T17092] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 305.559282][T17092] EXT4-fs (loop2): mount failed [ 305.568227][T17024] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.643262][T17039] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.668882][ T4528] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.698829][ T4528] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.713381][ T4528] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.767793][T17039] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.796217][T16864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.871571][T17039] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.094094][T17039] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 306.110982][T17039] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 306.128570][T17039] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 306.155459][T17039] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 306.225899][T17039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.242151][T17039] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.265155][ T4540] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.272330][ T4540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.294652][T17123] FAULT_INJECTION: forcing a failure. [ 306.294652][T17123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.309254][T17123] CPU: 1 UID: 0 PID: 17123 Comm: syz.2.4007 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 306.309290][T17123] Tainted: [W]=WARN [ 306.309299][T17123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.309322][T17123] Call Trace: [ 306.309330][T17123] [ 306.309400][T17123] __dump_stack+0x1d/0x30 [ 306.309420][T17123] dump_stack_lvl+0xe8/0x140 [ 306.309439][T17123] dump_stack+0x15/0x1b [ 306.309503][T17123] should_fail_ex+0x265/0x280 [ 306.309530][T17123] should_fail+0xb/0x20 [ 306.309552][T17123] should_fail_usercopy+0x1a/0x20 [ 306.309574][T17123] _copy_from_user+0x1c/0xb0 [ 306.309678][T17123] xsk_setsockopt+0x308/0x640 [ 306.309713][T17123] ? __pfx_xsk_setsockopt+0x10/0x10 [ 306.309748][T17123] __sys_setsockopt+0x184/0x200 [ 306.309859][T17123] __x64_sys_setsockopt+0x64/0x80 [ 306.309886][T17123] x64_sys_call+0x20ec/0x2ff0 [ 306.309923][T17123] do_syscall_64+0xd2/0x200 [ 306.309950][T17123] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 306.309974][T17123] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 306.310005][T17123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.310032][T17123] RIP: 0033:0x7fa01d31ebe9 [ 306.310046][T17123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.310063][T17123] RSP: 002b:00007fa01bd7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 306.310086][T17123] RAX: ffffffffffffffda RBX: 00007fa01d545fa0 RCX: 00007fa01d31ebe9 [ 306.310102][T17123] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 306.310117][T17123] RBP: 00007fa01bd7f090 R08: 0000000000000020 R09: 0000000000000000 [ 306.310204][T17123] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 306.310220][T17123] R13: 00007fa01d546038 R14: 00007fa01d545fa0 R15: 00007ffdd7631958 [ 306.310244][T17123] [ 306.316354][ T4564] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.508951][ T4564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.540095][T17129] loop9: detected capacity change from 0 to 512 [ 306.551659][T17129] EXT4-fs: Ignoring removed mblk_io_submit option [ 306.558225][T17129] EXT4-fs: Ignoring removed bh option [ 306.569396][T17129] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 306.595710][T17129] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 306.620664][T17129] EXT4-fs (loop9): orphan cleanup on readonly fs [ 306.642504][T17129] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.4010: Invalid block bitmap block 0 in block_group 0 [ 306.661498][T17116] lo speed is unknown, defaulting to 1000 [ 306.667770][T17116] lo speed is unknown, defaulting to 1000 [ 306.675823][T17129] EXT4-fs (loop9): Remounting filesystem read-only [ 306.688505][T17129] EXT4-fs (loop9): 1 orphan inode deleted [ 306.694889][T17129] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 306.738969][T17039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.760515][T17145] loop2: detected capacity change from 0 to 1024 [ 306.775651][T17145] EXT4-fs: inline encryption not supported [ 306.792538][T16620] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.801736][T17145] ext4: Unknown parameter 'nouser_xattr' [ 306.923807][T17157] loop2: detected capacity change from 0 to 512 [ 306.930203][T17116] chnl_net:caif_netlink_parms(): no params data found [ 306.941773][T17159] loop9: detected capacity change from 0 to 128 [ 307.057916][T17168] loop2: detected capacity change from 0 to 256 [ 307.058516][T17116] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.072200][T17116] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.080613][T17116] bridge_slave_0: entered allmulticast mode [ 307.088478][T17116] bridge_slave_0: entered promiscuous mode [ 307.095195][T17168] FAT-fs (loop2): Directory bread(block 64) failed [ 307.097876][T17039] veth0_vlan: entered promiscuous mode [ 307.112056][T17168] FAT-fs (loop2): Directory bread(block 65) failed [ 307.118851][T17168] FAT-fs (loop2): Directory bread(block 66) failed [ 307.121876][T17167] rdma_rxe: rxe_newlink: failed to add syz_tun [ 307.126466][T17116] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.131800][T17168] FAT-fs (loop2): Directory bread(block 67) failed [ 307.139663][T17116] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.155639][T17116] bridge_slave_1: entered allmulticast mode [ 307.162530][T17168] FAT-fs (loop2): Directory bread(block 68) failed [ 307.162573][T17116] bridge_slave_1: entered promiscuous mode [ 307.177416][T17168] FAT-fs (loop2): Directory bread(block 69) failed [ 307.186045][T17168] FAT-fs (loop2): Directory bread(block 70) failed [ 307.196793][T17039] veth1_vlan: entered promiscuous mode [ 307.200346][T17168] FAT-fs (loop2): Directory bread(block 71) failed [ 307.209935][T17168] FAT-fs (loop2): Directory bread(block 72) failed [ 307.217449][T17168] FAT-fs (loop2): Directory bread(block 73) failed [ 307.228232][T17116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.246094][T17039] veth0_macvtap: entered promiscuous mode [ 307.254641][T17170] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 307.267066][T17116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.281752][T17039] veth1_macvtap: entered promiscuous mode [ 307.310707][T17170] __nla_validate_parse: 2 callbacks suppressed [ 307.310750][T17170] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4018'. [ 307.328001][T17116] team0: Port device team_slave_0 added [ 307.349169][T17039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.356574][T17170] 8021q: VLANs not supported on vcan0 [ 307.370829][T17116] team0: Port device team_slave_1 added [ 307.378492][T17174] loop2: detected capacity change from 0 to 512 [ 307.392555][T17174] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 307.401596][T17174] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042e119, mo2=0002] [ 307.409782][T17174] System zones: 1-12 [ 307.422005][T17174] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.4020: corrupted in-inode xattr: e_value size too large [ 307.437780][T17174] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4020: couldn't read orphan inode 15 (err -117) [ 307.451285][T17025] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.469212][T17174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.490052][T17039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.507851][T17116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.514827][T17116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.542232][T17116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.561955][T16280] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 307.573990][T17181] loop9: detected capacity change from 0 to 512 [ 307.581038][T17181] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 307.583535][T16280] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 307.600482][T17181] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042e119, mo2=0002] [ 307.609079][T17181] System zones: 1-12 [ 307.614877][T17181] EXT4-fs error (device loop9): ext4_iget_extra_inode:5104: inode #15: comm syz.9.4022: corrupted in-inode xattr: e_value size too large [ 307.615344][T17025] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.641871][T17181] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.4022: couldn't read orphan inode 15 (err -117) [ 307.646185][T17116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.656190][T17181] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.660861][T17116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.698891][T17116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.709752][ T4571] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.711930][T16620] EXT4-fs error (device loop9): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 307.733446][T16620] EXT4-fs error (device loop9): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 307.747118][ T4530] smc: removing ib device syz1 [ 307.753254][ T4571] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.767789][T15806] syz1: Port: 1 Link DOWN [ 307.776731][T17025] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.790749][T16897] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.814626][T17185] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3983'. [ 307.829218][ T4571] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.850000][T17116] hsr_slave_0: entered promiscuous mode [ 307.859679][T17116] hsr_slave_1: entered promiscuous mode [ 307.873956][T17116] debugfs: 'hsr0' already exists in 'hsr' [ 307.879779][T17116] Cannot create hsr debugfs directory [ 307.920093][ T4571] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.989931][T17191] rdma_rxe: rxe_newlink: failed to add syz_tun [ 308.026317][T17193] bpf: Bad value for 'gid' [ 308.109759][T17116] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.159164][T17116] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.205525][T17116] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.271335][T17116] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.299466][T17196] lo speed is unknown, defaulting to 1000 [ 308.306572][T17196] lo speed is unknown, defaulting to 1000 [ 308.353756][T17116] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 308.362722][T17116] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 308.377725][T17116] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 308.390551][T17116] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 308.512528][T17116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.569446][T17116] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.592810][ T4528] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.599978][ T4528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.615248][T17196] chnl_net:caif_netlink_parms(): no params data found [ 308.640687][ T4540] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.647784][ T4540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.693823][T17116] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 308.704445][T17116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 308.795751][T17196] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.803006][T17196] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.833467][T17196] bridge_slave_0: entered allmulticast mode [ 308.847149][T17196] bridge_slave_0: entered promiscuous mode [ 308.861771][T17196] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.869755][T17196] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.880281][T17196] bridge_slave_1: entered allmulticast mode [ 308.889681][T17196] bridge_slave_1: entered promiscuous mode [ 308.917770][T17116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.977943][T17196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.991972][T17196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.042625][ C1] ================================================================== [ 309.050773][ C1] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 309.057412][ C1] [ 309.059749][ C1] write to 0xffff888126a240f8 of 80 bytes by task 17229 on cpu 0: [ 309.067572][ C1] __bpf_get_stackid+0x761/0x800 [ 309.072530][ C1] bpf_get_stackid+0xee/0x120 [ 309.077288][ C1] bpf_get_stackid_raw_tp+0xf6/0x120 [ 309.082602][ C1] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 309.088076][ C1] bpf_trace_run3+0x10c/0x1d0 [ 309.092784][ C1] kmem_cache_free+0x257/0x300 [ 309.097582][ C1] __fput+0x555/0x650 [ 309.101615][ C1] ____fput+0x1c/0x30 [ 309.105630][ C1] task_work_run+0x131/0x1a0 [ 309.110289][ C1] exit_to_user_mode_loop+0xe4/0x100 [ 309.115585][ C1] do_syscall_64+0x1d6/0x200 [ 309.120188][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.126098][ C1] [ 309.128442][ C1] read to 0xffff888126a24118 of 8 bytes by interrupt on cpu 1: [ 309.135993][ C1] bcmp+0x23/0x90 [ 309.139649][ C1] __bpf_get_stackid+0x371/0x800 [ 309.144605][ C1] bpf_get_stackid+0xee/0x120 [ 309.149294][ C1] bpf_get_stackid_raw_tp+0xf6/0x120 [ 309.154588][ C1] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 309.160048][ C1] bpf_trace_run3+0x10c/0x1d0 [ 309.164733][ C1] kmem_cache_free+0x257/0x300 [ 309.169516][ C1] kernfs_free_rcu+0x97/0xb0 [ 309.174125][ C1] rcu_core+0x5aa/0xc30 [ 309.178338][ C1] rcu_core_si+0xd/0x20 [ 309.182514][ C1] handle_softirqs+0xba/0x290 [ 309.187239][ C1] run_ksoftirqd+0x1c/0x30 [ 309.191679][ C1] smpboot_thread_fn+0x328/0x530 [ 309.196648][ C1] kthread+0x486/0x510 [ 309.200833][ C1] ret_from_fork+0xda/0x150 [ 309.205356][ C1] ret_from_fork_asm+0x1a/0x30 [ 309.210138][ C1] [ 309.212469][ C1] value changed: 0xffffffff81a929f7 -> 0xffffffff819339e5 [ 309.219575][ C1] [ 309.221899][ C1] Reported by Kernel Concurrency Sanitizer on: [ 309.228060][ C1] CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 309.239284][ C1] Tainted: [W]=WARN [ 309.243209][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 309.253270][ C1] ================================================================== [ 309.336902][T17196] team0: Port device team_slave_0 added [ 309.353231][T17196] team0: Port device team_slave_1 added [ 309.384049][T17196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.391062][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.418518][T17196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.442521][T17196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.449656][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.477036][T17196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.554934][T17196] hsr_slave_0: entered promiscuous mode [ 309.565704][T17196] hsr_slave_1: entered promiscuous mode [ 309.571861][T17196] debugfs: 'hsr0' already exists in 'hsr' [ 309.577640][T17196] Cannot create hsr debugfs directory [ 309.622351][ T4571] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.643373][ T4571] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.691121][ T4571] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.716066][ T4571] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.751716][T17116] veth0_vlan: entered promiscuous mode [ 309.767703][T17116] veth1_vlan: entered promiscuous mode [ 309.809574][T17116] veth0_macvtap: entered promiscuous mode [ 309.817552][T17116] veth1_macvtap: entered promiscuous mode [ 309.837397][T17116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.852890][T17116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.866896][ T4587] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.888941][ T4587] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.914122][ T4587] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.930761][ T4587] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.023263][T17196] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 310.033825][T17196] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 310.043050][T17196] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 310.052227][T17196] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 310.093026][T17196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.107403][T17196] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.117655][ T4587] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.124712][ T4587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.137411][ T4530] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.144504][ T4530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.193731][T16280] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.235881][T17196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.361429][T17196] veth0_vlan: entered promiscuous mode [ 310.371035][T17196] veth1_vlan: entered promiscuous mode [ 310.390790][T17196] veth0_macvtap: entered promiscuous mode [ 310.400387][T17196] veth1_macvtap: entered promiscuous mode [ 310.414627][T17196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.425661][T17196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.439466][ T4530] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.453606][ T4530] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.463452][ T4530] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.475496][ T4530] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.916148][ T4511] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 311.926953][ T4511] ref_tracker: netdev@ffff888119f3f550 has 1/1 users at [ 311.926953][ T4511] batadv_hard_if_event+0x6c1/0xf10 [ 311.926953][ T4511] raw_notifier_call_chain+0x6c/0x1b0 [ 311.926953][ T4511] call_netdevice_notifiers_info+0xae/0x100 [ 311.926953][ T4511] register_netdevice+0xd48/0xf00 [ 311.926953][ T4511] veth_newlink+0x49b/0x770 [ 311.926953][ T4511] rtnl_newlink_create+0x1bc/0x620 [ 311.926953][ T4511] rtnl_newlink+0xf29/0x12d0 [ 311.926953][ T4511] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 311.926953][ T4511] netlink_rcv_skb+0x123/0x220 [ 311.926953][ T4511] rtnetlink_rcv+0x1c/0x30 [ 311.926953][ T4511] netlink_unicast+0x5bd/0x690 [ 311.926953][ T4511] netlink_sendmsg+0x58b/0x6b0 [ 311.926953][ T4511] __sock_sendmsg+0x145/0x180 [ 311.926953][ T4511] __sys_sendto+0x268/0x330 [ 311.926953][ T4511] __x64_sys_sendto+0x76/0x90 [ 311.926953][ T4511] x64_sys_call+0x2d05/0x2ff0 [ 311.926953][ T4511]