last executing test programs: 15m30.412628952s ago: executing program 32 (id=40): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000280)={0x11, 0x7, r3, 0x1, 0xdf, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r3, {0x1f, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x10, '\x00', r3, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x4, 0xab5, 0x7fffffff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000200)=[0xffffffffffffffff], &(0x7f0000000240)=[{0x3, 0x2, 0x6, 0x9}, {0x3, 0x5, 0x6, 0xb}, {0x3, 0x4, 0x10, 0xa}, {0x0, 0x2, 0xf, 0x5}, {0x4, 0x1, 0x0, 0x8}, {0x4, 0x3, 0x2, 0x5}], 0x10, 0x4, @void, @value}, 0x94) 15m4.827504943s ago: executing program 33 (id=417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0x0, 0x3f, &(0x7f0000000680)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000500), 0x8, 0xa2, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x2, &(0x7f0000000340)=ANY=[@ANYRES8=r4], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) mount(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=r6, @ANYRES64=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r11, 0x0) syz_clone(0xb0201100, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16040000ebffffffffffffffff"], 0x48) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r12}, 0x0, &(0x7f0000000040)=r13}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYRES32=r10, @ANYRES8=r12, @ANYBLOB="263c2755d8433f75618cb78ac87eb46ef9a8261439a3ebc74ea4b05e72c85f4caf8b91cc0f931fc272e31545c4c0c792a741f6d1e8d3136a75daed3749d92e1291beb8eab00c82a1812ba42c1a0f292c26fed110f11ba2d400e22c0457550c387b0afbd2ac5a6e289fcae577343241b2a5c396697d13068a0543e274606964d40f81525d66b6576d3399b6", @ANYRES16=r3, @ANYRES8=r11], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r14}, 0x10) r15 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r15, 0x1, 0x3c, &(0x7f00000001c0)={0x1}, 0x8) sendto$inet6(r15, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x4c, &(0x7f00000004c0)=0x3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x57, &(0x7f00000005c0)=""/87}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x3, 0x0, 0x1, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) 14m28.177621683s ago: executing program 34 (id=853): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x40}, 0xd0010100}}, 0x10, 0x0}, 0x10) 13m49.904807011s ago: executing program 35 (id=1299): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x18, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa204}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x48a, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x0, 0x8, 0xa, 0xa, 0xfffffffffffffffe, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @generic={0x5, 0xe, 0x8, 0x6, 0x8}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x400}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x1, 0x8f, &(0x7f00000002c0)=""/143, 0x40f00, 0x10, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xc, 0x3, 0xff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000400)=[r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f00000004c0)=[{0x1, 0x2, 0xa, 0x6}, {0x1, 0x2, 0x6, 0x2}], 0x10, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xef, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000020000100000000000000000002000000000000010000000008001700"], 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) dup3(r9, r10, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d00)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x2, 0x0, 0x0, 0xa, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0xff, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x60b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x5}, {0xf, 0xa}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0xfffffffffffffe51, 0x6, 0x9c}]}}]}, 0x3c}}, 0x40) 13m28.025764191s ago: executing program 36 (id=1594): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000ea0300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x140f, 0x400, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000240)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1f, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv4_getroute={0x1c, 0x1a, 0x647017b44513f7c7, 0x70bd27, 0x25dfdbfd, {0x2, 0x14, 0x20, 0x0, 0xfe, 0x0, 0xfd, 0x7, 0x1a00}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40819}, 0x0) unshare(0x22020400) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x50) r9 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r9, 0x2007ffb) sendfile(r9, r9, 0x0, 0x800000009) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) name_to_handle_at(r10, &(0x7f0000004740)='\x00', &(0x7f0000004780)=@fuse={0xc}, &(0x7f00000047c0), 0x1200) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) 13m27.825173696s ago: executing program 37 (id=1598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12', 0x1) readahead(r3, 0xa8, 0xfffffffffffffffa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000230000009f06000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b80)={r8, &(0x7f00000019c0), 0x0}, 0x20) r9 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r9, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) close(r9) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r5], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000001c001d800b0001006765000c0002e2712a3d0652962e800000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 13m5.018085234s ago: executing program 38 (id=2041): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x480783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x3ff, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x36) 12m52.202976571s ago: executing program 39 (id=2274): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 12m31.766974156s ago: executing program 40 (id=2646): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x3f00000000000000, 0x0) 12m2.43713267s ago: executing program 41 (id=2831): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x104}}, 0x40000) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b67, &(0x7f0000000000)) 11m53.235694743s ago: executing program 42 (id=3143): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x0, 0x48e, &(0x7f0000000400)="$eJzs3EtvVFUcAPD/nXaKFUoLPnkoo0hsRFtaUFmYGI0mbExMdKHLWipBChioiRAiaAwujZ9AXZr4CVzpxqgrjVvdGxNi2IguzJj7KlM6rdPpTKcyv18y7Tn3dc7/nnt6H+dOA+hbtfRHErEtIn6JiNE8u3SBWv7rxvVLs39dvzSbRL3+yh9Jttyf1y/NlotuK35vLbY5XomofJjEniblnr9w8dTM/PzcuSI/uXD67cnzFy4+cfL0zIm5E3Nnpo8ePXJ46umnpp/sSJwjaV13v3d2765jr3/y0mw93vj+y7T+A8X8xjhyY+susxa1GI56vbJk6lD288C6t765jDSkk8EeVoQ1SY//tLmqWf8fjYG42Xij8eIHPa0c0FX1er2+Y9nU/KxYOZBk84HblT4O/ao846f3v+VnY69Aeuvac/kNUBr3jeKTzxmM9L49Gcvv2Ae6VP62iHjtyt+fpp9o+hwCAKCzvk6vfx5vdv1XiXsblttejA2NRcTBiNgZEXdFxN0RcU9Etux9EXH/Gsuv3ZLPy682TPlpuN3YWpFe/z1TjG0tvf5bHLUZGyhyI1n81eTNk/Nzh4p9Mh7VLWl+apUyvnnh54+zRJNIag3Xf+knLb+8Fizq8fvglqXrHJ9ZmFlv3KVr70fsHny2SfzJ4khAEhG7ImJ3G9tP99nJx77Ym6a3b10+/7/jX0UHxpnqn0c8mrf/lbgl/lKSl7TS+OTkHTE/d2iyPCqW++HHqy835huP7loWRpvxd0Da/nc2Pf6L+MtuUI7Xnl97GVd//WjFe5p2j/+h5NUsPVRMe3dmYeHcVMRQMWHJ9Omb65b5cvk0/vH9zfv/zoh/PivW2xMR6UH8QEQ8GBH7iro/FBEPR8T+VeL/7vlH3lp9D/W2/Y+v1v4RY0kRf+rc4sB964mBU99+tVL5rbX/kSw1Xkxp5e9fqxVsd78BAADA/0klG4NOKhOL6UplYiJ/h7987HKwFu+cOZ6PVY9FtVI+6RpteB46VTwbLvPTt+QPR8SO7E2j4Sw/MXt2fqTHsUO/27pC/0/91q2XXoDNY03jaEn36gFsPN/XhP7VvP939b0rYJNw/of+pf9D/2rW/y9H3OhBVYAN5vwP/av1/u+NALjdOP9D/9L/oS8t/0r8cPGvE9r5pv/NxM5j61p9rYnqBpbV4cRAl7Ycjf+0owuJqPR817WfqGyGauwrElsiotW1Lje0aXna7kYNq/M9/KMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQQf8GAAD//4F+194=") r0 = socket$netlink(0x10, 0x3, 0xf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000092, &(0x7f00000008c0)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@errors_remount}, {@noblock_validity}]}, 0xfe, 0x45f, &(0x7f0000000440)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='kfree\x00', r4, 0x0, 0x9}, 0x18) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x286c188, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x4, 0x3}, {0x401, 0xfff}]}, 0x14, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) r5 = socket(0x28, 0x6, 0xffffffff) sendmsg$nl_route_sched(r5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000300)={0x0, 0x0, 0x2c, 0x20, 0x104, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 10m59.53407726s ago: executing program 43 (id=3838): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpid() syz_clone3(&(0x7f0000001100)={0x40200, 0x0, 0x0, 0x0, {0x36}, 0x0, 0x0, 0x0, &(0x7f00000010c0)}, 0x58) getdents(r1, &(0x7f0000002480)=""/4094, 0xffe) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1200) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000010) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x1}, 0x18) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000001280), 0x1, 0x0) 10m57.963414935s ago: executing program 44 (id=3855): socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000060796e38ee11744b0006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r2, @ANYRESOCT, @ANYRES32=0x0, @ANYRES8, @ANYRESDEC=0x0, @ANYRES64, @ANYRESOCT=r5], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 10m57.722161833s ago: executing program 45 (id=3859): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x8100) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) ioctl$BLKSECTGET(r0, 0x1267, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x400) inotify_init() r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r6 = socket(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r12}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 10m57.145223944s ago: executing program 46 (id=3868): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x30}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r7, 0xc4c03d09, 0x0) mlockall(0x1) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50100002905d88a640cf74892235780000"], 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x1068801, &(0x7f0000000400)={[], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@audit}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}, 0x1, 0x76f, &(0x7f0000001900)="$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") umount2(&(0x7f0000000280)='./file0\x00', 0x0) 10m55.366779885s ago: executing program 47 (id=3876): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB='\a\x00', @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000000080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8f, 0x0, 0x100000}, 0x20) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021241300001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000f8120380300000802c000180250001"], 0x13a8}}, 0x400c0) r5 = socket(0x10, 0x80003, 0x0) dup2(r1, r5) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) 10m50.118246729s ago: executing program 48 (id=3916): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf001}, {0xffffffff}]}) getdents(r0, &(0x7f0000001fc0)=""/181, 0xb5) 10m24.770257353s ago: executing program 49 (id=4288): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0x1, 0x6, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) io_setup(0x8, &(0x7f0000000000)=0x0) r4 = eventfd2(0x8000000, 0x80001) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000000)="894a2fca7a0d8541", 0x8}], 0x1) r5 = syz_open_pts(r2, 0x0) r6 = dup3(r5, r2, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x44) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES64=r0, @ANYBLOB="00000000ecc80c25b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000086c0000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='btrfs_sync_fs\x00', r7, 0x0, 0x172}, 0x18) r9 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r10 = io_uring_setup(0x6b66, &(0x7f0000000280)={0x0, 0xffbffffc, 0x10000, 0x1, 0x3bd}) r11 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r11, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r11, 0x4) recvmmsg(r11, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) close_range(r10, r11, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r10, @ANYRES32=r10, @ANYRES16=r7, @ANYRES64=r8, @ANYRES64=r6, @ANYRES8=r0, @ANYBLOB, @ANYRES16=r3], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1000}) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r13}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 10m16.206164889s ago: executing program 50 (id=4190): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=""/51) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="000000000000000095fdf95c82e4c4261115406611d8173f6c678ad60500473dde1e6f3c034812f9be95e03f28e391f15000c5a30b9f9311c24c7ece6473e9d02ac4532cec6df5947a4b47a22ac4193bd2affc5ad543ef540eaa21d30700c18191954b6f6acfaae8d9f002e4471e3274351e31d19ed8df15d6543fce64ed6d2f2196b8bd"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 10m8.082979043s ago: executing program 51 (id=4496): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) 7m22.227002314s ago: executing program 52 (id=6865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}}, 0x20050800) 6m40.708369162s ago: executing program 53 (id=7440): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x1) keyctl$read(0xb, 0x0, &(0x7f0000000100)=""/4096, 0x1000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc082}, 0x4008000) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}}, 0x20050800) 6m31.600194211s ago: executing program 54 (id=7564): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c00010000000000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00'], 0x80}}, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000300)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0x2a9, 0x4, 0x7, 0x58], 0x1, &(0x7f0000000180)=[{}], 0x0, [{}]}, 0x88) 6m21.751112214s ago: executing program 0 (id=7727): perf_event_open(&(0x7f0000000500)={0x1, 0xde, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x7fff, 0x6}, 0x681, 0x2d, 0x0, 0x0, 0x2, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_settime(0x5, &(0x7f0000000280)={r0, r1+10000000}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="010000201000"}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xb, 0x6, 0x3, 0x6, 0x0, 0xa, 0x100, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf0c, 0x4, @perf_bp={&(0x7f0000000040), 0xc}, 0x244, 0x8000000000000000, 0x0, 0x7, 0x1, 0x0, 0xfff, 0x0, 0x9, 0x0, 0x2}, r8, 0xa, r4, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) 6m21.707478917s ago: executing program 0 (id=7729): mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x5c, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40f}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x5c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='rss_stat\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r4) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000700)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xfa\xc2H\xf4\x01~pB[\xcf\x89\xb3\xd9\xd6\x91\xdb\xfcF\xe5\xa6\xc45\xecR{r\x1f\xb5!\xb1\x97\xbe}\xe3\x92\x98\t\x8f\x9b$X\xe1\xcd\xc0\xbb\xb6\xb5\x15\xcf\xee9\xceo\x87O-P\xe8\xb0\x9c\x9b\xe4\x8e\xd9\x05\xfc{\x1b\xc9V\xa9\x179K\x80\x99\xe5\xebp', &(0x7f0000000680)='\xb8\x8b\xadTd\xdcJ\x03\xf7\n\x11x\xf5\x93Q#\xfe\xb4\xeb\xd9/\x90\xad\xc5\xd0\a\xef\x06$*\xf0\v7>\xa8`\xf1)\xec\xba\xb7\x85\xf4^\x15\\\v\xb3 Bn\xed\xc2\x92I\xbb\xfe2\xa0\xc1\xb3\x13p\xa2l', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000580)='\xa3\x04\x00', &(0x7f00000003c0)="c5", 0x1) close(r4) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 6m21.407286429s ago: executing program 0 (id=7730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c00010000000000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r7, @ANYBLOB="080003"], 0x80}}, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000300)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0x2a9, 0x4, 0x7, 0x58], 0x1, &(0x7f0000000180)=[{}], 0x0, [{}]}, 0x88) close_range(0xffffffffffffffff, r3, 0x2) 6m20.492813386s ago: executing program 0 (id=7752): r0 = syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodots}]}, 0x1, 0x221, &(0x7f00000002c0)="$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") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x10000, 0x1, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000005c0)='kfree\x00', r5}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000006c0), 0x0, 0x99, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xb6, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYRES8, @ANYRES64=0x0, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe1dfe9bc70000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x40, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) 6m20.356527536s ago: executing program 0 (id=7756): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x63, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x4000844) socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r4 = io_uring_setup(0x4f01, &(0x7f0000000180)) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty, 0xfffffffe}, 0x1c) listen(r5, 0x400000001ffffffd) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/2, 0x2) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) request_key(&(0x7f0000000200)='user\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='/selinux/enforce\x00', 0xfffffffffffffffd) 6m20.16113532s ago: executing program 0 (id=7759): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000004, 0x13, 0xffffffffffffffff, 0x487df000) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b0000000500"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') process_mrelease(0xffffffffffffffff, 0x0) 6m20.114263884s ago: executing program 55 (id=7759): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000004, 0x13, 0xffffffffffffffff, 0x487df000) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b0000000500"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') process_mrelease(0xffffffffffffffff, 0x0) 6m17.884300477s ago: executing program 3 (id=7784): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x747, 0x0, @perf_config_ext={0x0, 0x25}, 0x0, 0x3, 0x63f, 0x7, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000280)={0x1d, r1}, 0x10) 6m17.698586892s ago: executing program 3 (id=7786): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}}, 0x20050800) 6m17.502184856s ago: executing program 3 (id=7787): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$hwrng(0xffffffffffffff9c, 0x0, 0x4000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socket$kcm(0x21, 0x2, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 6m17.455728489s ago: executing program 3 (id=7788): r0 = syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodots}]}, 0x1, 0x221, &(0x7f00000002c0)="$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") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x10000, 0x1, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000005c0)='kfree\x00', r5}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000006c0), 0x0, 0x99, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xb6, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYRES8, @ANYRES64=0x0, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe1dfe9bc70000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x40, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) 6m17.081030466s ago: executing program 3 (id=7789): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c00010000000000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r6, @ANYBLOB="080003"], 0x80}}, 0x0) 6m16.76720817s ago: executing program 3 (id=7790): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)='8', 0x1}], 0x20, 0x14, 0x0) syz_io_uring_submit(r2, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000001000) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6m16.753962161s ago: executing program 56 (id=7790): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)='8', 0x1}], 0x20, 0x14, 0x0) syz_io_uring_submit(r2, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000001000) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5m54.362950575s ago: executing program 8 (id=7982): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe(&(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 5m54.324460578s ago: executing program 8 (id=7983): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c00010000000000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r5, @ANYBLOB="080003"], 0x80}}, 0x0) 5m52.976987357s ago: executing program 8 (id=7999): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000100)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc8}}, 0x20050800) 5m52.817793558s ago: executing program 8 (id=8001): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r0, &(0x7f0000001280)="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"}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='cpu\t&0&&\t') socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001200)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = io_uring_setup(0x4f01, &(0x7f0000000180)) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty, 0xfffffffe}, 0x1c) listen(r5, 0x400000001ffffffd) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) 5m52.747284454s ago: executing program 8 (id=8004): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRES8=r2, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES8=r0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r4], 0x20}}, 0x0) 5m52.367108861s ago: executing program 8 (id=8007): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x1a) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @alu={0x4, 0x1, 0xb, 0x7, 0xb, 0x50, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x0, 0xa, 0x4, 0x1, 0x68, 0x1}, @jmp={0x5, 0x0, 0x9, 0x3, 0x8, 0xc, 0xfffffffffffffff0}]}, &(0x7f0000000400)='syzkaller\x00', 0x2, 0xde, &(0x7f0000000780)=""/222, 0x40f00, 0x5, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x2, 0x8, 0x2, 0xa}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[r6, r4, r6, r6, r6, r5, r5], &(0x7f0000000880)=[{0x1, 0x4, 0x0, 0x2}, {0x3, 0x1, 0xf, 0x6}, {0x4, 0x1, 0xd, 0x6}], 0x10, 0x7, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000ac0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x14, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd130}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='syzkaller\x00', 0x401, 0x1000, &(0x7f0000001340)=""/4096, 0x41100, 0x20, '\x00', r7, 0x0, r5, 0x8, &(0x7f0000000b00)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000b40)={0x3, 0x8, 0x7, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b80), 0x0, 0x10, 0x7, @void, @value}, 0x94) sendmmsg$sock(r2, &(0x7f00000003c0)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @multicast1}, 0x0, 0x4, 0x1}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)="078a4d467367c50a31f4872823a02c9adeda9ac604655998fe66bd889e0bea09ee1a5011fd2f3a6450ef5f82699202ddf0aad5de5d13d25792a873c27b1dbd404a05c9e8e8c82a801d520c647ff7bffdf8e8f217b312388f5a37defbc504543999857ffd90b386a3b76276dd6fcaad8940440c0623eb6f1ae20883b5dd610d5c0f75eb6ed7a86523ecb0033f474adffb7f7810e362364f0ca467ecd32e06768ba0b37b761216dde29e789e4cf1001bea0d1c8b6c821e9bca98bf545c76c8ff5006380d21e6826c824de973db8271ae6f33deeb815ee4a69867bab7bdc010383f581a6264113177b1c9ee707283543d5f1924", 0xf2}], 0x1}}], 0x1, 0x20048082) 5m36.313379939s ago: executing program 57 (id=8007): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x1a) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @alu={0x4, 0x1, 0xb, 0x7, 0xb, 0x50, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x0, 0xa, 0x4, 0x1, 0x68, 0x1}, @jmp={0x5, 0x0, 0x9, 0x3, 0x8, 0xc, 0xfffffffffffffff0}]}, &(0x7f0000000400)='syzkaller\x00', 0x2, 0xde, &(0x7f0000000780)=""/222, 0x40f00, 0x5, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x2, 0x8, 0x2, 0xa}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[r6, r4, r6, r6, r6, r5, r5], &(0x7f0000000880)=[{0x1, 0x4, 0x0, 0x2}, {0x3, 0x1, 0xf, 0x6}, {0x4, 0x1, 0xd, 0x6}], 0x10, 0x7, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000ac0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x14, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd130}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='syzkaller\x00', 0x401, 0x1000, &(0x7f0000001340)=""/4096, 0x41100, 0x20, '\x00', r7, 0x0, r5, 0x8, &(0x7f0000000b00)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000b40)={0x3, 0x8, 0x7, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b80), 0x0, 0x10, 0x7, @void, @value}, 0x94) sendmmsg$sock(r2, &(0x7f00000003c0)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @multicast1}, 0x0, 0x4, 0x1}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)="078a4d467367c50a31f4872823a02c9adeda9ac604655998fe66bd889e0bea09ee1a5011fd2f3a6450ef5f82699202ddf0aad5de5d13d25792a873c27b1dbd404a05c9e8e8c82a801d520c647ff7bffdf8e8f217b312388f5a37defbc504543999857ffd90b386a3b76276dd6fcaad8940440c0623eb6f1ae20883b5dd610d5c0f75eb6ed7a86523ecb0033f474adffb7f7810e362364f0ca467ecd32e06768ba0b37b761216dde29e789e4cf1001bea0d1c8b6c821e9bca98bf545c76c8ff5006380d21e6826c824de973db8271ae6f33deeb815ee4a69867bab7bdc010383f581a6264113177b1c9ee707283543d5f1924", 0xf2}], 0x1}}], 0x1, 0x20048082) 3m55.204479113s ago: executing program 4 (id=9825): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c00000000000000008500f0ffffff000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x0, 0x9, 0x47, 0x8000, 0x35, @private0, @local, 0x87a0, 0x7, 0xb, 0x7}}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x8}, 0x18) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0x8}, 'port1\x00', 0x22, 0x0, 0xffff, 0x7, 0x598, 0x4000036e, 0x0, 0x0, 0x2, 0x46}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000002970a7be919dd4fe00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1a0682) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000340)={0x8000000, 0x0, 0x0, 'queue1\x00'}) read(r7, &(0x7f00000001c0)=""/176, 0xb0) r11 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000280)={0x42, 0xfffffffd}, 0x10) r12 = socket$tipc(0x1e, 0x5, 0x0) r13 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r13, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x5}}, 0x10) sendmsg$tipc(r12, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) write$sndseq(r10, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {0x0, 0xfd}, {0x80}, @raw8={"a357b6b140cbb6215dd33459"}}], 0x1c) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b3692930208", 0x2b, r5) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c00000014000100ffffffffffdbdf250a00a100", @ANYRES32=r4, @ANYBLOB="1400010000000000010dc148cdc60006abaa19b203476d70137cf774ec0ea82109ff4b685cce9e196892dd6b5889f20c5283af4a3a44a6457b7c42b1e040cbca7a869ad11be0d28e8c420543956b982428b044930c8788b251d8089cb59ff4486a8b27e03f502b14037214820cd51c9dc59886f215aaa34c14487238aee003182a9554f807039ee0340a5622228728415349b176728b0b43483a0e58e1f0bf3951dd3243d2ccdc08b2a5c558b14f45df852dd61f6507"], 0x2c}}, 0x24005040) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) 3m55.001686278s ago: executing program 4 (id=9826): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x9}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5c9, &(0x7f0000001000)="$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") 3m53.786703117s ago: executing program 4 (id=9841): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40084) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1c0000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r5, &(0x7f0000000140)='./file1\x00', r5, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3m53.73937173s ago: executing program 4 (id=9844): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='jbd2_write_superblock\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000a538ae46463208004500001c000400000002907809000000e000000111109078ffffffff"], 0x0) syz_io_uring_setup(0x5d15, &(0x7f00000014c0)={0x0, 0x9353, 0x80, 0x0, 0x3e3}, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000040)=0x5, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_io_uring_setup(0x4abd, 0x0, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r1 = open(0x0, 0x30000, 0x1b0) getdents(r1, &(0x7f00000004c0)=""/105, 0x69) 3m53.692405344s ago: executing program 4 (id=9847): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file1\x00', r1}, 0x18) (fail_nth: 4) 3m53.343241639s ago: executing program 4 (id=9848): readlink(0x0, 0x0, 0x0) unshare(0x22020400) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_bp={0x0, 0x764922f6ef795283}, 0x8, 0x0, 0x409, 0x4, 0x0, 0x40, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) keyctl$chown(0x4, 0x0, 0xee00, 0xffffffffffffffff) getrlimit(0x0, &(0x7f0000000080)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f00000001c0)=0x3fd, 0x4) setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x3, 0x28, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0xc6}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r5 = dup(r3) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[], 0x7c8) sync() readv(r2, &(0x7f0000000000)=[{&(0x7f0000000200)=""/169, 0xa9}], 0x1) r6 = dup(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r7 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r7, 0xee72) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000340)={0x0, 0x3, 0x8, 0x101, 0x3, 0x0, [{0x0, 0x3, 0x1, '\x00', 0x100}, {0x8, 0x41b9cddf, 0x915, '\x00', 0x200e}, {0x0, 0x7, 0x0, '\x00', 0x1400}]}) sendfile(r6, r7, 0x0, 0x8000fffffffe) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f00000000c0)={0x0, 0x6, 0xfffffffd, 0xfffff97d, 0x3, "9ab5d27fc5ff44f9961b9b4dfe6fb1d672cbbe", 0x1, 0xfffffff7}) 3m37.269547359s ago: executing program 58 (id=9848): readlink(0x0, 0x0, 0x0) unshare(0x22020400) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_bp={0x0, 0x764922f6ef795283}, 0x8, 0x0, 0x409, 0x4, 0x0, 0x40, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) keyctl$chown(0x4, 0x0, 0xee00, 0xffffffffffffffff) getrlimit(0x0, &(0x7f0000000080)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f00000001c0)=0x3fd, 0x4) setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x3, 0x28, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0xc6}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r5 = dup(r3) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[], 0x7c8) sync() readv(r2, &(0x7f0000000000)=[{&(0x7f0000000200)=""/169, 0xa9}], 0x1) r6 = dup(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r7 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r7, 0xee72) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000340)={0x0, 0x3, 0x8, 0x101, 0x3, 0x0, [{0x0, 0x3, 0x1, '\x00', 0x100}, {0x8, 0x41b9cddf, 0x915, '\x00', 0x200e}, {0x0, 0x7, 0x0, '\x00', 0x1400}]}) sendfile(r6, r7, 0x0, 0x8000fffffffe) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f00000000c0)={0x0, 0x6, 0xfffffffd, 0xfffff97d, 0x3, "9ab5d27fc5ff44f9961b9b4dfe6fb1d672cbbe", 0x1, 0xfffffff7}) 2m31.103288627s ago: executing program 5 (id=10792): clock_nanosleep(0x7, 0x1, &(0x7f0000000000)={0x77359400}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) close_range(r1, r2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f00000002c0)={r0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001bc0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xe}, {}, {0x8, 0xffe0}}}, 0x24}}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$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") openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x105840) 2m25.870482831s ago: executing program 5 (id=10804): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) modify_ldt$write(0x1, &(0x7f0000001000)={0x0, 0x20101800, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x18) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) 2m25.847846593s ago: executing program 5 (id=10805): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000001000000000000000018010000", @ANYRES32, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1039c1, 0xd4) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='mpol=interleave']) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4000000000000000, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r3}}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x80, 0x7, 0x2b, @empty, @remote, 0x700, 0x40, 0x4c8a, 0x7fffffff}}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 2m25.75808376s ago: executing program 5 (id=10808): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@resgid}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x580, &(0x7f00000003c0)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000140)='./file0/file0\x00', r0, &(0x7f00000002c0)='./file1\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = syz_clone(0x1000, &(0x7f0000000080)="57c24bcbec55928cdc46b40d8e0bcf9a0d988075aaa7454ca48a01c227a14f851ea3406fcb2d9b0d2202cb59ed2bebd6a789bccb744328711e4528b246bebe1851050054d0ff5d056a3519f3152da308e72631f4f0f97a22493f4be3ff71ba7410521176ddbca004ae0580bd9c70c6c018c191b6291f1bc016941f78f18841c116183b355ef9a5ee4a5818cc63ad7e28aa41dabbf3ff1b17b8c0fb3ebe0bc8c4c2fbf77dbce5433ecfa759102e6831fc5fd76042734989", 0xb7, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="c78584421e4c5b135b2c7b1bee63311167") ptrace$setregs(0xf, r1, 0xfffffffffffffff9, &(0x7f0000000940)="9d6066812698286ced81f1937b5211d03d005a160b006305ad2aa328d4e45a6bb23d41bb0857f9958d85d4b1963b18d009029b61fb865e3232e3d2d9fa9ed0467a88edfeaa65019a12cd6f203e2ffaedda36dbf7caf06b10c56460aac89f7d707a9caa3d039377bce40a21cb4f5ee5ea115c6be0524d7cb5e6633d34deb6ec42f506f7a0e0cfe1e7bb3c096b296b929d76dd3db6325c738418ce3a47bf261b168f2aa93cc5eea16dbef715d43a5fa17b1eb19598a51e473bbe9b0fa0a9002a555b03bcc3d041535b77da3c162c0e4a3990f24a6606b2ad0974ed5f9f4591aced4cb30449619e9c7993fc01c1724c9b7f09b4d2a9e7d03765938e96d82ecd60") migrate_pages(0x0, 0x3, &(0x7f0000000280)=0x101, &(0x7f00000002c0)=0x5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) 2m25.561138314s ago: executing program 5 (id=10812): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c00000013000100000000000000010000000000", @ANYRES32=r4, @ANYBLOB="0000d400000000000a000100003b"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000060ef708d6b1591094df3c0b39ae1d8af01da7bd9dfa81b7faca59334120f59848034db3437ebf183244d69c23f3e5bdc7d2e521ee26af3615b671163de3788"], 0x50) 2m22.822269195s ago: executing program 5 (id=10848): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x3}]}}]}, 0x98}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r4 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMIWAIT(r5, 0x5453, 0x7cb7562f2d67) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r7, &(0x7f0000000000)="fa", 0xfffffdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700382c00fe800000000000000000000000000000ff0200000000000000000000000000013c004a00000000002e0404020228b500fe8000000000000000000000000000aafc0000000000000000000000000000008100907800000000"], 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000007580)={0x3c, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x800}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x3c}}, 0x4000854) 2m22.774752739s ago: executing program 59 (id=10848): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x3}]}}]}, 0x98}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r4 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMIWAIT(r5, 0x5453, 0x7cb7562f2d67) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r7, &(0x7f0000000000)="fa", 0xfffffdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700382c00fe800000000000000000000000000000ff0200000000000000000000000000013c004a00000000002e0404020228b500fe8000000000000000000000000000aafc0000000000000000000000000000008100907800000000"], 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000007580)={0x3c, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x800}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x3c}}, 0x4000854) 2.496329947s ago: executing program 1 (id=13468): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000059baf100000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000b"], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80, 0x2, 0x8, 0x8, 0x6, 0xafb8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x31c6d6e942e24b9a) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r3}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000004c0)='svcrdma_decode_rseg\x00', r6, 0x0, 0x9}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e00000004180000650100008001000081900000664d2eff3a15f14c471309f86734ec4b7cb700a493335c68993af11dc68be568d40ddd76e502529789a571e1e331e7f0ba4406d21ed8f63c1da9de295941630edb979a2300149007fc829f78ef3f110fb71c5d98eb7d00223da397edeee1cd34813a2432d2d47eea71ae82e1252f39880457c33392f916b5544ef54f40c790499127a69ddf4fd7b3356cee93084476", @ANYRES32=r2, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0000000005000000000000000e00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r7}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) link(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 2.294446362s ago: executing program 1 (id=13474): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r1}, 0x10) r2 = io_uring_setup(0x5b77, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x400000, 0x137}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000031c0)) close_range(r2, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1, 0x0, 0xfffffffffffffd80}, 0xc1) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@deltaction={0x38, 0x18, 0x1, 0x4, 0x0, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x64, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}}, 0x8041) memfd_create(&(0x7f00000000c0)='-:-..,^.!\x00', 0x6) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002200000228bd7000ffdbdf250a018828542f0edef9141000"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c051}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0xfffffffffffffdc8, r9, {0x8000000}}, './file0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000060000000400000000000007000008"], 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ptrace(0x8, r5) ptrace$setregs(0xd, r5, 0x0, 0x0) ptrace$poke(0x4, r5, 0x0, 0x3) 2.195243219s ago: executing program 1 (id=13477): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 2.142083483s ago: executing program 1 (id=13481): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@debug}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x61c, &(0x7f0000000640)="$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") (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), 0x4) 2.078461578s ago: executing program 1 (id=13483): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in=@multicast1, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe8) r1 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRESDEC, @ANYRESHEX=r1], 0x1, 0x522, &(0x7f0000000a80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.903093131s ago: executing program 2 (id=13490): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@grpquota}, {@lazytime}, {@data_err_abort}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000a40)="$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") r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x1000000}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5, 0x1300) 1.902501171s ago: executing program 1 (id=13491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendmsg$inet6(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="2f6c62fdf406a1a017d356c35c10e4d1be87033978d275293527325d1cd47e250c", 0x21}], 0x1}, 0x0) 1.839208675s ago: executing program 2 (id=13492): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0x80080400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) 1.838665766s ago: executing program 6 (id=13493): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x141) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syslog(0x3000000, 0x0, 0x0) 1.819536297s ago: executing program 6 (id=13495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c00010000000000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r6, @ANYBLOB="080003"], 0x80}}, 0x0) 1.131173807s ago: executing program 7 (id=13497): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000018"], 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_setup(0x2004, &(0x7f0000000680)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180), 0x200000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) listen(r0, 0x5) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 1.075317021s ago: executing program 7 (id=13498): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000040000000000080000100850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="f000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000d000128009000100766c616e00000000c000028006000100000000"], 0xf0}}, 0x0) 768.584064ms ago: executing program 2 (id=13500): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vxcan1\x00', 0x400}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000180), 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x2, 0x4) syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1452, 0x0, 0x400002, 0x3a6}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/196, 0xc4, 0xdf0e}, 0x7}], 0x1, 0x40002122, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r5, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x9d, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x2004c891) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7}, &(0x7f0000000380), &(0x7f00000003c0)=r8}, 0x20) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000540)=ANY=[], 0xed) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', r1, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffde, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r11, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 741.675536ms ago: executing program 7 (id=13502): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x24, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x6}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x21, 0x0, [{0x0, 0x5, "4b6cef"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}]}, @timestamp={0x44, 0x4, 0x56}]}}}}}}}, 0x0) 730.726757ms ago: executing program 6 (id=13503): r0 = socket$rxrpc(0x21, 0x2, 0xa) fdatasync(r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000002c0), 0x4) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffffffffe26, &(0x7f00000000c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x18, 0x4c00}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x100}, 0x18) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x14ba82, 0x18) write$cgroup_int(r5, &(0x7f0000000000)=0xfe8e, 0x12) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x1, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r6}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) recvmmsg(r6, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) socketpair(0x22, 0x2, 0x11, &(0x7f0000000000)) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) futex(&(0x7f0000000040)=0x2, 0x0, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x1, 0x1) 682.87426ms ago: executing program 7 (id=13504): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendmsg$inet6(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="2f6c62fdf406a1a017d356c35c10e4d1be87033978d275293527325d1cd47e250c", 0x21}], 0x1}, 0x0) 642.008013ms ago: executing program 9 (id=13505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000030000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a3200000000240b0000060a010400000000000000000100000008000b4000000000fc0a048028000180080001006c6f67001c0002800e00024073797a6b616c6c65720000000800054000000008d00a01800e000100696d6d656469617465000000bc0a0280640002804c0002800900020073797a32000000000900020073797a310000000008000180fffffffc0900020073797a31000000000800034000009c920900020073797a300000000008000180ffffffff14000280080003400000000808000180fffffffb0800014000000002080001400000000b500002804b000100fa62d7ba9ceeacf9aa4f832b78f35731f355d63e192a72aef5e68a05d1b806151b6bd1e2d74abafd383790ad363fdc1b7766748630b48f9beefdb33c86d5835a470b5ffd20d7e9006c0102805c00028008000180fffffffe0900020073797a30000000000900020073797a320000000008000180ffffffff0900020073797a320000000008000180fffffffd0900020073797a310000000008000180fffffffc0800034000000e5628000280080003400000000608000340000000070900020073797a320000000008000180fffffffe540002800900020073797a320000000008000180fffffffe0800034000000000080003400000000008000340000000090900020073797a310000000008000180fffffffe080003400000800108000180fffffffd8e000100818ce881ff18470752e86442e8b77ddcfc7a4c87f05cd36147be26c85cc854cc117db1906007a5a8c298f4724c8c743d46ec7f3ba478d9dfb10bbe9e4fdfc2188d62db9bb1364fed383fe0b0c3fbbab83959470cb0ffb14765c32f10b54d99531d04caaf264214997543a1c63637d9a3a20b7ce9312e545626eb375c88462c198f35cf8a11616de4fa0c000098020280eb00010099c8e680eb4d0e7f78e1fb62226ae541d997c8cb51c5ebd0bb7e2730b61310dcd7525807288a7ad8c00f6aa230a1d1b876ddb0e188384e7c79cd8af94a02451a04d8f116bde38077da45650d82bdd1767b03e3f35bc4a5769e659d8cdb6d9d9d717c78b50f6b3ac899b07a9eaf2c989654de7d6609299bad01ca1f3fa8b6229a6c69627a07f627880e902231b20368f3ae64fd12fc37afeb95f14a4dc3d0bc5f6e2afd0fc8ef6982054cffa703ee1376654019ad6d2add9052c5d2f2e0ba3318f931b2c5f2dcce5cbca6093c64d23b64e2f2061da3dd5983644280de22d592b63b5d7f6b571beb005400010041bbc64da6bacaad1bebec23352accccbca40d6ba87943f82df945bf4ccc5250a0c2b2cb13793380f424b280bfb960885af6df4afa26efa8fcd7a1243389ef3fcf1d709f775a9cd1dfb2b84fd03e5d70f800010001950b7c0ec30534e476b721ba6e82d03078fe63b683918ecbbb9c339c8cdd63689339ac43acd5973f4aac8720a98d18e13b98e11e291f3f3621ed29c717639f84bdd28810da6ae30538775f15e00133741e9de3f96f69ab363752fa962b3c71041ba1e463a91d782a968d9febb648b66e71a6827c53b3be014b785f61c4fd46fef00658f64cdd465edb61ba4c5f00849b2935c485da99a38489ecc29837433ac5446c3922d73153fd8fb2368a5ce4201760ca6778f570b7fcb38be633a02d57c5884b6bcbaf3bc28ca7686edb5d59e1b823a8f0f5ff788625995d51c16413783c6290a9714bd4dcbd2a388139f3e46f69916f335c0002800900020073797a3000000000080003400000000908000180000000000900020073797a3000000000080003400000000808000180fffffffd080003400000000408000340fffffff908000180fffffffb0800034000000003a80002801c000280080003400000020008000340fffffff508000340000000001400028008000340000000050800034000000007720001001c2cce526d2ee30fb33f426450278cb35ac06b1cef15fefc26b5c17a8c9251bed316fccb5588f2e071fc355537fcf458cf14217f16ce4c12a4b559f3e807c94c6cc4f418baebc6024b74b9dbc5ef66dbbe91812ea247db80670c101ed494f105ad9c09b4eaf8d5c133b46a311c1a00001c0302802000028008000180fffffffc0900020073797a320000000008000340000000035c00028008000180fffffffc08000180fffffffc08000180fffffffb0900020073797a300000000008000340000000060900020073797a30000000000900020073797a31000000000900020073797a310000000008000180fffffffbf6000100330e5af714359ac9da33381a13071148dbe4293800e6be0290efbb549850cda132ca27a55553fd77c3067504c4596086f4001f53d49e8111395ebccb983c6b04735a58ab2617dfc62123b09c8dc5a47154667414dc28e8369829764b2e3cc23303a882890bad6d3a70d9e15701ec8c4c15a46d38c9ed6bc8658f8a45a02083f563324a27c649bab7cbcb485c289bd8df0a040128df6891ab48095977e0463f8e3ed7ba6df976ee30768954dfeb3f08c942b2c9384aa0b78baf92ecf5e4d73788afb1bc5a8f7c4b454897cd8bcac7f19cdd949fac66756da3b9311e13362eee317df853f6bc7e4638eb145a1484d3780e09b50000c8000100d5c1e4159bf770e02e6e1ebe911d7513709588175328d2e11f2ebf3f6967c49bedcb2a5459a45272bb8084e3bb55ea7a80166d97ec16457ed7d2a834d9aafdb2a54110ddc7975eaeda4f897ec7d533c27df0ce5ff92cfedadc67fff850ee5d07822d72b27af229d17ad2f8d802ae40d98f373e348a04b4f0270c71f82319de3a0331f165204896e0e448cf7ea0f8eb32a312fda6716f72f0234742fe6708ad0adf587ea21d94b8c8f5080028dda1e21d3d9ac82d8edd12941631b72b692ecc262d6ae12393000100c56deda494a09379df59bad8f0f17376b307ce49571034af728b1c4bf694e3b91406b976944238ab36ccaf40e3d92952ba87aa27af6353a82868c9508577a1b6a349fce75b3e4952b04b9527f496b5555e6db110dec07430b01446635eff12f136dbcb54fd4dc90b02e1bc6488ed74efd9eeb1b6de6e2a234f6c323df5c28a0352d03b34ee4f64ab614078125aa3cc0048000280080003400000000c08000340000000010900020073797a310000000008000180fffffffd0800034000008000080003400000dc5b08000180fffffffc08000180fffffffb2c0202804b000100cece2d8ff50c68c1060c2e691ddc50c6d87b46b4e5f6695010163d98bac2d9d7693cff0ec1e2107f58d3c305c78e5a596df92f1dbe80793dce5424be9e7951890023db7d0b9b2700e5000100f46e4b21dd4b92221713eece21b0e3bfb3fe995725eca78713a8d11ac82a6aefeeeab4720bd136479523ccafa34771afedeafc55275842bb7adb37ff3c93b19d9d5139f8b67ee81e380faa9506e6c8e5956cf7efc9828438d340aa4bfe771769c6ddb2f8c31049c1fc37e8f28812ea0aadd0caa7e32f6bb4b2b7a4473e5fa876c87bf285a503660ea12a0cfff6863a87c64ea83c31e737e278edcad77cb964828c7049d335e25156fd4d1c2faada6a8363794fe487155fbfd7c2e1b8504d4a744357734f51fca0426ffe929280df27411f8a90a067b285e970fa1e403722ae91dd000000f400010073e22ba6603d1c92836887468b100c2dc430efeb2ef19c66bd0582fe94df7b5a20292fdfbd2009980dbf9651685f7713bfb0f42583e452670f29e2cabf848fcdcb7a2067f0b257efd7dc927e540584b08f026e14be231afa797e36410d8ad6cbced8c5d2cce2f5a8b75713e57b3161b5b4ce78f283bf59a04f90bc1c5a4371abed0124c621ecb51b6166ad39f14216c09456232b7ea8dd7058bbbeae"], 0xb98}}, 0x0) 641.589853ms ago: executing program 2 (id=13506): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r2, 0x301, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x7, 0x31}, @val={0x8}, @val={0xc, 0x99, {0x5, 0x5d}}}}}, 0x30}}, 0x4000000) 641.372953ms ago: executing program 6 (id=13507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0x18e02, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000018110000", @ANYRESHEX=r0, @ANYRES64=r1], &(0x7f0000000300)='syzkaller\x00', 0x5910, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 620.836375ms ago: executing program 7 (id=13508): set_mempolicy(0x4000, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x200cc02, &(0x7f0000000080), 0x1, 0x570, &(0x7f00000010c0)="$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") r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r0}) (fail_nth: 2) 569.081809ms ago: executing program 6 (id=13509): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0x80080400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) 544.288441ms ago: executing program 9 (id=13510): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x800, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) (fail_nth: 3) 496.110054ms ago: executing program 2 (id=13511): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x9, 0xffff}}}, 0x24}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) sendmmsg$inet(r5, &(0x7f0000000e80)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) write$binfmt_misc(r5, &(0x7f0000000300), 0xfdef) 492.851134ms ago: executing program 6 (id=13512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="80000000100003040000", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c00010000000000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r6, @ANYBLOB="080003"], 0x80}}, 0x0) 331.038926ms ago: executing program 9 (id=13513): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', &(0x7f0000000600)={0x101002, 0x10c}, 0x18) execveat(r2, &(0x7f0000000640)='./file2\x00', &(0x7f0000000b80)={[&(0x7f0000000680)='kmem_cache_free\x00']}, &(0x7f0000000b00)={[&(0x7f0000000700)='syzkaller\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)='illinois\x00', &(0x7f00000008c0)='illinois\x00', &(0x7f0000000900)='cdg\x00', &(0x7f0000000940)='/dev/snd/seq\x00', &(0x7f0000000980)='.@%\x00', &(0x7f00000009c0)='kmem_cache_free\x00', &(0x7f0000000a00)='kfree\x00']}, 0x100) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) truncate(&(0x7f0000000380)='./file2\x00', 0x104) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000f32c7ddd9ca69a3ec268a625070e433315a5075ece574308c5a349b7a8e425d8a9629e4c655d1001edda85d0d3f1c4d8dc652ea9113cc3fc745958dc43dbe254b08fd4d5c170fb402fcf1b1e1f9c298766263ceb465b31bde63590c88e2b37a465ef230015e2c79b000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000300), 0x2) close(r8) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r9, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r8, 0x40bc5311, &(0x7f0000000180)={0x80, 0x1, 'client0\x00', 0x1, "896c81dd59ff28d2", "e5dbc741536b0e2fbb12e9338ec8dcb3e07c903fc30e8a11d477e3fb04eb2f74", 0x3, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x6}, 0x18) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000140), 0x2) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) 318.281297ms ago: executing program 2 (id=13514): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@dev, @in6=@mcast2}}, {{@in6=@private2}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in=@multicast1, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe8) r1 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRESDEC, @ANYRESHEX=r1], 0x1, 0x522, &(0x7f0000000a80)="$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") getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) lstat(&(0x7f0000000400)='./file1\x00', &(0x7f0000000780)) getgroups(0x1, &(0x7f0000000800)=[0xee01]) lchown(&(0x7f0000000180)='./file0\x00', 0xee01, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000980)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 258.822681ms ago: executing program 7 (id=13515): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006ee9ced6e002acd5fb2f7b568a99f15f54edac490daed4909727d65057ec2fec6cc369f77be9c2859cc919d1f9dda84b95167111b4d6ea8e6612e7046c5a88368726b5abb9117ba8300536f9b19991a407c814f8b84f793d079873ece604391cc0061d4ca927a0472c7d9dd6f4b1a987694c07b98312018f575d43e37bd7c80e541dd8d00b802d90d96e4460a5470b3f95a8f849870a01ac27"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) 258.512501ms ago: executing program 9 (id=13516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$security_selinux(r0, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:default_t:s0\x00', 0x1f, 0x1) 116.883662ms ago: executing program 9 (id=13517): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendmsg$inet6(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="2f6c62fdf406a1a017d356c35c10e4d1be87033978d275293527325d1cd47e250c", 0x21}], 0x1}, 0x0) 0s ago: executing program 9 (id=13518): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x73, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x10000, 0xe083}}, './file0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r6, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) kernel console output (not intermixed with test programs): comm syz.9.12865: corrupted inode contents [ 930.536681][T10603] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3006: inode #19: comm syz.9.12865: mark_inode_dirty error [ 930.550384][T10603] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3009: inode #19: comm syz.9.12865: mark inode dirty (error -117) [ 930.563801][T10603] EXT4-fs warning (device loop9): ext4_evict_inode:276: xattr delete (err -117) [ 930.600081][ T3668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.739510][T10618] loop9: detected capacity change from 0 to 512 [ 930.747450][T10618] EXT4-fs (loop9): orphan cleanup on readonly fs [ 930.754340][T10618] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.12868: bg 0: block 248: padding at end of block bitmap is not set [ 930.769019][T10618] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.12868: Failed to acquire dquot type 1 [ 930.780960][T10618] EXT4-fs (loop9): 1 truncate cleaned up [ 930.789032][T10618] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 930.804383][T10618] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 930.816671][T10618] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 930.842355][ T3668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.864396][T10622] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.132926][T10629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.144040][T10629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.170244][ T4779] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 931.209761][T10636] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 931.218123][T10636] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 931.507678][T10654] loop7: detected capacity change from 0 to 2048 [ 931.639895][T10661] loop7: detected capacity change from 0 to 2048 [ 931.845710][T10674] netlink: 172 bytes leftover after parsing attributes in process `syz.2.12892'. [ 932.298346][T10684] loop2: detected capacity change from 0 to 512 [ 932.330694][T10684] EXT4-fs (loop2): orphan cleanup on readonly fs [ 932.354415][T10684] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.12896: bg 0: block 248: padding at end of block bitmap is not set [ 932.385746][ T4771] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 932.401402][T10684] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.12896: Failed to acquire dquot type 1 [ 932.434604][T10684] EXT4-fs (loop2): 1 truncate cleaned up [ 932.445370][T10684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 932.492966][T10697] netlink: 200 bytes leftover after parsing attributes in process `syz.6.12902'. [ 932.524323][T10684] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 932.559336][T10684] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 932.616136][ T5180] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.654404][T10703] tmpfs: Bad value for 'mpol' [ 932.846026][T10726] loop2: detected capacity change from 0 to 512 [ 932.853982][T10726] EXT4-fs (loop2): orphan cleanup on readonly fs [ 932.862278][T10726] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.12915: bg 0: block 248: padding at end of block bitmap is not set [ 932.877487][T10726] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.12915: Failed to acquire dquot type 1 [ 932.892158][T10726] EXT4-fs (loop2): 1 truncate cleaned up [ 932.898464][T10726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 933.011088][T10726] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 933.029546][T10726] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 933.054856][ T5180] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.076285][T10732] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 933.076285][T10732] program syz.2.12916 not setting count and/or reply_len properly [ 933.564546][ T4775] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 933.801603][T10750] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 933.810541][T10750] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 933.996671][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 933.996686][ T29] audit: type=1326 audit(2000000020.756:56839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.9.12925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c71acde9 code=0x7ffc0000 [ 934.061485][T10767] loop9: detected capacity change from 0 to 512 [ 934.100150][ T29] audit: type=1326 audit(2000000020.756:56840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.9.12925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c71acde9 code=0x7ffc0000 [ 934.124638][ T29] audit: type=1326 audit(2000000020.756:56841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.9.12925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8c71acde9 code=0x7ffc0000 [ 934.149274][ T29] audit: type=1326 audit(2000000020.756:56842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.9.12925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c71acde9 code=0x7ffc0000 [ 934.173124][ T29] audit: type=1326 audit(2000000020.756:56843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.9.12925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c71acde9 code=0x7ffc0000 [ 934.197536][ T29] audit: type=1326 audit(2000000020.756:56844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.9.12925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8c71acde9 code=0x7ffc0000 [ 934.221943][ T29] audit: type=1326 audit(2000000020.756:56845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.9.12925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c71acde9 code=0x7ffc0000 [ 934.246380][ T29] audit: type=1326 audit(2000000020.756:56846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.9.12925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c71acde9 code=0x7ffc0000 [ 934.271078][ T29] audit: type=1326 audit(2000000020.756:56847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.9.12925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8c71acde9 code=0x7ffc0000 [ 934.295561][ T29] audit: type=1326 audit(2000000020.756:56848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.9.12925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c71acde9 code=0x7ffc0000 [ 934.324425][T10767] EXT4-fs (loop9): orphan cleanup on readonly fs [ 934.334105][T10767] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.12928: bg 0: block 248: padding at end of block bitmap is not set [ 934.369446][T10767] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.12928: Failed to acquire dquot type 1 [ 934.382948][T10767] EXT4-fs (loop9): 1 truncate cleaned up [ 934.389409][T10767] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 934.426619][T10767] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 934.453550][T10767] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 934.493870][ T3668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.580724][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12932'. [ 934.814648][ T4775] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 934.877680][T10808] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.12941'. [ 934.957777][T10819] loop2: detected capacity change from 0 to 128 [ 934.965874][T10817] SELinux: +}[@ (10817) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 934.998005][T10819] FAULT_INJECTION: forcing a failure. [ 934.998005][T10819] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 935.011546][T10819] CPU: 1 UID: 0 PID: 10819 Comm: +}[@ Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 935.011582][T10819] Tainted: [W]=WARN [ 935.011589][T10819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 935.011676][T10819] Call Trace: [ 935.011683][T10819] [ 935.011693][T10819] dump_stack_lvl+0xf2/0x150 [ 935.011727][T10819] dump_stack+0x15/0x1a [ 935.011801][T10819] should_fail_ex+0x24a/0x260 [ 935.011839][T10819] should_fail_alloc_page+0xfd/0x110 [ 935.011888][T10819] __alloc_frozen_pages_noprof+0x109/0x340 [ 935.011933][T10819] alloc_pages_mpol+0xb4/0x260 [ 935.012036][T10819] folio_alloc_noprof+0xee/0x140 [ 935.012059][T10819] filemap_alloc_folio_noprof+0x69/0x220 [ 935.012166][T10819] __filemap_get_folio+0x298/0x630 [ 935.012207][T10819] cont_write_begin+0x512/0x860 [ 935.012244][T10819] fat_write_begin+0x51/0xe0 [ 935.012277][T10819] ? __pfx_fat_get_block+0x10/0x10 [ 935.012353][T10819] generic_perform_write+0x1a8/0x4a0 [ 935.012383][T10819] __generic_file_write_iter+0xa1/0x120 [ 935.012471][T10819] generic_file_write_iter+0x8f/0x310 [ 935.012495][T10819] ? path_openat+0x1a78/0x1fc0 [ 935.012519][T10819] ? _parse_integer_limit+0x167/0x180 [ 935.012553][T10819] ? _parse_integer+0x27/0x30 [ 935.012606][T10819] ? kstrtoull+0x110/0x140 [ 935.012639][T10819] ? kstrtouint+0x77/0xc0 [ 935.012672][T10819] ? kstrtouint_from_user+0xb0/0xe0 [ 935.012730][T10819] ? avc_policy_seqno+0x15/0x20 [ 935.012754][T10819] ? selinux_file_permission+0x22a/0x360 [ 935.012801][T10819] vfs_write+0x77b/0x920 [ 935.012824][T10819] ? __pfx_generic_file_write_iter+0x10/0x10 [ 935.012916][T10819] ksys_write+0xe8/0x1b0 [ 935.012948][T10819] __x64_sys_write+0x42/0x50 [ 935.012973][T10819] x64_sys_call+0x287e/0x2dc0 [ 935.012999][T10819] do_syscall_64+0xc9/0x1c0 [ 935.013073][T10819] ? clear_bhb_loop+0x55/0xb0 [ 935.013123][T10819] ? clear_bhb_loop+0x55/0xb0 [ 935.013222][T10819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.013311][T10819] RIP: 0033:0x7f0f93c4cde9 [ 935.013337][T10819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.013357][T10819] RSP: 002b:00007f0f922b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 935.013379][T10819] RAX: ffffffffffffffda RBX: 00007f0f93e65fa0 RCX: 00007f0f93c4cde9 [ 935.013395][T10819] RDX: 0000000000040010 RSI: 0000400000000180 RDI: 0000000000000007 [ 935.013412][T10819] RBP: 00007f0f922b1090 R08: 0000000000000000 R09: 0000000000000000 [ 935.013427][T10819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 935.013439][T10819] R13: 0000000000000000 R14: 00007f0f93e65fa0 R15: 00007ffc94c3cd98 [ 935.013462][T10819] [ 935.039939][ T4771] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 935.315067][T10825] IPv6: Can't replace route, no match found [ 935.347536][T10833] loop6: detected capacity change from 0 to 512 [ 935.358255][T10831] loop2: detected capacity change from 0 to 2048 [ 935.366283][T10833] EXT4-fs (loop6): orphan cleanup on readonly fs [ 935.373351][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12952'. [ 935.375218][T10833] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.12951: bg 0: block 248: padding at end of block bitmap is not set [ 935.397342][T10833] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.12951: Failed to acquire dquot type 1 [ 935.411915][T10833] EXT4-fs (loop6): 1 truncate cleaned up [ 935.419942][T10833] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 935.446533][T10833] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 935.489218][T10833] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 935.490778][T10840] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.12954'. [ 935.575851][ T3066] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.612526][T10855] FAULT_INJECTION: forcing a failure. [ 935.612526][T10855] name failslab, interval 1, probability 0, space 0, times 0 [ 935.625360][T10855] CPU: 1 UID: 0 PID: 10855 Comm: syz.2.12962 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 935.625395][T10855] Tainted: [W]=WARN [ 935.625403][T10855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 935.625417][T10855] Call Trace: [ 935.625424][T10855] [ 935.625432][T10855] dump_stack_lvl+0xf2/0x150 [ 935.625470][T10855] dump_stack+0x15/0x1a [ 935.625494][T10855] should_fail_ex+0x24a/0x260 [ 935.625569][T10855] should_failslab+0x8f/0xb0 [ 935.625597][T10855] kmem_cache_alloc_node_noprof+0x59/0x320 [ 935.625639][T10855] ? __alloc_skb+0x10b/0x310 [ 935.625671][T10855] __alloc_skb+0x10b/0x310 [ 935.625752][T10855] ctrl_getfamily+0x2c3/0x3b0 [ 935.625781][T10855] genl_rcv_msg+0x61b/0x6c0 [ 935.625807][T10855] ? __pfx_ctrl_getfamily+0x10/0x10 [ 935.625836][T10855] ? selinux_file_open+0x34a/0x3b0 [ 935.625866][T10855] netlink_rcv_skb+0x12c/0x230 [ 935.625982][T10855] ? __pfx_genl_rcv_msg+0x10/0x10 [ 935.626025][T10855] genl_rcv+0x28/0x40 [ 935.626051][T10855] netlink_unicast+0x599/0x670 [ 935.626090][T10855] netlink_sendmsg+0x5cc/0x6e0 [ 935.626176][T10855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 935.626242][T10855] __sock_sendmsg+0x140/0x180 [ 935.626265][T10855] __sys_sendto+0x1a8/0x230 [ 935.626305][T10855] __x64_sys_sendto+0x78/0x90 [ 935.626337][T10855] x64_sys_call+0x29fa/0x2dc0 [ 935.626367][T10855] do_syscall_64+0xc9/0x1c0 [ 935.626463][T10855] ? clear_bhb_loop+0x55/0xb0 [ 935.626490][T10855] ? clear_bhb_loop+0x55/0xb0 [ 935.626513][T10855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.626536][T10855] RIP: 0033:0x7f0f93c4ec7c [ 935.626595][T10855] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 935.626616][T10855] RSP: 002b:00007f0f922afec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 935.626710][T10855] RAX: ffffffffffffffda RBX: 00007f0f922affc0 RCX: 00007f0f93c4ec7c [ 935.626725][T10855] RDX: 0000000000000028 RSI: 00007f0f922b0010 RDI: 0000000000000004 [ 935.626746][T10855] RBP: 0000000000000000 R08: 00007f0f922aff14 R09: 000000000000000c [ 935.626760][T10855] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 935.626774][T10855] R13: 00007f0f922aff68 R14: 00007f0f922b0010 R15: 0000000000000000 [ 935.626796][T10855] [ 935.888064][T10870] loop2: detected capacity change from 0 to 512 [ 935.909337][T10870] EXT4-fs (loop2): orphan cleanup on readonly fs [ 935.922086][T10870] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.12967: bg 0: block 248: padding at end of block bitmap is not set [ 935.934790][T10873] loop7: detected capacity change from 0 to 2048 [ 935.945452][T10870] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.12967: Failed to acquire dquot type 1 [ 935.966697][T10870] EXT4-fs (loop2): 1 truncate cleaned up [ 935.982084][T10870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 936.003525][T10870] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 936.028735][T10877] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.12970'. [ 936.038907][T10870] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 936.072538][ T5180] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.116181][T10881] 9pnet_fd: Insufficient options for proto=fd [ 936.126819][T10881] binfmt_misc: register: failed to install interpreter file ./file0 [ 936.255334][T10893] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 936.303775][T10896] loop2: detected capacity change from 0 to 512 [ 936.310712][T10896] EXT4-fs: Ignoring removed i_version option [ 936.407644][ T4777] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 936.458507][ T4777] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 936.501843][T10907] loop7: detected capacity change from 0 to 512 [ 936.529364][T10909] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.12982'. [ 936.530183][T10907] EXT4-fs (loop7): orphan cleanup on readonly fs [ 936.577849][T10907] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.12981: bg 0: block 248: padding at end of block bitmap is not set [ 936.608283][T10913] loop2: detected capacity change from 0 to 2048 [ 936.622394][T10907] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.12981: Failed to acquire dquot type 1 [ 936.649737][T10907] EXT4-fs (loop7): 1 truncate cleaned up [ 936.681429][T10907] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 936.702299][T10907] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 936.739906][T10907] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 936.795787][ T2645] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.893567][T10938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.915102][T10938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.128571][T10945] ALSA: seq fatal error: cannot create timer (-19) [ 937.347237][T10952] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.12996'. [ 937.377503][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12997'. [ 937.486117][T10960] netlink: 'syz.9.13000': attribute type 24 has an invalid length. [ 937.658665][ T4779] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 937.725043][T10976] netlink: 204 bytes leftover after parsing attributes in process `syz.2.13006'. [ 937.879473][T10992] netlink: 12796 bytes leftover after parsing attributes in process `syz.7.13013'. [ 937.951675][T11005] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 937.951675][T11005] program syz.6.13019 not setting count and/or reply_len properly [ 938.056032][T11014] loop6: detected capacity change from 0 to 512 [ 938.065589][T11014] EXT4-fs (loop6): orphan cleanup on readonly fs [ 938.094204][T11014] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.13024: bg 0: block 248: padding at end of block bitmap is not set [ 938.151188][T11014] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.13024: Failed to acquire dquot type 1 [ 938.186354][T11014] EXT4-fs (loop6): 1 truncate cleaned up [ 938.195612][T11014] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 938.240510][T11014] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 938.288338][T11014] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 938.343965][ T3066] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.384219][T11031] tipc: Can't bind to reserved service type 2 [ 938.498432][T11042] FAULT_INJECTION: forcing a failure. [ 938.498432][T11042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 938.512397][T11042] CPU: 0 UID: 0 PID: 11042 Comm: syz.7.13033 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 938.512428][T11042] Tainted: [W]=WARN [ 938.512436][T11042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 938.512451][T11042] Call Trace: [ 938.512534][T11042] [ 938.512544][T11042] dump_stack_lvl+0xf2/0x150 [ 938.512600][T11042] dump_stack+0x15/0x1a [ 938.512696][T11042] should_fail_ex+0x24a/0x260 [ 938.512739][T11042] should_fail+0xb/0x10 [ 938.512830][T11042] should_fail_usercopy+0x1a/0x20 [ 938.512854][T11042] _copy_to_user+0x20/0xa0 [ 938.512934][T11042] bpf_verifier_vlog+0x2ef/0x4d0 [ 938.512985][T11042] __btf_verifier_log+0x80/0xb0 [ 938.513081][T11042] __btf_verifier_log_type+0x224/0x320 [ 938.513129][T11042] btf_int_check_meta+0x119/0x240 [ 938.513168][T11042] btf_parse_type_sec+0x2a1/0x1510 [ 938.513197][T11042] ? btf_check_sec_info+0x1b8/0x1d0 [ 938.513357][T11042] ? btf_parse_hdr+0x396/0x3a0 [ 938.513381][T11042] btf_new_fd+0x2dc/0x790 [ 938.513420][T11042] bpf_btf_load+0x115/0x130 [ 938.513452][T11042] __sys_bpf+0x686/0x7a0 [ 938.513534][T11042] __x64_sys_bpf+0x43/0x50 [ 938.513558][T11042] x64_sys_call+0x2914/0x2dc0 [ 938.513584][T11042] do_syscall_64+0xc9/0x1c0 [ 938.513609][T11042] ? clear_bhb_loop+0x55/0xb0 [ 938.513693][T11042] ? clear_bhb_loop+0x55/0xb0 [ 938.513719][T11042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.513751][T11042] RIP: 0033:0x7f506e3fcde9 [ 938.513770][T11042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 938.513831][T11042] RSP: 002b:00007f506ca61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 938.513853][T11042] RAX: ffffffffffffffda RBX: 00007f506e615fa0 RCX: 00007f506e3fcde9 [ 938.513868][T11042] RDX: 0000000000000020 RSI: 0000400000000040 RDI: 0000000000000012 [ 938.513883][T11042] RBP: 00007f506ca61090 R08: 0000000000000000 R09: 0000000000000000 [ 938.513896][T11042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 938.513908][T11042] R13: 0000000000000000 R14: 00007f506e615fa0 R15: 00007fffadb72c18 [ 938.513984][T11042] [ 938.746493][T11045] FAULT_INJECTION: forcing a failure. [ 938.746493][T11045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 938.760329][T11045] CPU: 0 UID: 0 PID: 11045 Comm: syz.6.13032 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 938.760362][T11045] Tainted: [W]=WARN [ 938.760370][T11045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 938.760434][T11045] Call Trace: [ 938.760442][T11045] [ 938.760449][T11045] dump_stack_lvl+0xf2/0x150 [ 938.760477][T11045] dump_stack+0x15/0x1a [ 938.760498][T11045] should_fail_ex+0x24a/0x260 [ 938.760541][T11045] should_fail+0xb/0x10 [ 938.760581][T11045] should_fail_usercopy+0x1a/0x20 [ 938.760603][T11045] strncpy_from_user+0x25/0x210 [ 938.760633][T11045] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 938.760729][T11045] ? getname_flags+0x81/0x3b0 [ 938.760765][T11045] getname_flags+0xb0/0x3b0 [ 938.760850][T11045] user_path_at+0x26/0x120 [ 938.760871][T11045] __se_sys_mount+0x24b/0x2d0 [ 938.760896][T11045] ? fput+0x1c4/0x200 [ 938.760954][T11045] __x64_sys_mount+0x67/0x80 [ 938.760985][T11045] x64_sys_call+0x2c84/0x2dc0 [ 938.761044][T11045] do_syscall_64+0xc9/0x1c0 [ 938.761082][T11045] ? clear_bhb_loop+0x55/0xb0 [ 938.761155][T11045] ? clear_bhb_loop+0x55/0xb0 [ 938.761187][T11045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.761298][T11045] RIP: 0033:0x7f4aaf4acde9 [ 938.761380][T11045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 938.761421][T11045] RSP: 002b:00007f4aadb11038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 938.761470][T11045] RAX: ffffffffffffffda RBX: 00007f4aaf6c5fa0 RCX: 00007f4aaf4acde9 [ 938.761485][T11045] RDX: 0000400000000040 RSI: 0000400000000340 RDI: 0000000000000000 [ 938.761499][T11045] RBP: 00007f4aadb11090 R08: 0000400000000840 R09: 0000000000000000 [ 938.761580][T11045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.761594][T11045] R13: 0000000000000000 R14: 00007f4aaf6c5fa0 R15: 00007ffd32b22c88 [ 938.761614][T11045] [ 938.990345][T11048] loop6: detected capacity change from 0 to 1024 [ 939.007468][T11048] EXT4-fs: dax option not supported [ 939.050563][T11048] geneve2: entered promiscuous mode [ 939.055823][T11048] geneve2: entered allmulticast mode [ 939.123863][T11060] ieee802154 phy0 wpan0: encryption failed: -22 [ 939.177813][T11065] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 939.177813][T11065] program syz.6.13043 not setting count and/or reply_len properly [ 939.208385][ T4777] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 939.221770][T11066] loop7: detected capacity change from 0 to 512 [ 939.321715][T11072] loop7: detected capacity change from 0 to 2048 [ 939.408095][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 939.408112][ T29] audit: type=1326 audit(2000000025.817:57144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11074 comm="syz.6.13046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aaf4acde9 code=0x7ffc0000 [ 939.440560][ T29] audit: type=1326 audit(2000000025.817:57145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11074 comm="syz.6.13046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aaf4acde9 code=0x7ffc0000 [ 939.464462][ T29] audit: type=1326 audit(2000000025.817:57146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11074 comm="syz.6.13046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aaf4acde9 code=0x7ffc0000 [ 939.488219][ T29] audit: type=1326 audit(2000000025.817:57147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11074 comm="syz.6.13046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aaf4acde9 code=0x7ffc0000 [ 939.511893][ T29] audit: type=1326 audit(2000000025.817:57148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11074 comm="syz.6.13046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aaf4acde9 code=0x7ffc0000 [ 939.535634][ T29] audit: type=1326 audit(2000000025.817:57149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11074 comm="syz.6.13046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4aaf4acde9 code=0x7ffc0000 [ 939.559371][ T29] audit: type=1326 audit(2000000025.817:57150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11074 comm="syz.6.13046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aaf4acde9 code=0x7ffc0000 [ 939.583233][ T29] audit: type=1326 audit(2000000025.817:57151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11074 comm="syz.6.13046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4aaf4acde9 code=0x7ffc0000 [ 939.607024][ T29] audit: type=1326 audit(2000000025.817:57152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11074 comm="syz.6.13046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aaf4acde9 code=0x7ffc0000 [ 939.630766][ T29] audit: type=1326 audit(2000000025.817:57153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11074 comm="syz.6.13046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f4aaf4acde9 code=0x7ffc0000 [ 939.659221][T11090] FAULT_INJECTION: forcing a failure. [ 939.659221][T11090] name failslab, interval 1, probability 0, space 0, times 0 [ 939.671895][T11090] CPU: 1 UID: 0 PID: 11090 Comm: syz.1.13050 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 939.672009][T11090] Tainted: [W]=WARN [ 939.672018][T11090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 939.672031][T11090] Call Trace: [ 939.672038][T11090] [ 939.672046][T11090] dump_stack_lvl+0xf2/0x150 [ 939.672077][T11090] dump_stack+0x15/0x1a [ 939.672103][T11090] should_fail_ex+0x24a/0x260 [ 939.672164][T11090] should_failslab+0x8f/0xb0 [ 939.672256][T11090] __kmalloc_noprof+0xab/0x3f0 [ 939.672288][T11090] ? shmem_initxattrs+0x1b7/0x2f0 [ 939.672319][T11090] shmem_initxattrs+0x1b7/0x2f0 [ 939.672385][T11090] ? __pfx_shmem_initxattrs+0x10/0x10 [ 939.672410][T11090] security_inode_init_security+0x257/0x330 [ 939.672450][T11090] shmem_mknod+0xa8/0x180 [ 939.672477][T11090] shmem_mkdir+0x33/0x70 [ 939.672503][T11090] vfs_mkdir+0x1f4/0x320 [ 939.672530][T11090] do_mkdirat+0x136/0x2c0 [ 939.672629][T11090] __x64_sys_mkdirat+0x4e/0x60 [ 939.672650][T11090] x64_sys_call+0x1b6f/0x2dc0 [ 939.672684][T11090] do_syscall_64+0xc9/0x1c0 [ 939.672778][T11090] ? clear_bhb_loop+0x55/0xb0 [ 939.672805][T11090] ? clear_bhb_loop+0x55/0xb0 [ 939.672871][T11090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.672898][T11090] RIP: 0033:0x7ff9c892b657 [ 939.672921][T11090] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 939.672944][T11090] RSP: 002b:00007ff9c6f96e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 939.672966][T11090] RAX: ffffffffffffffda RBX: 00007ff9c6f96ef0 RCX: 00007ff9c892b657 [ 939.673058][T11090] RDX: 00000000000001ff RSI: 0000400000001a40 RDI: 00000000ffffff9c [ 939.673073][T11090] RBP: 0000400000000080 R08: 00004000000003c0 R09: 0000000000000000 [ 939.673087][T11090] R10: 0000400000000080 R11: 0000000000000246 R12: 0000400000001a40 [ 939.673098][T11090] R13: 00007ff9c6f96eb0 R14: 0000000000000000 R15: 0000000000000000 [ 939.673116][T11090] [ 939.906719][T11098] FAULT_INJECTION: forcing a failure. [ 939.906719][T11098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 939.920087][T11098] CPU: 0 UID: 0 PID: 11098 Comm: syz.9.13053 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 939.920116][T11098] Tainted: [W]=WARN [ 939.920124][T11098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 939.920138][T11098] Call Trace: [ 939.920145][T11098] [ 939.920153][T11098] dump_stack_lvl+0xf2/0x150 [ 939.920189][T11098] dump_stack+0x15/0x1a [ 939.920259][T11098] should_fail_ex+0x24a/0x260 [ 939.920289][T11098] should_fail+0xb/0x10 [ 939.920314][T11098] should_fail_usercopy+0x1a/0x20 [ 939.920330][T11098] strncpy_from_user+0x25/0x210 [ 939.920441][T11098] strncpy_from_user_nofault+0x66/0xe0 [ 939.920471][T11098] bpf_probe_read_user_str+0x2a/0x70 [ 939.920505][T11098] bpf_prog_78f9c3f13797e2ae+0x3e/0x40 [ 939.920537][T11098] bpf_trace_run3+0x10c/0x1d0 [ 939.920626][T11098] ? xas_load+0x3ae/0x3d0 [ 939.920646][T11098] ? __kfree_skb+0x102/0x150 [ 939.920670][T11098] ? __kfree_skb+0x102/0x150 [ 939.920804][T11098] kmem_cache_free+0x237/0x2d0 [ 939.920847][T11098] ? nlmon_xmit+0x51/0x60 [ 939.920871][T11098] __kfree_skb+0x102/0x150 [ 939.920893][T11098] consume_skb+0x49/0x160 [ 939.921026][T11098] nlmon_xmit+0x51/0x60 [ 939.921050][T11098] dev_hard_start_xmit+0x119/0x3f0 [ 939.921076][T11098] __dev_queue_xmit+0x100a/0x2090 [ 939.921163][T11098] ? xa_load+0xb9/0xe0 [ 939.921184][T11098] ? __dev_queue_xmit+0x186/0x2090 [ 939.921214][T11098] __netlink_deliver_tap+0x3be/0x4f0 [ 939.921319][T11098] netlink_unicast+0x64a/0x670 [ 939.921357][T11098] netlink_sendmsg+0x5cc/0x6e0 [ 939.921533][T11098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.921562][T11098] __sock_sendmsg+0x140/0x180 [ 939.921581][T11098] ____sys_sendmsg+0x312/0x410 [ 939.921610][T11098] __sys_sendmmsg+0x227/0x4b0 [ 939.921691][T11098] __x64_sys_sendmmsg+0x57/0x70 [ 939.921718][T11098] x64_sys_call+0x29aa/0x2dc0 [ 939.921774][T11098] do_syscall_64+0xc9/0x1c0 [ 939.921796][T11098] ? clear_bhb_loop+0x55/0xb0 [ 939.921821][T11098] ? clear_bhb_loop+0x55/0xb0 [ 939.921921][T11098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.921971][T11098] RIP: 0033:0x7fd8c71acde9 [ 939.921990][T11098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 939.922018][T11098] RSP: 002b:00007fd8c5811038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 939.922034][T11098] RAX: ffffffffffffffda RBX: 00007fd8c73c5fa0 RCX: 00007fd8c71acde9 [ 939.922045][T11098] RDX: 040000000000009f RSI: 00004000000002c0 RDI: 0000000000000004 [ 939.922056][T11098] RBP: 00007fd8c5811090 R08: 0000000000000000 R09: 0000000000000000 [ 939.922066][T11098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.922076][T11098] R13: 0000000000000000 R14: 00007fd8c73c5fa0 R15: 00007ffe87f32948 [ 939.922093][T11098] [ 940.248561][T11102] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 940.248561][T11102] program syz.1.13054 not setting count and/or reply_len properly [ 940.270208][T11103] loop9: detected capacity change from 0 to 512 [ 940.328579][T11103] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 940.345059][T11103] ext4 filesystem being mounted at /553/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 940.445208][ T3668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.536657][T11125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13060'. [ 940.552602][T11126] 9pnet_fd: Insufficient options for proto=fd [ 940.614236][T11127] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 940.622501][T11127] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 940.672869][ T4775] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 940.795394][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13065'. [ 941.037642][T11140] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 941.037642][T11140] program syz.9.13069 not setting count and/or reply_len properly [ 941.196983][ T4779] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 941.840001][T11175] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 941.848245][T11175] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 941.895215][ T4785] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 941.920386][T11163] lo speed is unknown, defaulting to 1000 [ 941.983356][T11182] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.13081'. [ 942.034204][T11163] chnl_net:caif_netlink_parms(): no params data found [ 942.112731][T11163] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.119926][T11163] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.137391][T11163] bridge_slave_0: entered allmulticast mode [ 942.144324][T11163] bridge_slave_0: entered promiscuous mode [ 942.155856][T11163] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.162993][T11163] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.180082][T11163] bridge_slave_1: entered allmulticast mode [ 942.186786][T11163] bridge_slave_1: entered promiscuous mode [ 942.221539][T11163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.243480][T11163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.274549][T11163] team0: Port device team_slave_0 added [ 942.288645][T11163] team0: Port device team_slave_1 added [ 942.327509][T11163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.334533][T11163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.360754][T11163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.373942][T11163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.380901][T11163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.406978][T11163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.454828][T11195] lo speed is unknown, defaulting to 1000 [ 942.498254][T11163] hsr_slave_0: entered promiscuous mode [ 942.506606][T11163] hsr_slave_1: entered promiscuous mode [ 942.522469][T11163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 942.535360][T11163] Cannot create hsr debugfs directory [ 942.591174][ T4768] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 942.676650][T11206] loop6: detected capacity change from 0 to 512 [ 942.695577][T11206] EXT4-fs (loop6): orphan cleanup on readonly fs [ 942.715019][T11206] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.13086: bg 0: block 248: padding at end of block bitmap is not set [ 942.731514][T11206] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.13086: Failed to acquire dquot type 1 [ 942.732001][T11163] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.787434][T11206] EXT4-fs (loop6): 1 truncate cleaned up [ 942.806729][T11206] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 942.858355][T11206] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 942.890852][T11163] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.920153][T11206] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 942.941733][T11163] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.973414][T11163] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.987656][ T3066] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.047618][T11163] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 943.057672][T11163] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 943.066399][T11163] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 943.077594][T11163] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 943.142839][ T4779] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 943.188987][T11163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.219392][T11163] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.249178][ T4775] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.256274][ T4775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.300988][ T4763] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.308176][ T4763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.324140][T11216] loop6: detected capacity change from 0 to 8192 [ 943.334464][T11163] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 943.345768][T11163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 943.359070][T11216] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 943.419989][T11217] lo speed is unknown, defaulting to 1000 [ 943.456643][T11163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 943.584285][T11227] loop9: detected capacity change from 0 to 8192 [ 943.620680][T11227] syz.9.13090: attempt to access beyond end of device [ 943.620680][T11227] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 943.636197][T11227] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 943.644045][T11227] FAT-fs (loop9): Filesystem has been set read-only [ 943.669343][T11227] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 943.685801][T11227] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 943.743000][T11163] veth0_vlan: entered promiscuous mode [ 943.766183][T11163] veth1_vlan: entered promiscuous mode [ 943.812355][T11163] veth0_macvtap: entered promiscuous mode [ 943.824490][T11163] veth1_macvtap: entered promiscuous mode [ 943.836096][T11248] loop9: detected capacity change from 0 to 1024 [ 943.837209][T11163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.853087][T11163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.863005][T11163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.873469][T11163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.883316][T11163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.893781][T11163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.903730][T11163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.909753][T11248] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 943.914267][T11163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.916246][T11163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 943.926040][T11248] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 943.941029][T11163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.963900][T11163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.973777][T11163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.976839][T11248] EXT4-fs (loop9): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 943.984319][T11163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.984344][T11163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 944.004325][T11248] EXT4-fs (loop9): invalid journal inode [ 944.020605][T11163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.030460][T11163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 944.040932][T11163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.052967][T11163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 944.095017][T11163] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.103777][T11163] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.112634][T11163] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.121467][T11163] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.234671][T11262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13099'. [ 944.369226][T11265] bridge0: port 3(vlan3) entered blocking state [ 944.375722][T11265] bridge0: port 3(vlan3) entered disabled state [ 944.382375][T11265] vlan3: entered allmulticast mode [ 944.387513][T11265] batadv0: entered allmulticast mode [ 944.393161][ T4775] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 944.393744][T11265] vlan3: entered promiscuous mode [ 944.406021][T11265] batadv0: entered promiscuous mode [ 944.413531][T11265] bridge0: port 3(vlan3) entered blocking state [ 944.419857][T11265] bridge0: port 3(vlan3) entered forwarding state [ 944.483074][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13102'. [ 944.495721][T11269] loop2: detected capacity change from 0 to 2048 [ 944.621203][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13106'. [ 944.677006][T11284] ieee802154 phy0 wpan0: encryption failed: -22 [ 944.715544][T11290] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 944.723812][T11290] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 944.738294][T11288] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1088) [ 944.748676][T11288] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 944.752028][T11292] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 944.752028][T11292] program syz.9.13111 not setting count and/or reply_len properly [ 944.758787][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 944.758806][ T29] audit: type=1400 audit(2000000030.821:57406): avc: denied { read write } for pid=11291 comm="syz.9.13111" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 944.807828][ T29] audit: type=1400 audit(2000000030.821:57407): avc: denied { open } for pid=11291 comm="syz.9.13111" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 944.847815][T11296] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.13112'. [ 944.862375][T11298] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.13113'. [ 944.886135][ T29] audit: type=1400 audit(2000000030.849:57408): avc: denied { bind } for pid=11289 comm="syz.2.13110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 944.906586][ T29] audit: type=1400 audit(2000000030.849:57409): avc: denied { create } for pid=11287 comm="syz.1.13109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 944.952363][ T29] audit: type=1326 audit(2000000030.999:57410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11301 comm="syz.9.13115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c71acde9 code=0x7ffc0000 [ 944.977051][ T29] audit: type=1326 audit(2000000030.999:57411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11301 comm="syz.9.13115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8c71acde9 code=0x7ffc0000 [ 945.001589][ T29] audit: type=1326 audit(2000000031.008:57412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11301 comm="syz.9.13115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c71acde9 code=0x7ffc0000 [ 945.026209][ T29] audit: type=1326 audit(2000000031.008:57413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11301 comm="syz.9.13115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c71acde9 code=0x7ffc0000 [ 945.050808][ T29] audit: type=1326 audit(2000000031.008:57414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11301 comm="syz.9.13115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8c71acde9 code=0x7ffc0000 [ 945.075360][ T29] audit: type=1326 audit(2000000031.008:57415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11301 comm="syz.9.13115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c71acde9 code=0x7ffc0000 [ 945.172914][T11313] ieee802154 phy0 wpan0: encryption failed: -22 [ 945.354351][T11325] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 945.354351][T11325] program syz.9.13124 not setting count and/or reply_len properly [ 945.603805][T11339] loop6: detected capacity change from 0 to 512 [ 945.649258][T11339] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 945.668472][ T4771] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 945.682427][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13135'. [ 945.700001][T11350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13135'. [ 945.714166][T11349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 945.721802][T11349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 945.729611][ T3066] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.739871][T11349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 945.747460][T11349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 945.759473][T11352] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 945.759473][T11352] program syz.6.13136 not setting count and/or reply_len properly [ 945.808862][T11349] batadv0: left allmulticast mode [ 945.813971][T11349] batadv0: left promiscuous mode [ 945.861742][T11349] bridge0: port 3(vlan3) entered disabled state [ 945.890778][T11349] vlan3 (unregistering): left allmulticast mode [ 945.897270][T11349] vlan3 (unregistering): left promiscuous mode [ 945.904483][T11349] bridge0: port 3(vlan3) entered disabled state [ 945.923150][T11362] loop7: detected capacity change from 0 to 512 [ 945.930797][T11362] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 945.938792][T11362] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 945.947685][T11362] EXT4-fs (loop7): orphan cleanup on readonly fs [ 945.954587][T11362] EXT4-fs warning (device loop7): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 945.966700][T11362] EXT4-fs warning (device loop7): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 945.977553][T11362] EXT4-fs (loop7): 1 truncate cleaned up [ 945.983986][T11362] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 946.017593][T11163] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.059566][T11378] bridge0: port 3(vlan2) entered blocking state [ 946.065999][T11378] bridge0: port 3(vlan2) entered disabled state [ 946.080119][T11378] vlan2: entered allmulticast mode [ 946.085399][T11378] batadv0: entered allmulticast mode [ 946.092149][T11378] vlan2: entered promiscuous mode [ 946.097961][T11378] batadv0: entered promiscuous mode [ 946.098342][T11380] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 946.098342][T11380] program syz.1.13147 not setting count and/or reply_len properly [ 946.104007][T11378] bridge0: port 3(vlan2) entered blocking state [ 946.126407][T11378] bridge0: port 3(vlan2) entered forwarding state [ 946.433142][T11409] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 946.433142][T11409] program syz.9.13158 not setting count and/or reply_len properly [ 946.497218][T11415] IPv6: NLM_F_CREATE should be specified when creating new route [ 946.624794][T11424] loop2: detected capacity change from 0 to 512 [ 946.641110][T11424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 946.668677][T11429] loop7: detected capacity change from 0 to 2048 [ 946.674380][T11424] ext4 filesystem being mounted at /474/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 946.694985][T11424] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.13165: corrupted inode contents [ 946.707245][T11424] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #2: comm syz.2.13165: mark_inode_dirty error [ 946.715613][T11429] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 946.719328][T11424] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.13165: corrupted inode contents [ 946.742876][T11424] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.13165: mark_inode_dirty error [ 946.765957][T11424] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.803913][T11440] netlink: 3 bytes leftover after parsing attributes in process `syz.6.13168'. [ 946.813244][T11440] 0ŞXą¦Ŕ: renamed from caif0 [ 946.819616][T11440] 0ŞXą¦Ŕ: entered allmulticast mode [ 946.825107][T11440] A link change request failed with some changes committed already. Interface 60ŞXą¦Ŕ may have been left with an inconsistent configuration, please check. [ 946.854116][ T3876] IPVS: starting estimator thread 0... [ 946.863846][ T4775] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 946.880449][T11443] netlink: 44 bytes leftover after parsing attributes in process `syz.6.13169'. [ 946.890600][T11445] netlink: 44 bytes leftover after parsing attributes in process `syz.6.13169'. [ 946.917808][T11450] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 946.917808][T11450] program syz.6.13172 not setting count and/or reply_len properly [ 946.948019][T11441] IPVS: using max 2112 ests per chain, 105600 per kthread [ 947.020034][T11456] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13174'. [ 947.152726][T11469] FAULT_INJECTION: forcing a failure. [ 947.152726][T11469] name failslab, interval 1, probability 0, space 0, times 0 [ 947.166296][T11469] CPU: 0 UID: 0 PID: 11469 Comm: syz.2.13180 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 947.166331][T11469] Tainted: [W]=WARN [ 947.166339][T11469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 947.166352][T11469] Call Trace: [ 947.166360][T11469] [ 947.166367][T11469] dump_stack_lvl+0xf2/0x150 [ 947.166399][T11469] dump_stack+0x15/0x1a [ 947.166424][T11469] should_fail_ex+0x24a/0x260 [ 947.166464][T11469] should_failslab+0x8f/0xb0 [ 947.166493][T11469] kmem_cache_alloc_noprof+0x52/0x320 [ 947.166530][T11469] ? mas_alloc_nodes+0x1e3/0x490 [ 947.166561][T11469] ? __mod_memcg_state+0x122/0x280 [ 947.166595][T11469] mas_alloc_nodes+0x1e3/0x490 [ 947.166631][T11469] mas_preallocate+0x44a/0x650 [ 947.166667][T11469] vma_link+0x93/0x370 [ 947.166709][T11469] insert_vm_struct+0x17b/0x210 [ 947.166742][T11469] alloc_bprm+0x439/0x680 [ 947.166766][T11469] do_execveat_common+0x12b/0x7e0 [ 947.166797][T11469] __x64_sys_execve+0x5a/0x70 [ 947.166821][T11469] x64_sys_call+0x1333/0x2dc0 [ 947.166850][T11469] do_syscall_64+0xc9/0x1c0 [ 947.166879][T11469] ? clear_bhb_loop+0x55/0xb0 [ 947.166913][T11469] ? clear_bhb_loop+0x55/0xb0 [ 947.166944][T11469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.166971][T11469] RIP: 0033:0x7f0f93c4cde9 [ 947.166987][T11469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 947.167009][T11469] RSP: 002b:00007f0f922b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 947.167029][T11469] RAX: ffffffffffffffda RBX: 00007f0f93e65fa0 RCX: 00007f0f93c4cde9 [ 947.167040][T11469] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000000400 [ 947.167054][T11469] RBP: 00007f0f922b1090 R08: 0000000000000000 R09: 0000000000000000 [ 947.167069][T11469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 947.167083][T11469] R13: 0000000000000000 R14: 00007f0f93e65fa0 R15: 00007ffc94c3cd98 [ 947.167107][T11469] [ 947.559388][T11163] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.677887][T11498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13189'. [ 947.695117][T11498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13189'. [ 947.889110][T11499] lo speed is unknown, defaulting to 1000 [ 948.209491][ T4771] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 948.723330][ T3439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 948.735238][ T4771] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 948.778777][T11540] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.13203'. [ 948.837021][T11548] netlink: 'syz.7.13207': attribute type 1 has an invalid length. [ 948.844864][T11550] FAULT_INJECTION: forcing a failure. [ 948.844864][T11550] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 948.844898][T11550] CPU: 1 UID: 0 PID: 11550 Comm: syz.1.13208 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 948.844934][T11550] Tainted: [W]=WARN [ 948.844942][T11550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 948.844997][T11550] Call Trace: [ 948.845004][T11550] [ 948.845011][T11550] dump_stack_lvl+0xf2/0x150 [ 948.845058][T11550] dump_stack+0x15/0x1a [ 948.845084][T11550] should_fail_ex+0x24a/0x260 [ 948.845134][T11550] should_fail_alloc_page+0xfd/0x110 [ 948.845187][T11550] __alloc_frozen_pages_noprof+0x109/0x340 [ 948.845222][T11550] alloc_pages_mpol+0xb4/0x260 [ 948.845262][T11550] vma_alloc_folio_noprof+0x1a0/0x310 [ 948.845330][T11550] do_wp_page+0x64b/0x2340 [ 948.845368][T11550] ? __rcu_read_lock+0x36/0x50 [ 948.845476][T11550] handle_mm_fault+0xc63/0x2ac0 [ 948.845563][T11550] exc_page_fault+0x296/0x650 [ 948.845586][T11550] asm_exc_page_fault+0x26/0x30 [ 948.845616][T11550] RIP: 0010:__put_user_4+0x11/0x20 [ 948.845647][T11550] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 948.845670][T11550] RSP: 0018:ffffc90003483c58 EFLAGS: 00050202 [ 948.845702][T11550] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000400000007ff8 [ 948.845719][T11550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 948.845734][T11550] RBP: ffffc90003483ee0 R08: ffffffff8437a4d9 R09: 0000000000000000 [ 948.845751][T11550] R10: 0001888117fe09ac R11: 0001888117fe0b80 R12: 0000000000040000 [ 948.845801][T11550] R13: 0000400000007fc0 R14: ffffc90003483d10 R15: 0000000000000001 [ 948.845820][T11550] ? __sys_sendmmsg+0x319/0x4b0 [ 948.845862][T11550] __sys_sendmmsg+0x331/0x4b0 [ 948.845931][T11550] __x64_sys_sendmmsg+0x57/0x70 [ 948.845969][T11550] x64_sys_call+0x29aa/0x2dc0 [ 948.846010][T11550] do_syscall_64+0xc9/0x1c0 [ 948.846040][T11550] ? clear_bhb_loop+0x55/0xb0 [ 948.846074][T11550] ? clear_bhb_loop+0x55/0xb0 [ 948.846114][T11550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.846228][T11550] RIP: 0033:0x7ff9c892cde9 [ 948.846246][T11550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.846268][T11550] RSP: 002b:00007ff9c6f97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 948.846290][T11550] RAX: ffffffffffffffda RBX: 00007ff9c8b45fa0 RCX: 00007ff9c892cde9 [ 948.846305][T11550] RDX: 000000000800001d RSI: 0000400000007fc0 RDI: 0000000000000003 [ 948.846320][T11550] RBP: 00007ff9c6f97090 R08: 0000000000000000 R09: 0000000000000000 [ 948.846362][T11550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 948.846424][T11550] R13: 0000000000000000 R14: 00007ff9c8b45fa0 R15: 00007ffcfd0fd658 [ 948.846447][T11550] [ 949.145920][T11548] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13207'. [ 949.489093][T11567] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.13216'. [ 949.549436][T11575] FAULT_INJECTION: forcing a failure. [ 949.549436][T11575] name failslab, interval 1, probability 0, space 0, times 0 [ 949.562745][T11575] CPU: 0 UID: 0 PID: 11575 Comm: syz.2.13220 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 949.562861][T11575] Tainted: [W]=WARN [ 949.562870][T11575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 949.562885][T11575] Call Trace: [ 949.562893][T11575] [ 949.562902][T11575] dump_stack_lvl+0xf2/0x150 [ 949.562930][T11575] dump_stack+0x15/0x1a [ 949.562951][T11575] should_fail_ex+0x24a/0x260 [ 949.562996][T11575] should_failslab+0x8f/0xb0 [ 949.563091][T11575] __kmalloc_node_noprof+0xad/0x410 [ 949.563143][T11575] ? __kvmalloc_node_noprof+0x72/0x170 [ 949.563176][T11575] __kvmalloc_node_noprof+0x72/0x170 [ 949.563222][T11575] rhashtable_init_noprof+0x312/0x450 [ 949.563244][T11575] rhltable_init_noprof+0x1e/0x40 [ 949.563267][T11575] nf_tables_newtable+0x54d/0xee0 [ 949.563314][T11575] nfnetlink_rcv+0xb3e/0x15d0 [ 949.563377][T11575] ? kmem_cache_free+0xdc/0x2d0 [ 949.563444][T11575] netlink_unicast+0x599/0x670 [ 949.563483][T11575] netlink_sendmsg+0x5cc/0x6e0 [ 949.563524][T11575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 949.563620][T11575] __sock_sendmsg+0x140/0x180 [ 949.563641][T11575] ____sys_sendmsg+0x312/0x410 [ 949.563682][T11575] __sys_sendmsg+0x19d/0x230 [ 949.563767][T11575] __x64_sys_sendmsg+0x46/0x50 [ 949.563804][T11575] x64_sys_call+0x2734/0x2dc0 [ 949.563910][T11575] do_syscall_64+0xc9/0x1c0 [ 949.563940][T11575] ? clear_bhb_loop+0x55/0xb0 [ 949.563974][T11575] ? clear_bhb_loop+0x55/0xb0 [ 949.564013][T11575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.564123][T11575] RIP: 0033:0x7f0f93c4cde9 [ 949.564140][T11575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 949.564157][T11575] RSP: 002b:00007f0f922b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 949.564175][T11575] RAX: ffffffffffffffda RBX: 00007f0f93e65fa0 RCX: 00007f0f93c4cde9 [ 949.564188][T11575] RDX: 0000000000040000 RSI: 00004000000000c0 RDI: 0000000000000004 [ 949.564204][T11575] RBP: 00007f0f922b1090 R08: 0000000000000000 R09: 0000000000000000 [ 949.564218][T11575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 949.564233][T11575] R13: 0000000000000000 R14: 00007f0f93e65fa0 R15: 00007ffc94c3cd98 [ 949.564310][T11575] [ 949.794009][T11576] FAULT_INJECTION: forcing a failure. [ 949.794009][T11576] name failslab, interval 1, probability 0, space 0, times 0 [ 949.806678][T11576] CPU: 0 UID: 0 PID: 11576 Comm: syz.1.13209 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 949.806713][T11576] Tainted: [W]=WARN [ 949.806720][T11576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 949.806732][T11576] Call Trace: [ 949.806739][T11576] [ 949.806747][T11576] dump_stack_lvl+0xf2/0x150 [ 949.806833][T11576] dump_stack+0x15/0x1a [ 949.806938][T11576] should_fail_ex+0x24a/0x260 [ 949.806989][T11576] should_failslab+0x8f/0xb0 [ 949.807021][T11576] kmem_cache_alloc_noprof+0x52/0x320 [ 949.807123][T11576] ? security_file_alloc+0x32/0x100 [ 949.807165][T11576] security_file_alloc+0x32/0x100 [ 949.807202][T11576] init_file+0x5d/0x1b0 [ 949.807393][T11576] alloc_empty_file+0xea/0x200 [ 949.807426][T11576] alloc_file_pseudo+0xc9/0x160 [ 949.807469][T11576] __shmem_file_setup+0x1bb/0x1f0 [ 949.807510][T11576] shmem_file_setup+0x3b/0x50 [ 949.807586][T11576] __se_sys_memfd_create+0x2e1/0x5a0 [ 949.807614][T11576] __x64_sys_memfd_create+0x31/0x40 [ 949.807639][T11576] x64_sys_call+0x2d4c/0x2dc0 [ 949.807674][T11576] do_syscall_64+0xc9/0x1c0 [ 949.807702][T11576] ? clear_bhb_loop+0x55/0xb0 [ 949.807731][T11576] ? clear_bhb_loop+0x55/0xb0 [ 949.807758][T11576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.807812][T11576] RIP: 0033:0x7ff9c892cde9 [ 949.807826][T11576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 949.807895][T11576] RSP: 002b:00007ff9c6f54e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 949.807918][T11576] RAX: ffffffffffffffda RBX: 00000000000005c9 RCX: 00007ff9c892cde9 [ 949.807934][T11576] RDX: 00007ff9c6f54ef0 RSI: 0000000000000000 RDI: 00007ff9c89aec51 [ 949.807947][T11576] RBP: 0000400000001000 R08: 00007ff9c6f54bb7 R09: 00007ff9c6f54e40 [ 949.807964][T11576] R10: 000000000000000a R11: 0000000000000202 R12: 0000400000000040 [ 949.807976][T11576] R13: 00007ff9c6f54ef0 R14: 00007ff9c6f54eb0 R15: 0000400000000940 [ 949.807997][T11576] [ 950.013918][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13220'. [ 950.034617][T11568] loop7: detected capacity change from 0 to 2048 [ 950.041488][T11568] msdos: Unknown parameter '˙˙˙˙˙˙˙˙184467440737095516150xffffffffffffffff' [ 950.102614][ T3381] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 950.134679][ T4771] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 950.163895][T11589] tipc: Failed to clone mcast rcv buffer [ 950.302489][T11597] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 950.511811][ T29] kauditd_printk_skb: 584 callbacks suppressed [ 950.511825][ T29] audit: type=1400 audit(2000000036.209:58000): avc: denied { write } for pid=11611 comm="syz.2.13234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 950.542679][ T29] audit: type=1400 audit(2000000036.237:58001): avc: denied { bind } for pid=11626 comm="syz.6.13239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 950.573064][ T29] audit: type=1400 audit(2000000036.256:58002): avc: denied { connect } for pid=11626 comm="syz.6.13239" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 950.638899][T11631] loop7: detected capacity change from 0 to 2048 [ 950.659319][ T29] audit: type=1326 audit(2000000036.302:58003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.6.13241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aaf4acde9 code=0x7ffc0000 [ 950.662160][T11631] msdos: Unknown parameter '˙˙˙˙˙˙˙˙184467440737095516150xffffffffffffffff' [ 950.683903][ T29] audit: type=1326 audit(2000000036.302:58004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.6.13241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aaf4acde9 code=0x7ffc0000 [ 950.716558][ T29] audit: type=1326 audit(2000000036.302:58005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.6.13241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4aaf4acde9 code=0x7ffc0000 [ 950.740840][ T29] audit: type=1326 audit(2000000036.302:58006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.6.13241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aaf4acde9 code=0x7ffc0000 [ 950.765375][ T29] audit: type=1326 audit(2000000036.312:58007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.6.13241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4aaf4acde9 code=0x7ffc0000 [ 950.790309][ T29] audit: type=1326 audit(2000000036.312:58008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.6.13241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aaf4acde9 code=0x7ffc0000 [ 950.814771][ T29] audit: type=1326 audit(2000000036.312:58009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11633 comm="syz.6.13241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4aaf4acde9 code=0x7ffc0000 [ 950.877307][T11597] wg2: entered promiscuous mode [ 950.882264][T11597] wg2: entered allmulticast mode [ 950.999182][T11640] FAULT_INJECTION: forcing a failure. [ 950.999182][T11640] name failslab, interval 1, probability 0, space 0, times 0 [ 951.012623][T11640] CPU: 0 UID: 0 PID: 11640 Comm: syz.1.13244 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 951.012687][T11640] Tainted: [W]=WARN [ 951.012696][T11640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 951.012711][T11640] Call Trace: [ 951.012718][T11640] [ 951.012738][T11640] dump_stack_lvl+0xf2/0x150 [ 951.012766][T11640] dump_stack+0x15/0x1a [ 951.012787][T11640] should_fail_ex+0x24a/0x260 [ 951.012855][T11640] should_failslab+0x8f/0xb0 [ 951.012895][T11640] kmem_cache_alloc_noprof+0x52/0x320 [ 951.012931][T11640] ? security_inode_alloc+0x37/0x100 [ 951.013042][T11640] security_inode_alloc+0x37/0x100 [ 951.013078][T11640] inode_init_always_gfp+0x4a2/0x4f0 [ 951.013113][T11640] ? __pfx_sock_alloc_inode+0x10/0x10 [ 951.013140][T11640] alloc_inode+0x82/0x160 [ 951.013242][T11640] new_inode_pseudo+0x15/0x20 [ 951.013323][T11640] __sock_create+0x12b/0x5a0 [ 951.013351][T11640] __sys_socketpair+0x1be/0x430 [ 951.013400][T11640] __x64_sys_socketpair+0x52/0x60 [ 951.013430][T11640] x64_sys_call+0x1cad/0x2dc0 [ 951.013510][T11640] do_syscall_64+0xc9/0x1c0 [ 951.013534][T11640] ? clear_bhb_loop+0x55/0xb0 [ 951.013566][T11640] ? clear_bhb_loop+0x55/0xb0 [ 951.013592][T11640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.013704][T11640] RIP: 0033:0x7ff9c892cde9 [ 951.013719][T11640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 951.013739][T11640] RSP: 002b:00007ff9c6f97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 951.013762][T11640] RAX: ffffffffffffffda RBX: 00007ff9c8b45fa0 RCX: 00007ff9c892cde9 [ 951.013776][T11640] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 951.013791][T11640] RBP: 00007ff9c6f97090 R08: 0000000000000000 R09: 0000000000000000 [ 951.013819][T11640] R10: 0000400000000940 R11: 0000000000000246 R12: 0000000000000001 [ 951.013833][T11640] R13: 0000000000000000 R14: 00007ff9c8b45fa0 R15: 00007ffcfd0fd658 [ 951.013898][T11640] [ 951.013909][T11640] socket: no more sockets [ 951.342218][ T4779] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 951.364760][T11660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.373448][T11660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.405786][T11662] FAULT_INJECTION: forcing a failure. [ 951.405786][T11662] name failslab, interval 1, probability 0, space 0, times 0 [ 951.418494][T11662] CPU: 1 UID: 0 PID: 11662 Comm: syz.7.13255 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 951.418531][T11662] Tainted: [W]=WARN [ 951.418540][T11662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 951.418552][T11662] Call Trace: [ 951.418558][T11662] [ 951.418580][T11662] dump_stack_lvl+0xf2/0x150 [ 951.418728][T11662] dump_stack+0x15/0x1a [ 951.418755][T11662] should_fail_ex+0x24a/0x260 [ 951.418814][T11662] should_failslab+0x8f/0xb0 [ 951.418844][T11662] kmem_cache_alloc_noprof+0x52/0x320 [ 951.418885][T11662] ? alloc_empty_file+0xd0/0x200 [ 951.418965][T11662] alloc_empty_file+0xd0/0x200 [ 951.419099][T11662] dentry_open+0x2d/0x90 [ 951.419153][T11662] do_mq_open+0x390/0x4b0 [ 951.419181][T11662] __x64_sys_mq_open+0xcc/0x100 [ 951.419211][T11662] x64_sys_call+0x1d6f/0x2dc0 [ 951.419242][T11662] do_syscall_64+0xc9/0x1c0 [ 951.419294][T11662] ? clear_bhb_loop+0x55/0xb0 [ 951.419325][T11662] ? clear_bhb_loop+0x55/0xb0 [ 951.419434][T11662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.419461][T11662] RIP: 0033:0x7fb88ea5cde9 [ 951.419476][T11662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 951.419536][T11662] RSP: 002b:00007fb88d0c1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 951.419558][T11662] RAX: ffffffffffffffda RBX: 00007fb88ec75fa0 RCX: 00007fb88ea5cde9 [ 951.419571][T11662] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000400000000b40 [ 951.419640][T11662] RBP: 00007fb88d0c1090 R08: 0000000000000000 R09: 0000000000000000 [ 951.419654][T11662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.419667][T11662] R13: 0000000000000000 R14: 00007fb88ec75fa0 R15: 00007ffd4a9036f8 [ 951.419685][T11662] [ 951.744276][T11672] loop7: detected capacity change from 0 to 2048 [ 952.265436][T11733] loop2: detected capacity change from 0 to 128 [ 952.266114][T11731] 9pnet_fd: Insufficient options for proto=fd [ 952.272098][T11733] vfat: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙' [ 952.313920][T11740] loop7: detected capacity change from 0 to 512 [ 952.344521][T11740] EXT4-fs: dax option not supported [ 952.382679][T11751] loop7: detected capacity change from 0 to 512 [ 952.389675][T11751] ext3: Unknown parameter 'smackfstransmute' [ 952.531586][ T4775] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 952.561742][T11769] loop2: detected capacity change from 0 to 512 [ 952.568699][T11770] FAULT_INJECTION: forcing a failure. [ 952.568699][T11770] name failslab, interval 1, probability 0, space 0, times 0 [ 952.582192][T11770] CPU: 0 UID: 0 PID: 11770 Comm: syz.7.13299 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 952.582291][T11770] Tainted: [W]=WARN [ 952.582299][T11770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 952.582314][T11770] Call Trace: [ 952.582322][T11770] [ 952.582330][T11770] dump_stack_lvl+0xf2/0x150 [ 952.582394][T11770] dump_stack+0x15/0x1a [ 952.582415][T11770] should_fail_ex+0x24a/0x260 [ 952.582446][T11770] ? audit_log_d_path+0x96/0x250 [ 952.582484][T11770] should_failslab+0x8f/0xb0 [ 952.582564][T11770] __kmalloc_cache_noprof+0x4e/0x320 [ 952.582683][T11770] audit_log_d_path+0x96/0x250 [ 952.582714][T11770] ? __rcu_read_unlock+0x4e/0x70 [ 952.582818][T11770] audit_log_d_path_exe+0x42/0x70 [ 952.582852][T11770] audit_log_task+0x192/0x1c0 [ 952.582884][T11770] audit_seccomp+0x68/0x130 [ 952.582911][T11770] __seccomp_filter+0x6fa/0x1180 [ 952.582995][T11770] ? __se_sys_pidfd_send_signal+0x192/0x570 [ 952.583033][T11770] ? putname+0xcf/0xf0 [ 952.583075][T11770] __secure_computing+0x9f/0x1c0 [ 952.583100][T11770] syscall_trace_enter+0xd1/0x1f0 [ 952.583144][T11770] ? fpregs_assert_state_consistent+0x83/0xa0 [ 952.583187][T11770] do_syscall_64+0xaa/0x1c0 [ 952.583269][T11770] ? clear_bhb_loop+0x55/0xb0 [ 952.583304][T11770] ? clear_bhb_loop+0x55/0xb0 [ 952.583337][T11770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.583372][T11770] RIP: 0033:0x7fb88ea5b7fc [ 952.583391][T11770] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 952.583414][T11770] RSP: 002b:00007fb88d0c1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 952.583468][T11770] RAX: ffffffffffffffda RBX: 00007fb88ec75fa0 RCX: 00007fb88ea5b7fc [ 952.583482][T11770] RDX: 000000000000000f RSI: 00007fb88d0c10a0 RDI: 0000000000000006 [ 952.583493][T11770] RBP: 00007fb88d0c1090 R08: 0000000000000000 R09: 0000000000000000 [ 952.583505][T11770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 952.583518][T11770] R13: 0000000000000000 R14: 00007fb88ec75fa0 R15: 00007ffd4a9036f8 [ 952.583540][T11770] [ 952.591726][T11769] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 952.829577][T11769] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 952.862635][T11769] EXT4-fs (loop2): 1 truncate cleaned up [ 952.868937][T11769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 952.897701][T11786] 9pnet_fd: Insufficient options for proto=fd [ 952.916716][T11790] FAULT_INJECTION: forcing a failure. [ 952.916716][T11790] name failslab, interval 1, probability 0, space 0, times 0 [ 952.929588][T11790] CPU: 1 UID: 0 PID: 11790 Comm: syz.1.13304 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 952.929620][T11790] Tainted: [W]=WARN [ 952.929627][T11790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 952.929676][T11790] Call Trace: [ 952.929685][T11790] [ 952.929694][T11790] dump_stack_lvl+0xf2/0x150 [ 952.929728][T11790] dump_stack+0x15/0x1a [ 952.929754][T11790] should_fail_ex+0x24a/0x260 [ 952.929794][T11790] should_failslab+0x8f/0xb0 [ 952.929829][T11790] kmem_cache_alloc_noprof+0x52/0x320 [ 952.929902][T11790] ? alloc_empty_file+0xd0/0x200 [ 952.929956][T11790] alloc_empty_file+0xd0/0x200 [ 952.930066][T11790] path_openat+0x6a/0x1fc0 [ 952.930085][T11790] ? _parse_integer_limit+0x167/0x180 [ 952.930124][T11790] ? _parse_integer+0x27/0x30 [ 952.930185][T11790] ? kstrtoull+0x110/0x140 [ 952.930220][T11790] ? kstrtouint+0x77/0xc0 [ 952.930250][T11790] ? kstrtouint_from_user+0xb0/0xe0 [ 952.930345][T11790] do_filp_open+0x107/0x230 [ 952.930380][T11790] do_sys_openat2+0xab/0x120 [ 952.930417][T11790] __x64_sys_openat+0xf3/0x120 [ 952.930457][T11790] x64_sys_call+0x2b30/0x2dc0 [ 952.930490][T11790] do_syscall_64+0xc9/0x1c0 [ 952.930563][T11790] ? clear_bhb_loop+0x55/0xb0 [ 952.930595][T11790] ? clear_bhb_loop+0x55/0xb0 [ 952.930622][T11790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.930653][T11790] RIP: 0033:0x7ff9c892cde9 [ 952.930671][T11790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 952.930741][T11790] RSP: 002b:00007ff9c6f97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 952.930759][T11790] RAX: ffffffffffffffda RBX: 00007ff9c8b45fa0 RCX: 00007ff9c892cde9 [ 952.930773][T11790] RDX: 0000000000000401 RSI: 00004000000000c0 RDI: ffffffffffffff9c [ 952.930785][T11790] RBP: 00007ff9c6f97090 R08: 0000000000000000 R09: 0000000000000000 [ 952.930800][T11790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.930814][T11790] R13: 0000000000000000 R14: 00007ff9c8b45fa0 R15: 00007ffcfd0fd658 [ 952.930837][T11790] [ 953.152915][T11769] netlink: 'syz.2.13298': attribute type 13 has an invalid length. [ 953.214062][T11769] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 953.254483][ T5180] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.304787][T11773] lo speed is unknown, defaulting to 1000 [ 953.347595][T11806] __nla_validate_parse: 11 callbacks suppressed [ 953.347613][T11806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13310'. [ 953.373971][T11773] chnl_net:caif_netlink_parms(): no params data found [ 953.415303][T11773] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.423575][T11773] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.431261][T11773] bridge_slave_0: entered allmulticast mode [ 953.438834][T11773] bridge_slave_0: entered promiscuous mode [ 953.445809][T11773] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.452908][T11773] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.461203][T11773] bridge_slave_1: entered allmulticast mode [ 953.468015][T11773] bridge_slave_1: entered promiscuous mode [ 953.490084][T11773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.503673][T11773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.530504][T11773] team0: Port device team_slave_0 added [ 953.537535][T11773] team0: Port device team_slave_1 added [ 953.555265][T11773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.562246][T11773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.588914][T11773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.601382][T11773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.608427][T11773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.634474][T11773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.688591][T11773] hsr_slave_0: entered promiscuous mode [ 953.695412][T11773] hsr_slave_1: entered promiscuous mode [ 953.701714][T11773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 953.711375][T11773] Cannot create hsr debugfs directory [ 953.881822][T11773] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.894393][ T4785] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 953.960494][T11819] FAULT_INJECTION: forcing a failure. [ 953.960494][T11819] name failslab, interval 1, probability 0, space 0, times 0 [ 953.973252][T11819] CPU: 1 UID: 0 PID: 11819 Comm: syz.7.13312 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 953.973306][T11819] Tainted: [W]=WARN [ 953.973329][T11819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 953.973388][T11819] Call Trace: [ 953.973395][T11819] [ 953.973404][T11819] dump_stack_lvl+0xf2/0x150 [ 953.973436][T11819] dump_stack+0x15/0x1a [ 953.973458][T11819] should_fail_ex+0x24a/0x260 [ 953.973492][T11819] should_failslab+0x8f/0xb0 [ 953.973617][T11819] kmem_cache_alloc_noprof+0x52/0x320 [ 953.973653][T11819] ? alloc_empty_file+0xd0/0x200 [ 953.973748][T11819] alloc_empty_file+0xd0/0x200 [ 953.973782][T11819] path_openat+0x6a/0x1fc0 [ 953.973805][T11819] ? _parse_integer_limit+0x167/0x180 [ 953.973863][T11819] ? _parse_integer+0x27/0x30 [ 953.973890][T11819] ? kstrtoull+0x110/0x140 [ 953.973918][T11819] ? kstrtouint+0x77/0xc0 [ 953.973952][T11819] ? kstrtouint_from_user+0xb0/0xe0 [ 953.973987][T11819] do_filp_open+0x107/0x230 [ 953.974074][T11819] do_sys_openat2+0xab/0x120 [ 953.974240][T11819] __x64_sys_creat+0x66/0x90 [ 953.974301][T11819] x64_sys_call+0x1084/0x2dc0 [ 953.974386][T11819] do_syscall_64+0xc9/0x1c0 [ 953.974413][T11819] ? clear_bhb_loop+0x55/0xb0 [ 953.974487][T11819] ? clear_bhb_loop+0x55/0xb0 [ 953.974514][T11819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.974540][T11819] RIP: 0033:0x7fb88ea5cde9 [ 953.974557][T11819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 953.974649][T11819] RSP: 002b:00007fb88d0c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 953.974672][T11819] RAX: ffffffffffffffda RBX: 00007fb88ec75fa0 RCX: 00007fb88ea5cde9 [ 953.974685][T11819] RDX: 0000000000000000 RSI: 000000000000004c RDI: 0000400000000140 [ 953.974697][T11819] RBP: 00007fb88d0c1090 R08: 0000000000000000 R09: 0000000000000000 [ 953.974765][T11819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.974777][T11819] R13: 0000000000000000 R14: 00007fb88ec75fa0 R15: 00007ffd4a9036f8 [ 953.974798][T11819] [ 954.199623][T11773] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.275973][T11773] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.457361][T11773] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.526509][T11773] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 954.601004][T11773] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 954.677533][T11773] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 954.688845][T11773] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 954.848450][T11773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.881180][ T4785] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 954.938973][T11773] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.001822][ T4775] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.008992][ T4775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.086277][ T4775] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.093464][ T4775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.178552][T11856] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.13325'. [ 955.218260][T11773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.272627][ T4785] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 955.320948][T11867] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 955.329221][T11867] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 955.369118][T11875] loop2: detected capacity change from 0 to 2048 [ 955.388353][T11773] veth0_vlan: entered promiscuous mode [ 955.398454][T11773] veth1_vlan: entered promiscuous mode [ 955.435689][T11773] veth0_macvtap: entered promiscuous mode [ 955.449665][T11773] veth1_macvtap: entered promiscuous mode [ 955.461391][T11773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.472124][T11773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.482081][T11773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.492602][T11773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.496008][T11886] xt_NFQUEUE: number of total queues is 0 [ 955.502472][T11773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.502506][T11773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.502587][T11773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.539020][T11773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.550052][T11773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.562020][T11886] bond_slave_1: entered promiscuous mode [ 955.569903][ T4771] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 955.580391][T11773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.580413][T11773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.580427][T11773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.580443][T11773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.580457][T11773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.631663][T11773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.641570][T11773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.652096][T11773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.664705][T11773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.675557][T11892] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13332'. [ 955.694008][T11773] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.702770][T11773] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.711653][T11773] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.720618][T11773] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.749375][T11892] bond0: (slave bond_slave_1): Releasing backup interface [ 955.760780][T11892] bond_slave_1 (unregistering): left promiscuous mode [ 955.845906][T11905] loop9: detected capacity change from 0 to 512 [ 955.855997][T11905] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 955.871029][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 955.871044][ T29] audit: type=1400 audit(2000000041.213:58388): avc: denied { execmem } for pid=11903 comm="syz.1.13337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 955.929513][ T29] audit: type=1400 audit(2000000041.251:58389): avc: denied { create } for pid=11910 comm="syz.2.13339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 955.950249][ T29] audit: type=1326 audit(2000000041.269:58390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.6.13297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818237cde9 code=0x7ffc0000 [ 955.974893][ T29] audit: type=1326 audit(2000000041.269:58391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.6.13297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f818237cde9 code=0x7ffc0000 [ 955.999372][ T29] audit: type=1326 audit(2000000041.269:58392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.6.13297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818237cde9 code=0x7ffc0000 [ 956.023977][ T29] audit: type=1326 audit(2000000041.269:58393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.6.13297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f818237cde9 code=0x7ffc0000 [ 956.048560][ T29] audit: type=1326 audit(2000000041.269:58394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.6.13297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818237cde9 code=0x7ffc0000 [ 956.048978][T11916] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 956.073292][ T29] audit: type=1326 audit(2000000041.269:58395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.6.13297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f818237cde9 code=0x7ffc0000 [ 956.080550][T11916] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 956.113530][ T29] audit: type=1326 audit(2000000041.269:58396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.6.13297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f818237cde9 code=0x7ffc0000 [ 956.138076][ T29] audit: type=1326 audit(2000000041.269:58397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.6.13297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f818237cde9 code=0x7ffc0000 [ 956.173364][T11905] EXT4-fs (loop9): 1 truncate cleaned up [ 956.179959][T11905] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 956.222556][T11928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11928 comm=syz.2.13344 [ 956.407765][T11932] random: crng reseeded on system resumption [ 956.414111][T11928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11928 comm=syz.2.13344 [ 956.541901][T11928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11928 comm=syz.2.13344 [ 956.585040][T11935] vhci_hcd: default hub control req: e000 v0000 i0000 l0 [ 956.610702][T11928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11928 comm=syz.2.13344 [ 956.656179][T11928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11928 comm=syz.2.13344 [ 956.701707][T11928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11928 comm=syz.2.13344 [ 956.776856][T11928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11928 comm=syz.2.13344 [ 956.816434][T11928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11928 comm=syz.2.13344 [ 956.831103][T11905] lo speed is unknown, defaulting to 1000 [ 956.857347][T11928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11928 comm=syz.2.13344 [ 956.919870][T11928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11928 comm=syz.2.13344 [ 957.026818][T11949] loop6: detected capacity change from 0 to 2048 [ 957.047576][T11956] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 957.056577][T11956] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 957.106321][ T4771] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 957.153160][ T5969] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.418594][T11973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13360'. [ 957.466178][T11983] loop6: detected capacity change from 0 to 512 [ 957.519849][T11983] EXT4-fs (loop6): too many log groups per flexible block group [ 957.528372][T11983] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 957.536838][T11983] EXT4-fs (loop6): mount failed [ 957.549360][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13366'. [ 957.631362][T11962] lo speed is unknown, defaulting to 1000 [ 957.710280][T12007] FAULT_INJECTION: forcing a failure. [ 957.710280][T12007] name failslab, interval 1, probability 0, space 0, times 0 [ 957.722988][T12007] CPU: 1 UID: 0 PID: 12007 Comm: syz.7.13372 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 957.723025][T12007] Tainted: [W]=WARN [ 957.723034][T12007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 957.723055][T12007] Call Trace: [ 957.723062][T12007] [ 957.723107][T12007] dump_stack_lvl+0xf2/0x150 [ 957.723186][T12007] dump_stack+0x15/0x1a [ 957.723212][T12007] should_fail_ex+0x24a/0x260 [ 957.723254][T12007] should_failslab+0x8f/0xb0 [ 957.723335][T12007] kmem_cache_alloc_noprof+0x52/0x320 [ 957.723455][T12007] ? audit_log_start+0x34c/0x6b0 [ 957.723555][T12007] audit_log_start+0x34c/0x6b0 [ 957.723587][T12007] ? _parse_integer_limit+0x167/0x180 [ 957.723623][T12007] ? __rcu_read_unlock+0x4e/0x70 [ 957.723676][T12007] audit_log+0x5f/0xe0 [ 957.723717][T12007] sel_write_enforce+0x277/0x2e0 [ 957.723751][T12007] vfs_writev+0x3fa/0x880 [ 957.723793][T12007] ? __pfx_sel_write_enforce+0x10/0x10 [ 957.723827][T12007] ? mutex_lock+0xd/0x40 [ 957.723870][T12007] do_writev+0xf4/0x220 [ 957.723915][T12007] __x64_sys_writev+0x45/0x50 [ 957.723940][T12007] x64_sys_call+0x1fab/0x2dc0 [ 957.724044][T12007] do_syscall_64+0xc9/0x1c0 [ 957.724079][T12007] ? clear_bhb_loop+0x55/0xb0 [ 957.724112][T12007] ? clear_bhb_loop+0x55/0xb0 [ 957.724143][T12007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.724208][T12007] RIP: 0033:0x7fb88ea5cde9 [ 957.724227][T12007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 957.724248][T12007] RSP: 002b:00007fb88d0c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 957.724335][T12007] RAX: ffffffffffffffda RBX: 00007fb88ec75fa0 RCX: 00007fb88ea5cde9 [ 957.724351][T12007] RDX: 0000000000000002 RSI: 0000400000000040 RDI: 0000000000000003 [ 957.724364][T12007] RBP: 00007fb88d0c1090 R08: 0000000000000000 R09: 0000000000000000 [ 957.724375][T12007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.724386][T12007] R13: 0000000000000000 R14: 00007fb88ec75fa0 R15: 00007ffd4a9036f8 [ 957.724404][T12007] [ 958.008074][T11962] chnl_net:caif_netlink_parms(): no params data found [ 958.031836][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13374'. [ 958.136690][T11962] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.144724][T11962] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.152156][T11962] bridge_slave_0: entered allmulticast mode [ 958.158792][T11962] bridge_slave_0: entered promiscuous mode [ 958.167166][T11962] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.174397][T11962] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.181766][T11962] bridge_slave_1: entered allmulticast mode [ 958.188726][T11962] bridge_slave_1: entered promiscuous mode [ 958.211504][T11962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.222729][T11962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.275468][T11962] team0: Port device team_slave_0 added [ 958.282708][T11962] team0: Port device team_slave_1 added [ 958.307018][T12029] loop7: detected capacity change from 0 to 2048 [ 958.332309][T11962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.339443][T11962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.365678][T11962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.382249][T11962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.389504][T11962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.410082][ T4777] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 958.415752][T11962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.444345][T12029] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 958.501773][T11163] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.516837][T11962] hsr_slave_0: entered promiscuous mode [ 958.523305][T11962] hsr_slave_1: entered promiscuous mode [ 958.532302][T11962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 958.547071][T11962] Cannot create hsr debugfs directory [ 958.561392][T12041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13384'. [ 958.710814][T12053] SELinux: policydb string SE Lie˝ does not match my string SE Linux [ 958.720086][T12055] netlink: 'syz.6.13389': attribute type 1 has an invalid length. [ 958.729581][T11962] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.743454][T12053] SELinux: failed to load policy [ 958.774906][T12053] team0: No ports can be present during mode change [ 958.795742][T12062] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 958.839394][T12070] FAULT_INJECTION: forcing a failure. [ 958.839394][T12070] name failslab, interval 1, probability 0, space 0, times 0 [ 958.852257][T12070] CPU: 1 UID: 0 PID: 12070 Comm: syz.1.13393 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 958.852289][T12070] Tainted: [W]=WARN [ 958.852297][T12070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 958.852312][T12070] Call Trace: [ 958.852366][T12070] [ 958.852374][T12070] dump_stack_lvl+0xf2/0x150 [ 958.852402][T12070] dump_stack+0x15/0x1a [ 958.852422][T12070] should_fail_ex+0x24a/0x260 [ 958.852494][T12070] should_failslab+0x8f/0xb0 [ 958.852563][T12070] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 958.852665][T12070] ? sidtab_sid2str_get+0xb8/0x140 [ 958.852687][T12070] kmemdup_noprof+0x2a/0x60 [ 958.852710][T12070] sidtab_sid2str_get+0xb8/0x140 [ 958.852732][T12070] security_sid_to_context_core+0x1eb/0x2f0 [ 958.852825][T12070] security_sid_to_context+0x27/0x30 [ 958.852859][T12070] selinux_lsmprop_to_secctx+0x68/0xf0 [ 958.852882][T12070] security_lsmprop_to_secctx+0x40/0x80 [ 958.852911][T12070] audit_log_task_context+0x76/0x180 [ 958.853007][T12070] audit_log_task+0xf9/0x1c0 [ 958.853036][T12070] audit_seccomp+0x68/0x130 [ 958.853091][T12070] __seccomp_filter+0x6fa/0x1180 [ 958.853114][T12070] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 958.853139][T12070] ? vfs_write+0x644/0x920 [ 958.853229][T12070] __secure_computing+0x9f/0x1c0 [ 958.853251][T12070] syscall_trace_enter+0xd1/0x1f0 [ 958.853273][T12070] ? fpregs_assert_state_consistent+0x83/0xa0 [ 958.853364][T12070] do_syscall_64+0xaa/0x1c0 [ 958.853504][T12070] ? clear_bhb_loop+0x55/0xb0 [ 958.853609][T12070] ? clear_bhb_loop+0x55/0xb0 [ 958.853703][T12070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.853787][T12070] RIP: 0033:0x7ff9c892b7fc [ 958.853802][T12070] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 958.853835][T12070] RSP: 002b:00007ff9c6f97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 958.853907][T12070] RAX: ffffffffffffffda RBX: 00007ff9c8b45fa0 RCX: 00007ff9c892b7fc [ 958.853925][T12070] RDX: 000000000000000f RSI: 00007ff9c6f970a0 RDI: 0000000000000005 [ 958.853937][T12070] RBP: 00007ff9c6f97090 R08: 0000000000000000 R09: 0000000000000000 [ 958.853949][T12070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.853960][T12070] R13: 0000000000000000 R14: 00007ff9c8b45fa0 R15: 00007ffcfd0fd658 [ 958.853979][T12070] [ 958.855136][T11962] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.179081][T12084] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.13399'. [ 959.213990][T11962] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.307186][T11962] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.387573][T11962] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 959.406104][T11962] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 959.415052][T11962] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 959.436383][T11962] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 959.497782][T11962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.511275][T11962] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.544542][ T4763] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.551741][ T4763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 959.587316][ T4763] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.594480][ T4763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.651390][ T4785] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 959.665720][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13404'. [ 959.699546][T12101] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 959.741884][T11962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.963139][T11962] veth0_vlan: entered promiscuous mode [ 959.981838][T12085] syz.7.13397 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 959.992958][T12085] CPU: 1 UID: 0 PID: 12085 Comm: syz.7.13397 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 959.992995][T12085] Tainted: [W]=WARN [ 959.993004][T12085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 959.993020][T12085] Call Trace: [ 959.993028][T12085] [ 959.993037][T12085] dump_stack_lvl+0xf2/0x150 [ 959.993067][T12085] dump_stack+0x15/0x1a [ 959.993088][T12085] dump_header+0x83/0x2d0 [ 959.993186][T12085] oom_kill_process+0x341/0x4c0 [ 959.993223][T12085] out_of_memory+0x9af/0xbe0 [ 959.993278][T12085] ? css_next_descendant_pre+0x11c/0x140 [ 959.993300][T12085] mem_cgroup_out_of_memory+0x13e/0x190 [ 959.993401][T12085] try_charge_memcg+0x508/0x7f0 [ 959.993446][T12085] charge_memcg+0x50/0xc0 [ 959.993469][T12085] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 959.993494][T12085] __read_swap_cache_async+0x236/0x480 [ 959.993519][T12085] swap_cluster_readahead+0x279/0x3f0 [ 959.993588][T12085] swapin_readahead+0xe4/0x6f0 [ 959.993675][T12085] ? swap_cache_get_folio+0x77/0x210 [ 959.993702][T12085] do_swap_page+0x31b/0x2550 [ 959.993754][T12085] ? hrtimer_try_to_cancel+0x1d3/0x1e0 [ 959.993784][T12085] ? __rcu_read_lock+0x36/0x50 [ 959.993809][T12085] ? __pfx_default_wake_function+0x10/0x10 [ 959.993848][T12085] handle_mm_fault+0x8e4/0x2ac0 [ 959.993891][T12085] exc_page_fault+0x3b9/0x650 [ 959.993951][T12085] asm_exc_page_fault+0x26/0x30 [ 959.994045][T12085] RIP: 0033:0x7fb88ea8f6a8 [ 959.994063][T12085] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 959.994086][T12085] RSP: 002b:00007ffd4a9037f0 EFLAGS: 00010293 [ 959.994104][T12085] RAX: 0000000000000000 RBX: 00007fb88ec75fa0 RCX: 00007fb88ea8f6a5 [ 959.994120][T12085] RDX: 00007ffd4a903830 RSI: 0000000000000000 RDI: 0000000000000000 [ 959.994135][T12085] RBP: 00007fb88ec77ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 959.994149][T12085] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000ddba7 [ 959.994164][T12085] R13: 00007fb88ec76080 R14: ffffffffffffffff R15: 00007ffd4a903970 [ 959.994224][T12085] [ 959.994230][T12085] memory: usage 307200kB, limit 307200kB, failcnt 4102 [ 960.051186][T11962] veth1_vlan: entered promiscuous mode [ 960.055098][T12085] memory+swap: usage 270424kB, limit 9007199254740988kB, failcnt 0 [ 960.126226][T11962] veth0_macvtap: entered promiscuous mode [ 960.127283][T12085] kmem: usage 264104kB, limit 9007199254740988kB, failcnt 0 [ 960.127301][T12085] Memory cgroup stats for [ 960.172192][T11962] veth1_macvtap: entered promiscuous mode [ 960.178538][T12085] /syz7 [ 960.238123][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.239025][T12085] : [ 960.243199][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.275952][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.286582][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.297185][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.307650][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.318339][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.328898][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.339532][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.350133][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.364865][T12085] cache 0 [ 960.368194][T12085] rss 4096 [ 960.371233][T12085] shmem 0 [ 960.374188][T12085] mapped_file 0 [ 960.378296][T12085] dirty 0 [ 960.381241][T12085] writeback 4096 [ 960.384793][T12085] workingset_refault_anon 1 [ 960.389388][T12085] workingset_refault_file 3 [ 960.393905][T12085] swap 212992 [ 960.397838][T12085] swapcached 8192 [ 960.401473][T12085] pgpgin 1193175 [ 960.405081][T12085] pgpgout 1193173 [ 960.408795][T12085] pgfault 1092955 [ 960.412491][T12085] pgmajfault 10 [ 960.415966][T12085] inactive_anon 8192 [ 960.420609][T12085] active_anon 0 [ 960.424072][T12085] inactive_file 0 [ 960.427710][T12085] active_file 0 [ 960.431253][T12085] unevictable 0 [ 960.434726][T12085] hierarchical_memory_limit 314572800 [ 960.440917][T12085] hierarchical_memsw_limit 9223372036854771712 [ 960.447122][T12085] total_cache 0 [ 960.450620][T12085] total_rss 4096 [ 960.454204][T12085] total_shmem 0 [ 960.457689][T12085] total_mapped_file 0 [ 960.462427][T12085] total_dirty 0 [ 960.465982][T12085] total_writeback 4096 [ 960.470066][T12085] total_workingset_refault_anon 1 [ 960.475207][T12085] total_workingset_refault_file 3 [ 960.480578][T12085] total_swap 212992 [ 960.485122][T12085] total_swapcached 8192 [ 960.489306][T12085] total_pgpgin 1193175 [ 960.493560][T12085] total_pgpgout 1193173 [ 960.497731][T12085] total_pgfault 1092955 [ 960.501895][T12085] total_pgmajfault 10 [ 960.506577][T12085] total_inactive_anon 8192 [ 960.511062][T12085] total_active_anon 0 [ 960.511560][T11962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.515079][T12085] total_inactive_file 0 [ 960.515090][T12085] total_active_file 0 [ 960.515100][T12085] total_unevictable 0 [ 960.535271][T12085] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.13397,pid=12085,uid=0 [ 960.541462][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.551153][T12085] Memory cgroup out of memory: Killed process 12085 (syz.7.13397) total-vm:93712kB, anon-rss:916kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 960.561032][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.561049][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.561066][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.561085][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.619341][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.629311][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.639807][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.649740][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.660225][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.671363][T11962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 960.689434][T11962] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.698431][T11962] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.707256][T11962] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.716169][T11962] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.786857][T12141] vcan0: entered promiscuous mode [ 960.790061][T12143] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13414'. [ 960.801090][T12141] vlan3: entered promiscuous mode [ 960.801791][T12141] vcan0: left promiscuous mode [ 960.825710][T12144] loop7: detected capacity change from 0 to 256 [ 960.833402][T12144] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 960.876433][T12148] loop6: detected capacity change from 0 to 2048 [ 960.888135][T12151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13415'. [ 960.897407][T12151] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13415'. [ 960.935593][T12155] loop7: detected capacity change from 0 to 2048 [ 960.953394][ T4775] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 961.004807][T12163] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 961.023564][T12162] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.13420'. [ 961.033133][T12166] loop9: detected capacity change from 0 to 512 [ 961.045414][T12165] loop7: detected capacity change from 0 to 164 [ 961.052285][ T4777] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 961.069584][T12165] iso9660: Unknown parameter '0xffffffffffffffffutf8' [ 961.083023][T12168] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 961.110636][T12166] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.13419: bg 0: block 248: padding at end of block bitmap is not set [ 961.143884][T12176] blktrace: Concurrent blktraces are not allowed on loop15 [ 961.160484][T12166] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.13419: Failed to acquire dquot type 1 [ 961.174203][T12177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13426'. [ 961.190574][T12166] EXT4-fs (loop9): 1 truncate cleaned up [ 961.196956][T12166] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 961.209869][T12166] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 961.263073][ T29] kauditd_printk_skb: 511 callbacks suppressed [ 961.263090][ T29] audit: type=1400 audit(2000000046.264:58904): avc: denied { unlink } for pid=11163 comm="syz-executor" name="file0" dev="tmpfs" ino=393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 961.320861][ T29] audit: type=1326 audit(2000000046.302:58905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12156 comm="syz.9.13419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb58262cde9 code=0x7ffc0000 [ 961.321073][T12184] audit: audit_lost=144 audit_rate_limit=0 audit_backlog_limit=64 [ 961.344578][ T29] audit: type=1326 audit(2000000046.302:58906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12156 comm="syz.9.13419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58262cde9 code=0x7ffc0000 [ 961.344643][ T29] audit: type=1326 audit(2000000046.302:58907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12156 comm="syz.9.13419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58262cde9 code=0x7ffc0000 [ 961.344675][ T29] audit: type=1326 audit(2000000046.302:58908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12156 comm="syz.9.13419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb58262cde9 code=0x7ffc0000 [ 961.344783][ T29] audit: type=1326 audit(2000000046.302:58909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12156 comm="syz.9.13419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58262cde9 code=0x7ffc0000 [ 961.344817][ T29] audit: type=1326 audit(2000000046.302:58910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12156 comm="syz.9.13419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58262cde9 code=0x7ffc0000 [ 961.344889][ T29] audit: type=1326 audit(2000000046.302:58911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12156 comm="syz.9.13419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb58262cde9 code=0x7ffc0000 [ 961.344922][ T29] audit: type=1326 audit(2000000046.302:58912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12156 comm="syz.9.13419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58262cde9 code=0x7ffc0000 [ 961.539435][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13419'. [ 961.548679][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13419'. [ 961.633009][T11962] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.723361][ T4771] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 961.735026][ T4763] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 961.782360][T12212] loop7: detected capacity change from 0 to 2048 [ 961.862655][T12222] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13440'. [ 961.872183][T12227] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 961.872183][T12227] The task syz.9.13438 (12227) triggered the difference, watch for misbehavior. [ 961.959670][T12239] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 961.966299][T12239] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 961.974780][T12239] vhci_hcd vhci_hcd.0: Device attached [ 961.992610][T12240] vhci_hcd: connection closed [ 961.992827][ T4763] vhci_hcd: stop threads [ 962.001951][ T4763] vhci_hcd: release socket [ 962.006669][ T4763] vhci_hcd: disconnect device [ 962.011201][T12244] can: request_module (can-proto-3) failed. [ 962.019669][T12246] loop7: detected capacity change from 0 to 512 [ 962.028891][T12244] SELinux: Context system_u:object_r:default_t:s0 is not valid (left unmapped). [ 962.028905][T12246] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.13448: invalid block [ 962.039617][T12244] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 962.052319][T12246] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.13448: invalid indirect mapped block 4294967295 (level 1) [ 962.074766][T12246] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.13448: invalid indirect mapped block 4294967295 (level 1) [ 962.095093][T12246] EXT4-fs (loop7): 2 truncates cleaned up [ 962.101243][T12246] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 962.136148][T11163] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.167730][T12257] loop7: detected capacity change from 0 to 2048 [ 962.248126][ T4777] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 962.389540][T12279] netlink: 'syz.1.13461': attribute type 1 has an invalid length. [ 962.557071][T12285] smc: net device bond0 erased user defined pnetid SYZ2 [ 962.564074][T12285] smc: net device ip6tnl0 erased user defined pnetid SYZ0 [ 963.011983][T12302] tmpfs: Unknown parameter 'nolazytime' [ 963.110066][T12319] smc: net device bond0 applied user defined pnetid SYZ0 [ 963.117916][T12319] smc: net device bond0 erased user defined pnetid SYZ0 [ 963.162313][T12328] sctp: [Deprecated]: syz.1.13481 (pid 12328) Use of int in max_burst socket option deprecated. [ 963.162313][T12328] Use struct sctp_assoc_value instead [ 963.279936][T12335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.300908][T12335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.476544][ T4763] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 963.524217][T12335] selinux_netlink_send: 55 callbacks suppressed [ 963.524233][T12335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12335 comm=syz.9.13484 [ 963.546115][T12335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.572126][T12335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.594420][T12335] SELinux: policydb version 425318364 does not match my version range 15-34 [ 963.624728][T12335] SELinux: failed to load policy [ 963.927980][T12364] lo speed is unknown, defaulting to 1000 [ 964.150225][T12364] chnl_net:caif_netlink_parms(): no params data found [ 964.188249][T12364] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.195392][T12364] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.202768][T12364] bridge_slave_0: entered allmulticast mode [ 964.209457][T12364] bridge_slave_0: entered promiscuous mode [ 964.218905][T12364] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.226944][T12364] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.234348][T12364] bridge_slave_1: entered allmulticast mode [ 964.243474][T12364] bridge_slave_1: entered promiscuous mode [ 964.251706][T12386] FAULT_INJECTION: forcing a failure. [ 964.251706][T12386] name failslab, interval 1, probability 0, space 0, times 0 [ 964.264448][T12386] CPU: 1 UID: 0 PID: 12386 Comm: syz.9.13499 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 964.264522][T12386] Tainted: [W]=WARN [ 964.264530][T12386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 964.264540][T12386] Call Trace: [ 964.264546][T12386] [ 964.264553][T12386] dump_stack_lvl+0xf2/0x150 [ 964.264654][T12386] dump_stack+0x15/0x1a [ 964.264706][T12386] should_fail_ex+0x24a/0x260 [ 964.264736][T12386] ? genl_start+0x11e/0x3a0 [ 964.264757][T12386] should_failslab+0x8f/0xb0 [ 964.264835][T12386] __kmalloc_cache_noprof+0x4e/0x320 [ 964.264912][T12386] genl_start+0x11e/0x3a0 [ 964.264934][T12386] __netlink_dump_start+0x32a/0x520 [ 964.264965][T12386] genl_rcv_msg+0x4e5/0x6c0 [ 964.264986][T12386] ? __pfx_nl802154_dump_interface+0x10/0x10 [ 964.265070][T12386] ? __pfx_genl_start+0x10/0x10 [ 964.265090][T12386] ? __pfx_genl_dumpit+0x10/0x10 [ 964.265216][T12386] ? __pfx_genl_done+0x10/0x10 [ 964.265391][T12386] netlink_rcv_skb+0x12c/0x230 [ 964.265454][T12386] ? __pfx_genl_rcv_msg+0x10/0x10 [ 964.265482][T12386] genl_rcv+0x28/0x40 [ 964.265500][T12386] netlink_unicast+0x599/0x670 [ 964.265527][T12386] netlink_sendmsg+0x5cc/0x6e0 [ 964.265567][T12386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 964.265640][T12386] __sock_sendmsg+0x140/0x180 [ 964.265659][T12386] ____sys_sendmsg+0x312/0x410 [ 964.265690][T12386] __sys_sendmsg+0x19d/0x230 [ 964.265798][T12386] __x64_sys_sendmsg+0x46/0x50 [ 964.265897][T12386] x64_sys_call+0x2734/0x2dc0 [ 964.265982][T12386] do_syscall_64+0xc9/0x1c0 [ 964.266005][T12386] ? clear_bhb_loop+0x55/0xb0 [ 964.266029][T12386] ? clear_bhb_loop+0x55/0xb0 [ 964.266052][T12386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.266075][T12386] RIP: 0033:0x7fb58262cde9 [ 964.266125][T12386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 964.266141][T12386] RSP: 002b:00007fb580c97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 964.266157][T12386] RAX: ffffffffffffffda RBX: 00007fb582845fa0 RCX: 00007fb58262cde9 [ 964.266168][T12386] RDX: 0000000000000000 RSI: 00004000000003c0 RDI: 0000000000000004 [ 964.266179][T12386] RBP: 00007fb580c97090 R08: 0000000000000000 R09: 0000000000000000 [ 964.266189][T12386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 964.266199][T12386] R13: 0000000000000000 R14: 00007fb582845fa0 R15: 00007ffc7b6871c8 [ 964.266295][T12386] [ 964.571834][T12364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.582894][T12364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.593915][T12390] 9pnet_fd: Insufficient options for proto=fd [ 964.605472][T12394] delete_channel: no stack [ 964.616271][T12394] delete_channel: no stack [ 964.640018][T12364] team0: Port device team_slave_0 added [ 964.647921][T12364] team0: Port device team_slave_1 added [ 964.677494][T12403] __nla_validate_parse: 7 callbacks suppressed [ 964.677512][T12403] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13505'. [ 964.678412][T12364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.699928][T12364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.726064][T12364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.752092][T12364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.759166][T12364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.785164][T12364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.813730][T12411] loop7: detected capacity change from 0 to 512 [ 964.867165][T12364] hsr_slave_0: entered promiscuous mode [ 964.879268][T12364] hsr_slave_1: entered promiscuous mode [ 964.885443][T12364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 964.909094][ T4768] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 964.924404][T12364] Cannot create hsr debugfs directory [ 964.948336][T12411] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 964.983207][T12411] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 965.048423][T12424] netlink: 96 bytes leftover after parsing attributes in process `syz.6.13512'. [ 965.093832][T11163] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.437791][T11728] ================================================================== [ 965.445920][T11728] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages [ 965.454143][T11728] [ 965.456479][T11728] read-write to 0xffff888100631830 of 8 bytes by task 11163 on cpu 0: [ 965.464656][T11728] __filemap_remove_folio+0x1c5/0x2c0 [ 965.470065][T11728] __remove_mapping+0x33f/0x470 [ 965.474958][T11728] remove_mapping+0x22/0x90 [ 965.479475][T11728] mapping_try_invalidate+0x265/0x3f0 [ 965.484859][T11728] invalidate_mapping_pages+0x27/0x40 [ 965.490236][T11728] invalidate_bdev+0x58/0x70 [ 965.494841][T11728] ext4_put_super+0x571/0x810 [ 965.499619][T11728] generic_shutdown_super+0xe5/0x220 [ 965.504938][T11728] kill_block_super+0x2a/0x70 [ 965.509624][T11728] ext4_kill_sb+0x44/0x80 [ 965.513959][T11728] deactivate_locked_super+0x7d/0x1c0 [ 965.519347][T11728] deactivate_super+0x9f/0xb0 [ 965.524043][T11728] cleanup_mnt+0x268/0x2e0 [ 965.528475][T11728] __cleanup_mnt+0x19/0x20 [ 965.532922][T11728] task_work_run+0x13a/0x1a0 [ 965.537531][T11728] syscall_exit_to_user_mode+0xa8/0x120 [ 965.543089][T11728] do_syscall_64+0xd6/0x1c0 [ 965.547616][T11728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.553528][T11728] [ 965.555855][T11728] read to 0xffff888100631830 of 8 bytes by task 11728 on cpu 1: [ 965.563494][T11728] nr_blockdev_pages+0x7c/0xd0 [ 965.568288][T11728] si_meminfo+0x87/0xd0 [ 965.572455][T11728] update_defense_level+0x49/0x5b0 [ 965.577578][T11728] defense_work_handler+0x1f/0x80 [ 965.582778][T11728] process_scheduled_works+0x483/0x9a0 [ 965.588245][T11728] worker_thread+0x51d/0x6f0 [ 965.592849][T11728] kthread+0x4ae/0x520 [ 965.596939][T11728] ret_from_fork+0x4b/0x60 [ 965.601367][T11728] ret_from_fork_asm+0x1a/0x30 [ 965.606144][T11728] [ 965.608465][T11728] value changed: 0x0000000000000004 -> 0x0000000000000002 [ 965.615574][T11728] [ 965.617914][T11728] Reported by Kernel Concurrency Sanitizer on: [ 965.624096][T11728] CPU: 1 UID: 0 PID: 11728 Comm: kworker/1:8 Tainted: G W 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 965.636430][T11728] Tainted: [W]=WARN [ 965.640234][T11728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 965.650297][T11728] Workqueue: events_long defense_work_handler [ 965.656379][T11728] ================================================================== [ 965.712396][T12429] smc: net device bond0 applied user defined pnetid SYZ0 [ 965.734603][T12364] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.746567][T12429] smc: net device bond0 erased user defined pnetid SYZ0 [ 965.840884][T12364] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.903777][T12364] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.968110][T12364] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.024916][T12364] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 966.033669][T12364] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 966.042299][T12364] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 966.051251][T12364] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 966.088464][T12364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.101055][T12364] 8021q: adding VLAN 0 to HW filter on device team0 [ 966.111457][ T4775] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.118621][ T4775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.131276][ T4763] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.138397][ T4763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.200336][T12364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.256356][ T4777] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 966.264659][T12364] veth0_vlan: entered promiscuous mode [ 966.272417][T12364] veth1_vlan: entered promiscuous mode [ 966.289329][T12364] veth0_macvtap: entered promiscuous mode [ 966.296698][T12364] veth1_macvtap: entered promiscuous mode [ 966.308891][T12364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.319426][T12364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.329255][T12364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.339734][T12364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.349815][T12364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.360373][T12364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.370268][T12364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.380793][T12364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.390655][T12364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.401145][T12364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.410979][T12364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.421422][T12364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.432412][T12364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.443833][T12364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.454416][T12364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.464239][T12364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.474701][T12364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.484610][T12364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.495098][T12364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.504915][T12364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.515685][T12364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.525643][T12364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.536117][T12364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.546012][T12364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.556593][T12364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.567987][T12364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.579399][T12364] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.588260][T12364] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.596983][T12364] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.605808][T12364] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.111353][ T4763] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 967.197838][ T4763] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 967.200536][ T4768] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 967.463446][ T4763] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 968.650776][ T4763] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 969.848038][ T4768] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 970.619063][ T3380] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 971.076786][ T4768] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 972.263404][ T4777] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 972.671415][ T4768] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 973.355177][ T4771] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 973.366142][ T4775] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 973.450014][ T4763] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 974.647412][ T4768] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!