last executing test programs: 6m26.07854433s ago: executing program 4 (id=270): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fchown(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r9, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) setns(r7, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f1, &(0x7f0000000080)) 6m25.180457296s ago: executing program 4 (id=273): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) close_range(r0, r1, 0x200000000000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) semget$private(0x0, 0x4000, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$eJzs3U1sHOUZAOB3HJsEI6WIVimKQpgEKgUJzHoNpi4HWNZje2C9a+2uq0RVRSNwkBUHKBS15AJRJWirVlVPPVKu3HqjqtRKPbQ9VSqHXnpD4lRRqX+iqpBczew6/v9JcEIgz2PF3+zsO9/3zmY978za+20AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJHUJyuV0SQa+bfnT6fbq0+2W7M73L/S32/XNes8vm7ciKT4F4cOxUf/6q370urdR4pvJ+NY79axOFQ0h+LibUduf/SLgwMr2++Q0NU6sce4JOL1IqnzZ5eWFl66BolcRz/69RVv8t/l4vt01sw7rXy2Np2leaeVToyPVx6cmeqkU3kj65zpdLPZtN7Oat1WOz1Vvy8dnZgYS7ORM6355vRkrZGtrHzkgWqlMp4+OTKX1dqdVvPBJ6NTn8kbjbw5XcZUK9+NIuaR4on4VN5Nu1ltNk3PLS4tjK3JKtkq1SJodKs7DvSeP8fuvf2DV97/5+JC8YTcbn+T/hOzOjparY6OPzzx8COVymC1Ul2/orJBXI6IgYgi4po8afkM2d8DOHwCA/36H43IoxnzcTrSDV9DETEU9ZiMdrRitlj3l6FNUX0r9f8rD/79TzuNu7b+r1T5O1fvPhpl/T/eu3V8u/q/KYsdv4auKHpPXy/Hq3ExzsfZWIqlWIiX9rf/g/ue8cAn7SFZd2s6smhGHp1oRR6zUSvXpP01aUzEeIxHJZ6OmZiKTqQxFXk0IotOnIlOdCMrn1H1aEcWtehGK9qRxqmox32RxmhMxESMRRpZjMSZaMV8NGM6Hoha2cu5WCwf97ENWR65NX713J8/eKtYvhw0utNuFSdzRdA/dgjaVO53rP/Ly8X5wsYI9f9mdw2O4nB1llfqPwAAAPC5lZSvviflS/x3lUtTeSP7xh627A5eh/QAAACAfVD+5v9Y0QwVS3dFUlz/V7aIfO+65wYAAADsj6R8j10SEcNxd2/pXCzG67EQW70IAAAAAHwGlb//P140wxGvlStWpktx/Q8AAACfEz/Ybo7991fm2O3MHUx+U84BnFyaO31vcqFWxNUuHOht12++frnH7tTR5HC/k7IZH7x4WxIRg/XsWLIy++XHB3vth+X3o6tzCWw313/Sbu+YQOycQHkrfhwnejEnnu21z/bvSXqjDE/ljWyk3mo8Wk6JWPzrvvL84vciitF/2Jw9nMS5xaWFkWdeWHq2zOVS0culC/0JFNfNo7j8hR1zWe4/AnHX1ns8VL4Roz/ucG/cytr9Hyi3/t9yOc/stvufrB3zjTjZizk53GuHV+7pjXmoGHN05NHRqNUOD3Sz091XltfsfT+L0d32fJf/hTfinl7MPafu6TVbZFFdl8Xzm7Oors2i91jEwD5l8daJ107/5/etJBvbLYuxK8hi+UDExiwAPi3nyll/VqvQrWUVKopKoaj/G+rurStb7uFY++/VUXpnGR/3u42INbVuMDZW99W+91bdl6N3RD/ViznVO58YPLpFXalscUR/cfHFP/SP6A+98/NffPP4H39ZjntV1e2duK8X02/ijt9tU2OLff7Jhqr6drHF21uOW5yDdRrVJC5FHPjOhRfjyMuvXnxg8cLZ5xaeW3i+Wh0brzxUqTxcjaHyVKHf7JApADev3T9jZ9uIW/pdJA9td1Xdr3h3XP6TgpF4Jl6IpSjOAO7uxd69edx3iyvxNX+GcP8uV63Daz7h5f5dri1XY6ubY5PYJnZszSP25Z+VzUfX5L8DAK6LkzvU4V3q/+VX5u/f5bp7fS3fcHUc29fyrXz1mj4aAHBzyNofJsPdN5N2O597enRiYrTWncnSdqv+VNrOJ6ezNG92s3Z9ptacztK5dqvbqq+8cDyZddLO/Nxcq91Np1rtNAY6+enyk9/T/ke/d7LZWrOb1ztzjazWydJ6q9mt1bvpZN6pp3PzTzTyzkzWLjfuzGX1fCqv17p5q5l2WvPtejaSpp0sWxOYT2bNbj6VF4vNdK6dz9balyKiMT+bpZNZp97O57qtXocrY+XNqVZ7tux2ZPPu/+16P94AcCN4+dWL588uLS28dHULf91L8Ke9jwDAeqo0AAAAAAAAAAAAAADc+Da/Xa9Y+wneEXhlCwfjmg9xEy18rT8lY29NsXSDJPbpLXzrscfObxfzxGt3zuytn61/UrZ6q+ubhyNuefenvTWPbx/8/f7P3/7s6XsRcRWbLyc7xKw7TNxynQ9LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCl/wcAAP//ez9qPw==") r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x800200a0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700bdd7432a7bf69371000001020e2d2db8f9195e855f2f9bd4320b7f", @ANYRESOCT=r2, @ANYRES16=r1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) connect$unix(r5, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, &(0x7f0000000140)=0x1) read(r7, 0x0, 0x0) 6m24.889287158s ago: executing program 4 (id=278): socket$netlink(0x10, 0x3, 0x8000000004) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c"], 0x65) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) r11 = socket(0x40000000015, 0x805, 0x0) getsockopt(r11, 0x114, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$bt_l2cap_L2CAP_LM(r11, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) socket$inet6(0xa, 0x2, 0x0) fallocate(r2, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffe000001}) 6m24.596702229s ago: executing program 4 (id=280): getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x400, 0x583feaf5f69e7b14) ioctl$BLKRRPART(r5, 0x125f, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193dfb6c575963f86ddf0fd26d4eef23248000000f858dbb8a19052343f", 0x26}, {&(0x7f0000000080)="051a3018b64b673868a6b7afa2a700000e8000658f0600000000000000", 0x1d}], 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f00000002c0)) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r0, 0x0, 0x0, 0x0) sendto(r7, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd2e}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x8000, 0x5, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8a, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x4, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x401]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 6m23.978614463s ago: executing program 4 (id=285): openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=0x0], 0x48) r1 = syz_io_uring_setup(0x2439, &(0x7f0000000380)={0x0, 0x1064, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140), 0x81, 0x477, &(0x7f0000000a40)="$eJzs3MtvG0UcAODfrpP0RZOolEcfUENBRBSSJhTogQsIpF6QkOAAx5CGqtRtURMkWlW0IFSOiDsScETiL+AEFwScQFzhjpAq1AuFA1q09m7rxE7qODVO8PdJa8/swzOzs5PMzngdwMCq5i9JRBYRv0TEWCO6dIdq4+36tYtzf127OJdElr38R1Lf789rF+fKXcvjdhSRiTQi/SCJfW3SXTh/4dRsrTZ/rohPLZ5+a2rh/IXHT56ePTF/Yv7MzNGjR56YfvqpmSdvSzl35nnd++7Z/XuOvfbxi3NZvP79l3l+7yi2N5ejYXzdaVajuvRc1o3UXx9e96dvLDubwslQHzPCmlQiIq+u4Xr7H4tK3Ky8sXjh/b5mDuipLMuyLS1rK2Xgcgb8jyXR7xwA/VH+o8/vf8vlP+x+9N3VZxs3QHm5rxdLY8tQpPnb1sYd+84epV+NiFcv//1pvkTbcQgAgNvr67z/81i7/t9ocnfTfqPF3NB4RByKiF0RcWdE7I6IuyIi3/eeiLh3jelXl8Vb+z8/beuqYB3K+3/PFHNbS/t/abnLeKUxTnapHonh5I2TtfnDxTmZiOEteXx6lTS+ef7nj1ba1tz/y5c8/bIvWOTj96FlA3THZxdn11HkJa6+F7F3qF35kxszAUlE7ImIvV18ft5vPvnoF/vz8OiO1u37b1n+VdyGeabs84hHGvV/OZaVv5Q0UlppfnJqa9TmD0+VV0WrH3688lJzfLgpfOv67628/re3vf6L8pfNoJyvXVh7Gld+/XDFe5pur/+R5JV6eKRY987s4uK56YiRYsWS9TM3jy3j5f55+ScOtiv/aLIr4p/PitOwr7hW74uI+yPiQJH3ByLiwYg4uEr5v3vuoTdXP0P9rf/jq9V/xHjSPF/fRaBy6tuvVkq/s/o/Ug9NFGs6+fvXaQbXc+4AAABgs0jr34FP0skb4TSdnGx8h393bE9rZxcWD1Xj7TPHG9+VH4/htBzpGmsaD50uxobL+MyyeDnmlWXb6vHJubO1Xs2pA53ZsUL7z/1W6XfugJ5b0zxa6xNtwCbmeU0YXNo/DC7tHwbX2tp/688FAJtXu/Z/KeJ6U7SnD2EA/aP/D4NL+4fBpf3D4NL+YSC1PhJfjvR186T/zcCuY+s6vB+BT/qTeqVHnxzNP9rRg0CkG6XiugikGyEbB4rAlojo9KhLPa3T5dcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA5vdvAAAA///5IuKJ") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x3800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r5, @ANYRES64=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000018c0)={&(0x7f00000001c0)='f2fs_readdir\x00', r6, 0x0, 0x4}, 0x18) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r1, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) io_uring_enter(r1, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000740000000081069059640101006b08b402005356", @ANYRES32=0x41424344, @ANYBLOB="8c1000ca90781000080a8000000000000fbc080a0000000200000002fe"], 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r11, 0x0, 0x8000f28, 0x0) splice(r10, 0x0, r9, 0x0, 0x7f, 0xe) write(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) 6m23.313233697s ago: executing program 4 (id=290): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYRES64=0x0, @ANYBLOB="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", @ANYRES64, @ANYRES64=0x0, @ANYRESHEX, @ANYRESOCT=r0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000019200), 0x5, r1}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82200, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000040)={0x5, 0x1c0000, 0x6, 0x20000000000, 0xe, 0x9, 0x7a6, 0x7}, &(0x7f0000000200)={0x2, 0x8000000000000000, 0x7, 0x8, 0x0, 0x5, 0x8, 0x1}, &(0x7f0000000380)={0x2, 0x6, 0x1ff, 0x9, 0xfb30, 0x7, 0x6, 0x4}, &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400)={[0x7]}, 0x8}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000002c00000008000300020000800e0001006e657464657673696d0000000f0002006e657464657673696d3000000800580000000000"], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r9}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000002", @ANYRES16=r5, @ANYBLOB="00042abd7000fedbdf25370000000800570006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x890) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r11, r10, 0x0, 0x100) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYRES64=r1, @ANYRESOCT=r4, @ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) ioctl$TIOCVHANGUP(r6, 0x5437, 0x200000000000000) socket$nl_route(0x10, 0x3, 0x0) 6m14.340072879s ago: executing program 1 (id=360): r0 = socket$xdp(0x2c, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000380)="390000fa461aa0fbe8ab13aa2151b94dbe9e8a722e34d7e484893ffa56020013fc071200000f00c79e0b9971bcbe9ac0ebaad60105ff7342d69135e54c46e7a03ef38bbd00", 0x45}], 0x1) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x8842) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) r2 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x87}) r3 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000000)=r3, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) read$eventfd(r3, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x50, r0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x2, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) setregid(0x0, r6) chown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, r6) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000000c0)={"54d51a60fabe796d94c601051381e46e", 0x0, 0x0, {0x7, 0x2}, {0x4, 0x7}, 0x8, [0x9, 0x2, 0xb, 0xfffffffffffffffd, 0x10001, 0x200, 0x6fe6c76a, 0x2, 0x9, 0x2, 0xffffffff, 0xfffffffffffffff7, 0x3, 0xffffffffffffffda, 0x8, 0x1]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r7, r7, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r8, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = dup(r9) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000002400)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r10, 0xc4009420, &(0x7f0000001c00)={0x2, 0x2, {0x6, @usage=0x234, r11, 0x162, 0x8, 0x80000001, 0x125, 0x4, 0x82, @struct={0x2ca9, 0x200}, 0x2, 0x1, [0xff, 0x8, 0x0, 0xb9d, 0x3, 0x9]}, {0xf44, @usage=0x100, 0x0, 0x8, 0x2, 0x1000, 0x2, 0x0, 0x0, @struct={0x7, 0x2}, 0x7, 0x9, [0x1, 0x8000000000000001, 0x35e6, 0x4, 0x3ff, 0x2]}, {0x8, @struct={0x3, 0x2}, 0x0, 0x6, 0x8, 0x4c, 0x0, 0x3, 0x2, @usage=0x56f, 0xe973, 0x1e, [0x4, 0xffffffffffffa714, 0x1000, 0x0, 0x7]}, {0x4, 0x401, 0x4f5}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000400)={r11, 0x2}) 6m14.21580253s ago: executing program 1 (id=361): socket$netlink(0x10, 0x3, 0x8000000004) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c"], 0x65) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) r10 = socket(0x40000000015, 0x805, 0x0) getsockopt(r10, 0x114, 0x5, 0x0, &(0x7f00000000c0)) getsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r11, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x3000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}}, 0x88) fallocate(r2, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffe000001}) 6m13.939716832s ago: executing program 1 (id=362): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0xc005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000008000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7762c000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) mount$9p_rdma(&(0x7f0000000580), &(0x7f00000005c0)='./cgroup\x00', &(0x7f0000000600), 0x2800004, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=rdma,port=0x', @ANYRESOCT]) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xfffe, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x865) setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000240), 0x4) r7 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r7}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {0xb9}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe1a, 0x4, {{{}, 0x8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) syz_clone3(&(0x7f0000000300)={0x1c119a800, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x5}, &(0x7f0000000600)=""/159, 0x9f, &(0x7f0000000240), &(0x7f00000002c0)}, 0x58) 6m12.258539802s ago: executing program 1 (id=367): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000000000000000000feffffffb7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a70000001801000020756c2500000000002020207b1af8ff00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f0000000840), 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) 6m11.251065398s ago: executing program 1 (id=372): openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=0x0], 0x48) r1 = syz_io_uring_setup(0x2439, &(0x7f0000000380)={0x0, 0x1064, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140), 0x81, 0x477, &(0x7f0000000a40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x3800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r5, @ANYRES64=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000018c0)={&(0x7f00000001c0)='f2fs_readdir\x00', r6, 0x0, 0x4}, 0x18) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r1, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) io_uring_enter(r1, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000740000000081069059640101006b08b402005356", @ANYRES32=0x41424344, @ANYBLOB="8c1000ca90781000080a8000000000000fbc080a0000000200000002fe"], 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r11, 0x0, 0x8000f28, 0x0) splice(r10, 0x0, r9, 0x0, 0x7f, 0xe) write(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) 6m9.874300146s ago: executing program 1 (id=381): r0 = socket$xdp(0x2c, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000380)="390000fa461aa0fbe8ab13aa2151b94dbe9e8a722e34d7e484893ffa56020013fc071200000f00c79e0b9971bcbe9ac0ebaad60105ff7342d69135e54c46e7a03ef38bbd00", 0x45}], 0x1) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x8842) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) r2 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x87}) r3 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000000)=r3, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) read$eventfd(r3, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x50, r0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x2, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) setregid(0x0, r6) chown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, r6) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000000c0)={"54d51a60fabe796d94c601051381e46e", 0x0, 0x0, {0x7, 0x2}, {0x4, 0x7}, 0x8, [0x9, 0x2, 0xb, 0xfffffffffffffffd, 0x10001, 0x200, 0x6fe6c76a, 0x2, 0x9, 0x2, 0xffffffff, 0xfffffffffffffff7, 0x3, 0xffffffffffffffda, 0x8, 0x1]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r7, r7, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r8, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = dup(r9) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000002400)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r10, 0xc4009420, &(0x7f0000001c00)={0x2, 0x2, {0x6, @usage=0x234, r11, 0x162, 0x8, 0x80000001, 0x125, 0x4, 0x82, @struct={0x2ca9, 0x200}, 0x2, 0x1, [0xff, 0x8, 0x0, 0xb9d, 0x3, 0x9]}, {0xf44, @usage=0x100, 0x0, 0x8, 0x2, 0x1000, 0x2, 0x0, 0x0, @struct={0x7, 0x2}, 0x7, 0x9, [0x1, 0x8000000000000001, 0x35e6, 0x4, 0x3ff, 0x2]}, {0x8, @struct={0x3, 0x2}, 0x0, 0x6, 0x8, 0x4c, 0x0, 0x3, 0x2, @usage=0x56f, 0xe973, 0x1e, [0x4, 0xffffffffffffa714, 0x1000, 0x0, 0x7]}, {0x4, 0x401, 0x4f5}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000400)={r11, 0x2}) 6m8.650772953s ago: executing program 32 (id=290): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYRES64=0x0, @ANYBLOB="2c5fd90745fcbe0b573589c0c5f231f5692644a9861edefd5d66363d952a7d9d1eebf4f3191bf0c3d25de45cff76431dbd3c002788f980d1eb9c38e53f1d5f08ed32af528aa5e715681dd58a21da93de4016a950e9944a925082618dcf9dc6cb1e02bfb850939930b1839bcbbc4a2505c210bbeca587ef51a7141f87289e179fb573759571e6efb400066089dd4fb9c9c69eb4cacae49771b7e143904e2903b868f79203819142075b0430538d3aa9fad6595eb0ea640ef1ac9412d8c1ff663b7354b78176d1d2048e8391e48e46ebd3605c56c26e5bc5ecd72de3ea7e8e0ccfdf792d1e6a9394dc104bc3d98c279b2b99a849b2888cda4461fb6a2f2e4c9c9f2dee1b9364c45770c1d94511eb01c963955f4188dffd75268b45f89f091247ddd2b0f2faa4fd8cae27cefbaaee8ee9ca517743b0e8da534c30b5fc3ac4c441d11384a6cbba3747ac9a614e80c160d431e724cd5e8e2aeaf956f3f8cd36c21ea813fc0c9cd48ed2c97d15bbb0bbe81726ec06a5fc2b6e6431649501b3d892c67b1bced02417f75ba3e2c8a2aea3514856fc28de7b95f2903e60a026e7cd4c80b5c32340c914dd906988e77b62af8d0111d4dbcdcf57d1ec32e685a921e43120f1d6428bb480869557dc40f45bc48cb1a92c1683682dab93e246c570d7dc27e09fde66f00a1b605e5f2da550f79a173ca4cdf52384143f8ea21c11e226a141f6d98829480982b0150cc39d7067584bd040c72ccba900f6fac4ec504e13cde9bc395735e5d4e6415166e92590679f41ed1e4827f64d77e029db95381232c23ba6d4308bf9dd250e204a6ff4f853ee83f57ee06c1c5de05173b229cbabc04058770090c02c125a4d36422edfb3bdc067b787cf58a693bbb28c2f30b45351da39863511e1fabf181b31368f49f101291bb083b81bf6591e97c846401bade1cc035a3689ab7b69217d08f95c352a48c1602bc0cb6d74295d5e70e0ecea754b007558201493931e63f0029db58250666c0a36e202912f303b70d83c6cfbc81cf9dc2b661ca1abf54f1d6094e9a64e4e2696f0a63d9331baeeb3d2154071359f209ecfa59c60f9a5165646e9a74c646f604b3ccd32e6d9336d90a2c1a1d5763166be8744957ead427ad2fa88487e35dd59b8bd1c95adf8532fac2e2894cd100ff5ab11cc98754561e10cbd3a2659129f595d663f7d793d826aff528245da2427a08b23236cfbff812137c2358b6fdd97c10abc0d60d2490b10d074c188277fbcd007458938c1524a914861b4fd2c5e41dfc403d7ad5492e3996b6762ec8b84b5c66aedc4085ee6b190664362a88e9b6f41a034415b56090a930c765eec5403610adf093ebdd80a48b82f28eef6a79a3033179b4527ba90bf8cc7226732b73529f8328652b1d2b646279714bb040eaa6b6e4232278ffb1d41e8df5bc034108d1b9ba74bb4ca7e5c45987e1d5afdbcd3e52c21b0a4806a30517702882d6e516e49a1813d1210bd9b5aba03e87e0295313bbd1868b35a18e7daee0db5404db95512043a589b8286b714b48e0b5ccee5c4ab263150dfc2bbfa5aa070aed94b087fb3e15037ef68c583bf33800c151fb5427c7271ccea4f38a5ff771bfcaf86da82aa807d44134245a62f4d61365ee7198e1ffebd268db02f0fca2bbb23f7ec0f5e207c86993362a632b7f1b9b6d756e4df7239bce8ce3025bcc70304186d2e534fdcc7b9a1c50287696458c94fa43e9f12c3c9c267d896636bc5fb455f59a249f97569b94dad272179a8dbbefeb1b123b85f45a9b63e6da72bd4deefdd54d6b2f0766fc878bbd30b643ebef0d8b8f55f584f7cc66717223ea7b9a4085f09447207d45a8442c4371488934279a03eb0bfb7da54d7633fa33feed7cb92405479cab22b17e97f8454060e36f84ea19ee79c077ba8f5e1962eb340a6c886a34bcd0384e549f6d6ec3fbc6110b0e7595626b078e0ff1d1e6ad542f8f150d541adeb96e7a83bfab56169fc7a1fd272a4442dbcb7dc633e9ad9c13b99d6db7b8acb2cf72983ca108abe03f690f0d6e8f54a51feafb87ee3c616ada0299db7443bfbb27b0b7ffd5cdf55ca2fa6ddfec539a4dc0beb10e783c601984b927934cd8bd8ccbe5ce2cb0e4b9f9ae9aefc0e5cf95d85008bd93a6c90fa02ba0512144320ea3d35d97fca336dbe9c5458bc3b225286e372213217a40ad312dd16f84b354ec40cf8c0632f860425ef2c8760e9cdf656b1dfa33aebf6ca697fc7d3155a64e1d2f6e6e9b00cda2a15125a85156edf4d45632436206d49100e807147f615540ed6ae75b8a322f4a9ac148bf8d824e5e1a108a1e8b007fa9a57566f0dd8133915c8a794fa19613c2f2e28719db2f4385344431cd1a5c1a3ad107a50d7682d87b3f2fe82cebb16bbd91c5f79504d64e7d758b0f0a250b51aef4d7afd50316185c14152d1b29009b5d22fdb315f5c1dc35a5bb1f4f77ef0c9472f8e6f2f1df9fb74c07e5fb66c8e2b9609463e7bdfdb6b2b72f15add5ba0f19cfccea9b3d9b73254e66de421085fd3a0f2a13471f7ccca1b77cf1ca7133bb2019ee4591b5bc0538f80d9324ee9ebb86a0c5b7b426ec29ada8d641fbc8925975e9b895bf282a5492699a0aa550df339a4f18af870afd3581692f6af452e59c31897bc3e2f64054c3424f7539aa6e8e605e41ae4b006e6ee0c043507c535698a0bccebbb459de184ef26140f75433549bfd26bdf024f51b378c5885e6f4ef1c57bd36d16486845358dcd0ff547e88e402801168886cfb7cf269a8e05fe76b1f85108d0a01f18d40833a55c34d5ec468b072e0adb0d0119bbdbe7f2cbb1b1ad271fa871d422b0315f7145f1999d3378a62bb02b088e01909d40a27c363b19aa28055744df15575b6536576a1bdda86b2bb09ff35f9a8ac2ad7ca5e41c9c9feb26e94e92cad2293b08c6cdf2da9ca56f1b08cbce8b361a21faf76c8bc543366cb1b90257eef5763b4d73a64bc00188987137f884375800de9fa6ac992b838f798433a6ab900a85f2f34353c7d02e0f61c781b5ec15fa6a8657d217961985b24af2ba18c130dcfb3c35b318fdf56bf5bb6eb0fbf8721c2f6ad8daa105b749613affb23e993ff45db432866eac710f7c281bda8e2ef32cb748937af0f14615b5329f4fa8735e7f9c23c5a5d51047a9216a5ba46594c97944feb5aa3b4644e4dde7e1e35e9e17b3213b2e83837cece513eddd5647190f8617e885a4b462c23e5ed725b6a5010371bb89438f3e244af152d4844565d0942d7a3e33bee6480d6b92c35a792a9c4490fb0f84efcf7697aca655bd55c57ff227efed956378c1ea598c6fb74a963afda9301596bb76cb4131d16103bb0040d3cdd1e267c06400281ca27a346e06a23811103233851390bb34e3621a76d5db1d87d74f0d6a12706fe36ac26265660e0771bbbd15d7ac4ae502716ab4ff1593039f9f9616c21738ba7f918c1a093957ebf4c27890717a4c5ac43d9adef13d360aeec7b6cac57c1df19f683f40b397cc5d5731037cb771448cecfe9c38836a8d2364658b2fcadadcd67c12ab76278f21d9665ac8eddbbe4abc881a26a6b34e3da16705d4b3f40be1ec3ad6d969b1c45e6277cc4c7653b3a9a9abcc9fff27cd2d88d2298aafde1e4423c1a34a268d1605f0ad018271d91a1b1efab11eca898306aa46a9b6eb6ce29a28485ace7466c799a2a2584e5edb55115f1dd2339a67769fc9ff39ce553837ac075bdbfa665bffe0562a293718bf2b7fded087cd2ad362653cc2d3beafd86a302d5b1f094c6909a0ad47c2df16da5dec0c155385ca2e34f1452192b5b58263718d1b6f2324b65604897adbec09bd0ed839421703c3128e71b0ebd3611e3d0ba6cfea3ec1ce859dcd418fe0bbf91d8c4c4b010130c1f59fadc6c7dd89d6944d8aca3e36f15650449a6a1fa19b3e48c7d048cb38815b7220023e08d133a28fe176941dc319d8e54d8d32fe1c385a21a07df16863f2b4f8dfb88a1ac05fc76644f9be5fde6cefa89b2bac25f6ee2f84ee65ed442cfeee8b21df7f34abb62dad1f5f00fbe1920129279bbacb81d83a6ee8cf803b363824bc80d620ba8bdef3123d1850bef5f7e94069791185887c5e935d829e59306040cc2c940dd0695cf5ff0838eb7193e146556fa7f638d257ae7e4f01dcd3b0dd5f11e8fcc79c3458438e9c474699840acf6169319a753628702b4ea5a35f7c73de25f72ad25a5c42ad6ebd37f4dcbd4c71c9b5c682c11e06e732cdc6dab34d5938a360ba5418dfee260b8efc2fb6c464952704a71e8185f36182de328d3ba9ebf06ce4473909b6b75d5680814fd958528b95c90bf6008162a41ddb3c3bd1b7a10b151c577bf9b5e6fdd73e921c59a8a3a64bc43c10bb1e3d1639abd1e5bcfb16ef5936bf9012b026b90a61c4e200f0a3257eadfa46d9fc9992ebf7dbe71a2188455066c802bfa034cc4650d5095615a0eae91ae24eec060131a6bbe7c41d5df51fb76df14c3a0f385a7cd7804441a456ed56d11c410e53db35101a26329c905e6aca5c19ed9feebdc39119774a37a2254327ab8b9f20eb923398a0fb6518cc1f7245003231d3438c61a8d755007e59e3cede054d54fb917502d8ee9c077caae71fd42ff1895680cddf5162fa22fabd99c241430d0117f8f5c883f89a11823b8e92ca1849c9b0373a76c4f46c4efc5ecea247706dc215f6c0746b2fbac467dc1c6519067af7ca629f9fafc3ab267a938526a8e35de75cb4ae048a238a931e89699946f98b04ee44f4d164c4750f1cae516733f4a0de31adee6f80daa9901a814c154580eb03170d9f2873628cf8ab34fa6d93dd98c71ef8fb566dc3413d6d49c998caa1a4fd0e4bce6876a07a46a2894d9dbae21a1643293fbc49e2c5c5703f93e20e365151ecc58088556f1b22142f9287926516e56f78292cac6099b38170c7e1c3fdcb452afedea571b0f0b95a10b65fdbbe12b7b950a120be2b76af30de9aaffb72131ebd5887750a10d90e9b5df13d8f7b252a5cae2f4b2e533fced2d71dabab3e0aa9366f3b8465cb3f34968c0af0fbfbb3beffd9a866c46a97cbcb6f3df3997142c81e57a32e32a3249681b34ee61ae0893b15d149d26c769e5e73d3cb2887633776c74adbba9286534058821f919ded170c89e1a576b09751b1b9079ebe4b7b2ea995e90b45f0012a83e96c0ce1de5077eb847ab1bd03b09d5eb04c3f108aea59927c05f6d29400df9be511ef155d06b1601b4b62071347863741b978a7d479732dc769e24a1e0ec5c5b51364118f097d2a4d86586c80315735439c75e2ee5a67d585a3456f7c816aefc8225ab0fca64bb74c2c30856158740d174f2f6dcdcd0b4cc7f2aa1ef73f6fb75487ccf08118b42271988e97903143769efac8bb99a969c5191a72c064a69e7770f81b445637dd2a95c8a2d32461305700b5ff50f02e2d86028c3b513e1a6a1625ae3e1bf8e7c53e5a945a7b1dcfaaa04169d322150c6adfbbe3b09b346799981c0d960d6c94644e6ebc135eb32d97d57ce615e9a9e7b6c844c3576a6a1ce54d1087aae52fb93d43a0555d7774aac6926005d226e75847414e24196181aed717f13573e8f3e7d2b5472b0980f61f94fe254faa350ee80a9fa40f1dc7cb8957a2e59320ab9b7458a5dab5d96225c89edf470129a9927b0d9537edaeccce0c2a026a3e0a08c0872286ce81f9b232bebfd73992ba2451a0a35a031a94a625db9e179665edea50e8e44e7507aff301bd05e0f6e769da27d269a1e7f121e306ab5357a631825b20af8ed83d42461f20fd5a20e737d9df4122", @ANYRES64, @ANYRES64=0x0, @ANYRESHEX, @ANYRESOCT=r0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000019200), 0x5, r1}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82200, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000040)={0x5, 0x1c0000, 0x6, 0x20000000000, 0xe, 0x9, 0x7a6, 0x7}, &(0x7f0000000200)={0x2, 0x8000000000000000, 0x7, 0x8, 0x0, 0x5, 0x8, 0x1}, &(0x7f0000000380)={0x2, 0x6, 0x1ff, 0x9, 0xfb30, 0x7, 0x6, 0x4}, &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400)={[0x7]}, 0x8}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000002c00000008000300020000800e0001006e657464657673696d0000000f0002006e657464657673696d3000000800580000000000"], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r9}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000002", @ANYRES16=r5, @ANYBLOB="00042abd7000fedbdf25370000000800570006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x890) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r11, r10, 0x0, 0x100) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYRES64=r1, @ANYRESOCT=r4, @ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) ioctl$TIOCVHANGUP(r6, 0x5437, 0x200000000000000) socket$nl_route(0x10, 0x3, 0x0) 5m55.5507313s ago: executing program 33 (id=381): r0 = socket$xdp(0x2c, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000380)="390000fa461aa0fbe8ab13aa2151b94dbe9e8a722e34d7e484893ffa56020013fc071200000f00c79e0b9971bcbe9ac0ebaad60105ff7342d69135e54c46e7a03ef38bbd00", 0x45}], 0x1) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x8842) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) r2 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x87}) r3 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000000)=r3, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) read$eventfd(r3, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x50, r0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x2, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) setregid(0x0, r6) chown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, r6) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000000c0)={"54d51a60fabe796d94c601051381e46e", 0x0, 0x0, {0x7, 0x2}, {0x4, 0x7}, 0x8, [0x9, 0x2, 0xb, 0xfffffffffffffffd, 0x10001, 0x200, 0x6fe6c76a, 0x2, 0x9, 0x2, 0xffffffff, 0xfffffffffffffff7, 0x3, 0xffffffffffffffda, 0x8, 0x1]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r7, r7, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r8, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = dup(r9) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000002400)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r10, 0xc4009420, &(0x7f0000001c00)={0x2, 0x2, {0x6, @usage=0x234, r11, 0x162, 0x8, 0x80000001, 0x125, 0x4, 0x82, @struct={0x2ca9, 0x200}, 0x2, 0x1, [0xff, 0x8, 0x0, 0xb9d, 0x3, 0x9]}, {0xf44, @usage=0x100, 0x0, 0x8, 0x2, 0x1000, 0x2, 0x0, 0x0, @struct={0x7, 0x2}, 0x7, 0x9, [0x1, 0x8000000000000001, 0x35e6, 0x4, 0x3ff, 0x2]}, {0x8, @struct={0x3, 0x2}, 0x0, 0x6, 0x8, 0x4c, 0x0, 0x3, 0x2, @usage=0x56f, 0xe973, 0x1e, [0x4, 0xffffffffffffa714, 0x1000, 0x0, 0x7]}, {0x4, 0x401, 0x4f5}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000400)={r11, 0x2}) 36.170423974s ago: executing program 6 (id=2621): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4000080) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000440)={0xadd8, {0x32, 0xfffffffffffffff0, 0x100000000, 0x3, 0x8000}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@init_itable}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="740000000a0601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="58000000020605000000000000000000010000000c000300686173683a697000050001000700000009000200730400000000000005000500000000000c0007800800134000000e760d000300686173683a6d616300000000"], 0x58}, 0x1, 0x0, 0x0, 0x8091}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") readv(r1, &(0x7f0000000640)=[{&(0x7f0000000340)=""/132}, {&(0x7f0000000540)=""/94}, {&(0x7f0000001280)=""/174}, {&(0x7f0000001040)=""/253}, {&(0x7f0000000f80)=""/85, 0x1e}, {&(0x7f00000004c0)=""/71, 0xd}, {&(0x7f0000001340)=""/162}], 0x10000000000001f4) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 33.912083618s ago: executing program 6 (id=2642): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d616463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a630900010073797a30000000000900020073797a3200000000140000001100200000000000000000000500000a"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$selinux_validatetrans(r2, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_h:object_r:semanage_t system_'], 0x79) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f00000002c0)={@initdev, @broadcast, @broadcast}, &(0x7f0000000300)=0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) fcntl$setlease(r6, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 33.088196703s ago: executing program 6 (id=2652): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) 32.213429619s ago: executing program 6 (id=2658): r0 = socket$xdp(0x2c, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000380)="390000fa461aa0fbe8ab13aa2151b94dbe9e8a722e34d7e484893ffa56020013fc071200000f00c79e0b9971bcbe9ac0ebaad60105ff7342d69135e54c46e7a03ef38bbd00", 0x45}], 0x1) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x8842) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) r2 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x87}) r3 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000000)=r3, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) read$eventfd(r3, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x50, r0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x2, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) setregid(0x0, r6) chown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, r6) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000000c0)={"54d51a60fabe796d94c601051381e46e", 0x0, 0x0, {0x7, 0x2}, {0x4, 0x7}, 0x8, [0x9, 0x2, 0xb, 0xfffffffffffffffd, 0x10001, 0x200, 0x6fe6c76a, 0x2, 0x9, 0x2, 0xffffffff, 0xfffffffffffffff7, 0x3, 0xffffffffffffffda, 0x8, 0x1]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r8, r8, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r9, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = dup(r10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000002400)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r11, 0xc4009420, &(0x7f0000001c00)={0x2, 0x2, {0x6, @usage=0x234, r12, 0x162, 0x8, 0x80000001, 0x125, 0x4, 0x82, @struct={0x2ca9, 0x200}, 0x2, 0x1, [0xff, 0x8, 0x0, 0xb9d, 0x3, 0x9]}, {0xf44, @usage=0x100, 0x0, 0x8, 0x2, 0x1000, 0x2, 0x0, 0x0, @struct={0x7, 0x2}, 0x7, 0x9, [0x1, 0x8000000000000001, 0x35e6, 0x4, 0x3ff, 0x2]}, {0x8, @struct={0x3, 0x2}, 0x0, 0x6, 0x8, 0x4c, 0x0, 0x3, 0x2, @usage=0x56f, 0xe973, 0x1e, [0x4, 0xffffffffffffa714, 0x1000, 0x0, 0x7]}, {0x4, 0x401, 0x4f5}}) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000000900)={{r4}, r7, 0x10, @unused=[0xffffffffffffff94, 0x0, 0x6, 0x100000000], @devid=r12}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000400)={r12, 0x2}) 31.311943185s ago: executing program 6 (id=2662): openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=0x0], 0x48) r1 = syz_io_uring_setup(0x2439, &(0x7f0000000380)={0x0, 0x1064, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140), 0x81, 0x477, &(0x7f0000000a40)="$eJzs3MtvG0UcAODfrpP0RZOolEcfUENBRBSSJhTogQsIpF6QkOAAx5CGqtRtURMkWlW0IFSOiDsScETiL+AEFwScQFzhjpAq1AuFA1q09m7rxE7qODVO8PdJa8/swzOzs5PMzngdwMCq5i9JRBYRv0TEWCO6dIdq4+36tYtzf127OJdElr38R1Lf789rF+fKXcvjdhSRiTQi/SCJfW3SXTh/4dRsrTZ/rohPLZ5+a2rh/IXHT56ePTF/Yv7MzNGjR56YfvqpmSdvSzl35nnd++7Z/XuOvfbxi3NZvP79l3l+7yi2N5ejYXzdaVajuvRc1o3UXx9e96dvLDubwslQHzPCmlQiIq+u4Xr7H4tK3Ky8sXjh/b5mDuipLMuyLS1rK2Xgcgb8jyXR7xwA/VH+o8/vf8vlP+x+9N3VZxs3QHm5rxdLY8tQpPnb1sYd+84epV+NiFcv//1pvkTbcQgAgNvr67z/81i7/t9ocnfTfqPF3NB4RByKiF0RcWdE7I6IuyIi3/eeiLh3jelXl8Vb+z8/beuqYB3K+3/PFHNbS/t/abnLeKUxTnapHonh5I2TtfnDxTmZiOEteXx6lTS+ef7nj1ba1tz/y5c8/bIvWOTj96FlA3THZxdn11HkJa6+F7F3qF35kxszAUlE7ImIvV18ft5vPvnoF/vz8OiO1u37b1n+VdyGeabs84hHGvV/OZaVv5Q0UlppfnJqa9TmD0+VV0WrH3688lJzfLgpfOv67628/re3vf6L8pfNoJyvXVh7Gld+/XDFe5pur/+R5JV6eKRY987s4uK56YiRYsWS9TM3jy3j5f55+ScOtiv/aLIr4p/PitOwr7hW74uI+yPiQJH3ByLiwYg4uEr5v3vuoTdXP0P9rf/jq9V/xHjSPF/fRaBy6tuvVkq/s/o/Ug9NFGs6+fvXaQbXc+4AAABgs0jr34FP0skb4TSdnGx8h393bE9rZxcWD1Xj7TPHG9+VH4/htBzpGmsaD50uxobL+MyyeDnmlWXb6vHJubO1Xs2pA53ZsUL7z/1W6XfugJ5b0zxa6xNtwCbmeU0YXNo/DC7tHwbX2tp/688FAJtXu/Z/KeJ6U7SnD2EA/aP/D4NL+4fBpf3D4NL+YSC1PhJfjvR186T/zcCuY+s6vB+BT/qTeqVHnxzNP9rRg0CkG6XiugikGyEbB4rAlojo9KhLPa3T5dcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA5vdvAAAA///5IuKJ") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x3800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYRES64=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000018c0)={&(0x7f00000001c0)='f2fs_readdir\x00', r6, 0x0, 0x4}, 0x18) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r1, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) io_uring_enter(r1, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000740000000081069059640101006b08b402005356", @ANYRES32=0x41424344, @ANYBLOB="8c1000ca90781000080a8000000000000fbc080a0000000200000002fe"], 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r11, 0x0, 0x8000f28, 0x0) splice(r10, 0x0, r9, 0x0, 0x7f, 0xe) write(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) sync() 30.4938858s ago: executing program 6 (id=2669): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000400)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000400)='GPL\x00', 0x2000000, 0x44, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xfffffffffffffe67) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x5}, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r3 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) unshare(0x2c020400) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x9, 0x2, &(0x7f0000000700)=""/74, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000028) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xafe60000}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000540)='ext4_es_shrink\x00', r6}, 0x13) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000200)='contention_end\x00', r8}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) stat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) 15.635247972s ago: executing program 34 (id=2669): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000400)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000400)='GPL\x00', 0x2000000, 0x44, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xfffffffffffffe67) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x5}, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r3 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) unshare(0x2c020400) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x9, 0x2, &(0x7f0000000700)=""/74, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000028) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xafe60000}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000540)='ext4_es_shrink\x00', r6}, 0x13) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000200)='contention_end\x00', r8}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) stat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) 12.78288963s ago: executing program 7 (id=2748): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x2, 0x0, 0x0, 0xbf, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r3, 0x0, 0x4804}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x1000000}, {}, {}, {}, {0xfffffffc}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x8, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x6, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x6, 0x747}, {0x8, 0xfffffffc, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x401}, {}, {0x0, 0x1e2d}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) unshare(0x62040200) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xffffffffffffff1e) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002c00)={0x8, 0x2047, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r6}, 0x18) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) gettid() r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb, 0x5}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) 11.042047411s ago: executing program 7 (id=2764): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x40020005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) rt_sigaction(0x6, 0x0, 0x0, 0x8, &(0x7f0000001300)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) semget$private(0x0, 0x6, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 7.779296461s ago: executing program 7 (id=2776): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1568, 0x10000, 0x2, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000740)='btrfs_find_cluster\x00', r3}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') move_mount(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000280)={@remote, r6}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0x7, 0x11}, {0x8, 0x6}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x24008804) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x3, 0x4d4, &(0x7f0000000180)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2010800, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r8, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', r9, 0x0, 0x2}, 0x18) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000640)=ANY=[], 0x1000f) open_by_handle_at(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="080000dfb9b2aaf515a16e776021111c00020000000c00000005000000"], 0x36e8476f) io_uring_enter(r0, 0x29ab, 0xd480, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) 4.132041624s ago: executing program 2 (id=2812): r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) r2 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x9effffff, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x20}}}}, 0x108) socket(0x2, 0x4, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$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") lsm_get_self_attr(0x64, 0x0, 0x0, 0x3800) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) socket(0xa, 0x80805, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) shmdt(r2) socket(0x2, 0x80805, 0x0) 4.082628724s ago: executing program 5 (id=2813): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000001c0)=0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000d71e33fa2d090a3e00000a20000000000a0104030900010073797a30000000002c000000030a0101000000000000000900010073797a30000000000900030073797a32000000003c000000060a010400000000000000000100000044090a1e08a4642b14000480100001800b00010065787468647200000900010073797a3000000000140000001100010000000000000000000700100a00"/176], 0xb0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="1e", 0x1}], 0x1}, 0x41) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60210, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x7, @perf_config_ext={0x1, 0x2}, 0x2, 0x0, 0x2, 0x1, 0x2, 0x2, 0x67c, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) io_uring_setup(0x1694, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000500)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7e}) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x18000000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000400)='GPL\x00', 0x8, 0xef, &(0x7f00000005c0)=""/239, 0x40f00, 0x0, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000000740)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0xe, 0xf9, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)}, 0x94) io_uring_enter(r8, 0x66a8, 0x4000, 0xf, 0x0, 0x18) 3.976695545s ago: executing program 0 (id=2814): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001200010200000000fedbdf250200000008000000060000000800e88004004380"], 0x24}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0) utime(0x0, 0x0) mlockall(0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000009440)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000300)='*', 0x1}], 0x1, 0x0, 0x0, 0x40}}], 0x1, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000290000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 3.760155276s ago: executing program 0 (id=2815): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000001c0)=0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)}, 0x41) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 3.655726587s ago: executing program 0 (id=2816): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001200010200000000fedbdf250200000008000000060000000800e88004004380"], 0x24}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0) utime(0x0, 0x0) mlockall(0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.539506388s ago: executing program 2 (id=2818): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x0, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x61, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0x4}}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xffdffffd, @dev={0xfe, 0x80, '\x00', 0x2}, 0x4}, 0x1000, {[0x9, 0x2, 0xfffffffe, 0xfffffef9, 0x0, 0x40001, 0x8, 0x5]}}, 0x5c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r2, &(0x7f00000004c0)="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", 0xffffffffffffff71, 0x400bfeb, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r4, 0x0, 0x3}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x480}, 0x0, 0x50, 0x1}) r5 = syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x2, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r5}) io_uring_enter(r5, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b708", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a50000001801000020206405000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(r1, 0x1f, &(0x7f0000000180), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() 3.502518328s ago: executing program 0 (id=2819): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd61bcc1d7008c292a5b01000000000000000000000000000000000000000000000000000000000001"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000700"], 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0xdf8, &(0x7f0000ff9000/0x1000)=nil, 0x2) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x40, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x40030000000000}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000011c0), 0x1, 0x0) write$selinux_validatetrans(r6, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) 3.363606039s ago: executing program 3 (id=2820): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e008d2a2abd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x24}}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="000000000000c41caef959cda0a426318d251318b6110000b702000001cc03a1ec0000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e200a01010200004000"/528], 0x210) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mr_alloc\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000200000000000000000000080000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001280)='/proc/thread-self/attr/fscreate\x00', 0x64, 0x0) unshare(0x24040000) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x3, 0x800, 0x0, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f0000001040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200, 0x1}) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) 3.15523802s ago: executing program 5 (id=2821): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x40004) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r6}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, 0x0) io_submit(0x0, 0x0, 0x0) io_destroy(0x0) r7 = memfd_secret(0x80000) fchownat(r7, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) sendto$packet(r4, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r8}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r8, 0x8010661b, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r9 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$selinux_validatetrans(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a747a646174615f657865635f743a73302073797374656d5f753a6f626a6563745f723a7761746368646f675f6465766963655f743a7330203030303030300e00000032313437343833363439f75040be7a10fb076e6564007a7511749ece99a93397e2ebf8bab550172f8979b11819058b5acaa11502540cfd6a87c568b7f58b23b2b1c0421db8c22b6f30d923f231612b7dd38677f563b778cb72ae13d4ebe4b78a7a4033fece0c1b35ae8e9e4c6082bcea5f44c008537030feab3b93d8a4885759a64eaf0096cc8c28c1af8b0ce2e5bff365eaf9738d65c02fec46f938a1925cbc2f0430cd0e3e64fa29b9"], 0x6a) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 3.10923896s ago: executing program 3 (id=2822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x2, 0x0, 0x0, 0xbf, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r3, 0x0, 0x4804}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x1000000}, {}, {}, {}, {0xfffffffc}, {}, {0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x8, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x6, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x6, 0x747}, {0x8, 0xfffffffc, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x401}, {}, {0x0, 0x1e2d}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) unshare(0x62040200) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xffffffffffffff1e) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002c00)={0x8, 0x2047, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r6}, 0x18) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) gettid() r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb, 0x5}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) 2.987820131s ago: executing program 5 (id=2823): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x348, 0xffffffff, 0xffffffff, 0x348, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz1\x00', {0x10000}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x42}, [0x0, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xff, 0xffffff00, 0xffffff00], 'caif0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x3c, 0x9, 0xe, 0x10}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x2, 0xfffffff7, 0x200000, 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000000306010100000000f7ffffff0100000a0500010007000000006ebd92"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lblc\x00', 0x1, 0x0, 0x4}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setuid(0xee01) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0xfffffffc, @remote, 0x9}], 0x1c) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) ioctl$SIOCGSTAMPNS(r7, 0x8907, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'none\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e26, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.739465309s ago: executing program 5 (id=2824): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x51) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003200001800a00010071756f746100000010000280"], 0x110}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) r1 = signalfd4(r0, &(0x7f0000000500)={[0x8]}, 0x8, 0x80000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000bc0)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe00, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r6, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$inet6(0xa, 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x43, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1f8, 0x178, 0x178, 0x1f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}}, 0x12a, 0xc0, 0x128, 0x0, {0x0, 0x7a010000}, [@common=@inet=@socket3={{0x28}, 0x5}, @inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x5, 0x2, 0x20, 'snmp\x00', 'syz0\x00', {0x101}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0x0, 0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000200)=""/142, 0x8e, 0x0, &(0x7f0000000300)=""/50, 0x32}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x8, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x207}, 0x94) r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r11, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x1c, r12, 0x1, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x10000040) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x12f7, &(0x7f00000009c0)={0x0, 0x970c, 0x10, 0x0, 0x28f, 0x0, r11}, &(0x7f0000000a40), &(0x7f0000000a80)) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 1.52130489s ago: executing program 2 (id=2825): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001200010200000000fedbdf250200000008000000060000000800e88004004380"], 0x24}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000580)=ANY=[], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0) utime(0x0, 0x0) mlockall(0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000009440)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000300)='*', 0x1}], 0x1, 0x0, 0x0, 0x40}}], 0x1, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000290000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) 1.377394631s ago: executing program 7 (id=2826): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000001c0)=0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)}, 0x41) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 1.327555731s ago: executing program 3 (id=2827): socket$inet6(0xa, 0x1, 0x104) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x609e495c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_create(r1, &(0x7f0000000300)=@access={'system_u:object_r:hald_sonypic_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x6}, 0x5c) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB]) io_uring_setup(0x1d58, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x83}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, 0x0, 0x20000840) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x80000000) socket$rxrpc(0x21, 0x2, 0xa) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r7, 0x560a, &(0x7f0000001040)={0x0, 0x3, 0x4, 0x20, 0x0, "0000e5ff0100"}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 1.100059433s ago: executing program 2 (id=2828): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x3a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x61, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0x4}}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xffdffffd, @dev={0xfe, 0x80, '\x00', 0x2}, 0x4}, 0x1000, {[0x9, 0x2, 0xfffffffe, 0xfffffef9, 0x0, 0x40001, 0x2, 0x5]}}, 0x5c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r3, &(0x7f00000004c0)="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", 0xffffffffffffff71, 0x400bfeb, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b708", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a50000001801000020206405000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = gettid() r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r7, 0x545c, 0x200000000000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f00000000c0), 0x4) 1.036336824s ago: executing program 7 (id=2829): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=@newtaction={0xe68, 0x30, 0x1, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x8}, [{}, {0x0, 0x4, 0x80000000, 0x0, 0x3}, {}, {0x1, 0x0, 0x0, 0x7fff, 0x0, 0xfffffffd}, {}, {0x0, 0xfffffffc, 0xfffffffd}, {}, {0x0, 0xfffffffd}, {0x7, 0x0, 0x0, 0x8}, {0x0, 0x10, 0x0, 0x25}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x4}, {}, {0x400, 0x0, 0x0, 0xa902}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x400, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xeffffffd, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x9, 0x2, 0xa46}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x6, 0x0, 0xfffffffe}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1c69, 0x100}, {0x0, 0x0, 0x10000}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x9, 0x0, 0xffffffff, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5155}, {}, {0x6e5000cb, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x6, 0x3, 0x2}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff2ff1}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5a9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x80}, {0xfffffffd}, {0x0, 0xfe}, {0x4, 0x0, 0x0, 0xfffffffe}, {}, {0x400, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x100, 0xfffff7ff}, {0x0, 0x0, 0x1000000}, {0x0, 0x0, 0x0, 0x1, 0x8000}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x1}, {0x400, 0x0, 0x0, 0x4, 0x0, 0x2400000}, {0x0, 0xfffffffe, 0x0, 0xb5}, {0x0, 0x2}, {0x0, 0x0, 0x81, 0x0, 0xfffffe00, 0x6a76d8f4}, {}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x100000, 0x0, 0x8}, {0x9}, {0x9}, {0x0, 0x7fffffff}, {0x3}, {0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {}, {0x400}, {0x0, 0xfffffffd}, {0x0, 0xffffffff}, {0x0, 0x0, 0xabd}, {0x0, 0x0, 0x1}, {0x0, 0xdd86}, {0xfffffffd}, {0x0, 0x0, 0x100}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xf8, 0x80000000}, {0x0, 0x0, 0x1}, {0x40000, 0x0, 0x0, 0x0, 0x0, 0x451d}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x40000}, {0x4}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffe00}, {0x0, 0x80000}, {0x122}, {0x0, 0x8}, {0x80000000, 0x3, 0x6a}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x212, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4000000}, {0x200}], [{}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {0x3}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {0x4}, {}, {}, {}, {0x2}, {0x4}, {0x3}, {0x2}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x5, 0x1}, {0x2}, {}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x3}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0xe}, {0x4}, {0x0, 0x1}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xe68}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r0}, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000006b0000006b000000080000000f0000000000000803000000000000000100000d000000000000000001000000051000000000000700000000050000000200008f0300000005000000090000020400000004000000060000001eb4000055adec14be287b2edd46df80000000000000000300000000020000000200000007000000d920a61c0cadf0bd84c20f8b38cf6a306600878cc9cf4da36538402f46b9fca132f8690447183be3dc9c25ac"], &(0x7f0000000580)=""/141, 0x8c, 0x8d, 0x0, 0x200, 0x10000, @value=r1}, 0x28) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x1, 0xc1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x40040) write$binfmt_script(r3, &(0x7f0000002f80)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x2007, &(0x7f0000000980)=0x0) io_destroy(r6) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r7], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x80, 0xc6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x18, 0x3, &(0x7f0000000400)=@raw=[@call={0x85, 0x0, 0x0, 0x8f}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000540)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x1, '\x00', r9, 0x0, r2, 0x8, &(0x7f0000000740)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0xd, 0x80000001, 0x531d11c5}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000007c0)=[{0x5, 0x1, 0x2, 0x3}, {0x5, 0x1, 0xa, 0x1}, {0x4, 0x5, 0x10, 0xb}, {0x2, 0x3, 0x6, 0x3}, {0x1, 0x3, 0x1, 0x3}], 0x10, 0xfffff5f6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="91100c000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.035550314s ago: executing program 2 (id=2830): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000001240), 0x4) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r2 = inotify_init1(0x0) r3 = inotify_add_watch(r2, &(0x7f0000000440)='.\x00', 0x20000000) write$binfmt_elf32(r1, &(0x7f0000005640)=ANY=[@ANYRES16=r3], 0x69) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x400c84, &(0x7f0000000000)={[{@acl}]}, 0x1, 0x79a, &(0x7f0000001480)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="0200000001000000000000000400050000000000100000000000000020"], 0x24, 0x3) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000c40)=0x14) syz_io_uring_setup(0x635, &(0x7f0000003080)={0x0, 0x73d2, 0x2, 0x3, 0xc6}, &(0x7f0000003100), &(0x7f0000003140)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') socket(0x2, 0x2, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000004000000040400000900000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xd, 0x3, 0x4, 0x7, 0x1, r8, 0x15b4}, 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="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", 0x26e}, {&(0x7f0000000680)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c9884ae01084df2b71b56e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2bed23ad07caa", 0x6e}], 0x2}, 0x8000) recvmsg(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r10) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={&(0x7f00000000c0)="5fd2", 0x0, 0x0, 0x0, 0x7fffffff, r9}, 0x38) 1.034483683s ago: executing program 3 (id=2831): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) fchdir(r0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) pipe2(&(0x7f0000001040), 0x0) acct(&(0x7f00000005c0)='./cgroup\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r7}, 0x18) syz_io_uring_setup(0xbdc, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/rt_acct\x00') r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) readv(r8, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1}) 871.952964ms ago: executing program 5 (id=2832): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)}, 0x41) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) 729.822995ms ago: executing program 0 (id=2833): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4040040}, 0x8044084) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="bcdfc45dd30325c315223f92e8f1a3246939bb7830b83eb36137b11cffe4a29d282859bf", 0x24}, {&(0x7f0000000580)="0a9ac28bd79d370e2ede297807b064710e185ad0e896c0ab9ba48964475b801a233873d0714c526add5d250e1c04e0574de6fc9e1330bafcd8798cc7f946160fe05d8bf937ed3ed2e1299dc4f210de232b0ee4ae43a21b4f094d2976ade6c57f01f409b094c81776817199a4877006f04c35bec8ff9ddf967ba89e1df784a10d1e79edacdf0efb2d1b29404a755e86734df3141c05a2679052020c075f115a57141108bae51201eadd72228fc5edd76a654649b4308ceef64dcd76f6bbbab403ca34998a04e7859e0997f188125095906eb0b5a24679597803b6", 0xda}, {&(0x7f00000002c0)="353d0d7864d7bbee6620728ac2e005b3e34e32317c69473a88af975092", 0x1d}, {&(0x7f0000000800)="19080dfc347157dbfb46132e161a9f79e43472b608c7445e96cb7bf62b97b30faeeac0d3d42c3eb85c862305b0011521509713f5f2b457643d9c5f84a15308d821a634c61f1c00a7b6aac0c1376036b5cb61a000ba35", 0x56}, {&(0x7f00000019c0)="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", 0x3f2}], 0x5, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x38, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x40810}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4080}}, {{0x0, 0x0, &(0x7f0000002ec0), 0x0, &(0x7f00000030c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x10}}], 0x50, 0x84}}], 0x4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r5, 0x0, 0xcfdc}, 0x1a0fb94f25892cbe) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="83a75802006b3e08b082e7da94cc5b9c2497c3880000010000000000e1cc8be486066453dab77e33d73f7de3e700"/60], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001", @ANYRES64=r7], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r8}, @ldst={0x1, 0x0, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) unshare(0x2060600) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, 0x0, 0x0, 0x4}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0xfffffff5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r11}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r11, r7}, 0xc) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000280)={0x5, 0xfe, 0x8006}) semget$private(0x0, 0x20000000102, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x50}}, 0x0) 304.097798ms ago: executing program 7 (id=2834): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[], 0x2c}}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0xc004) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000810000010000000000000000008510000006000000181f0008690df7f6e94dc51b7194263a24", @ANYRES32=0x0, @ANYRESOCT=r1], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r3, &(0x7f00000003c0)=""/53, 0x35, 0x9000000000002003, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0xffff, @multicast1}, 0x10) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000240)='./file1\x00', 0x0, 0x18}, 0x18) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000001c0)="31d1431b9147668c13b710bc0919f85e26621b397c858e255a300c4a7e194861ea1e494d459009", 0x27}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r6, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) writev(r7, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) 303.812048ms ago: executing program 2 (id=2835): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x30a9f29ecc337b1d, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r6 = request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='\x00', 0xfffffffffffffffa) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30", 0x3, 0x0) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$restrict_keyring(0x1d, r7, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r6, 0x0, r7, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) r8 = syz_open_dev$sg(0x0, 0x0, 0x22c01) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000002c0)=ANY=[], 0x118) ioprio_set$pid(0x2, 0x0, 0xe008) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r9, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000000c0)=ANY=[]) sendfile(r5, r4, 0x0, 0x3ffff) 303.423938ms ago: executing program 3 (id=2836): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=@newtaction={0xe68, 0x30, 0x1, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x8}, [{}, {0x0, 0x4, 0x80000000, 0x0, 0x3}, {}, {0x1, 0x0, 0x0, 0x7fff, 0x0, 0xfffffffd}, {}, {0x0, 0xfffffffc, 0xfffffffd}, {}, {0x0, 0xfffffffd}, {0x7, 0x0, 0x0, 0x8}, {0x0, 0x10, 0x0, 0x25}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x4}, {}, {0x400, 0x0, 0x0, 0xa902}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x400, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xeffffffd, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x9, 0x2, 0xa46}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x6, 0x0, 0xfffffffe}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1c69, 0x100}, {0x0, 0x0, 0x10000}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x9, 0x0, 0xffffffff, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5155}, {}, {0x6e5000cb, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x6, 0x3, 0x2}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff2ff1}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5a9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x80}, {0xfffffffd}, {0x0, 0xfe}, {0x4, 0x0, 0x0, 0xfffffffe}, {}, {0x400, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x100, 0xfffff7ff}, {0x0, 0x0, 0x1000000}, {0x0, 0x0, 0x0, 0x1, 0x8000}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x1}, {0x400, 0x0, 0x0, 0x4, 0x0, 0x2400000}, {0x0, 0xfffffffe, 0x0, 0xb5}, {0x0, 0x2}, {0x0, 0x0, 0x81, 0x0, 0xfffffe00, 0x6a76d8f4}, {}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x100000, 0x0, 0x8}, {0x9}, {0x9}, {0x0, 0x7fffffff}, {0x3}, {0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {}, {0x400}, {0x0, 0xfffffffd}, {0x0, 0xffffffff}, {0x0, 0x0, 0xabd}, {0x0, 0x0, 0x1}, {0x0, 0xdd86}, {0xfffffffd}, {0x0, 0x0, 0x100}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xf8, 0x80000000}, {0x0, 0x0, 0x1}, {0x40000, 0x0, 0x0, 0x0, 0x0, 0x451d}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x40000}, {0x4}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffe00}, {0x0, 0x80000}, {0x122}, {0x0, 0x8}, {0x80000000, 0x3, 0x6a}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x212, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4000000}, {0x200}], [{}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {0x3}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {0x4}, {}, {}, {}, {0x2}, {0x4}, {0x3}, {0x2}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x5, 0x1}, {0x2}, {}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x3}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0xe}, {0x4}, {0x0, 0x1}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xe68}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r0}, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000006b0000006b000000080000000f0000000000000803000000000000000100000d000000000000000001000000051000000000000700000000050000000200008f0300000005000000090000020400000004000000060000001eb4000055adec14be287b2edd46df80000000000000000300000000020000000200000007000000d920a61c0cadf0bd84c20f8b38cf6a306600878cc9cf4da36538402f46b9fca132f8690447183be3dc9c25ac"], &(0x7f0000000580)=""/141, 0x8c, 0x8d, 0x0, 0x200, 0x10000, @value=r1}, 0x28) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x1, 0xc1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x40040) write$binfmt_script(r3, &(0x7f0000002f80)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x2007, &(0x7f0000000980)=0x0) io_destroy(r6) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r7], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x80, 0xc6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x18, 0x3, &(0x7f0000000400)=@raw=[@call={0x85, 0x0, 0x0, 0x8f}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000540)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x1, '\x00', r9, 0x0, r2, 0x8, &(0x7f0000000740)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0xd, 0x80000001, 0x531d11c5}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000007c0)=[{0x5, 0x1, 0x2, 0x3}, {0x5, 0x1, 0xa, 0x1}, {0x4, 0x5, 0x10, 0xb}, {0x2, 0x3, 0x6, 0x3}, {0x1, 0x3, 0x1, 0x3}], 0x10, 0xfffff5f6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="91100c000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 303.088578ms ago: executing program 5 (id=2837): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) mount$tmpfs(0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) timer_settime(0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(0x0, 0x0) mount(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x8c, &(0x7f0000000300)='trans=rdma,') setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x210, 0x940c, 0x3002, 0x210, 0x2c0, 0x300, 0x3d8, 0x3d8, 0x300, 0x3d8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @private2, [0xff000000, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff000000, 0xffffffff, 0xff], 'veth1_to_team\x00', 'macsec0\x00', {}, {}, 0x62, 0x61, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x916, {0x7c7a1f6d}}}}, {{@ipv6={@mcast1, @remote, [0xff000000, 0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x9, 0x4, 0x10}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x18, r1}, 0x18) fstat(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x8007ca, &(0x7f0000000680)={[{@delalloc}, {@resuid={'resuid', 0x3d, r7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid={'resgid', 0x3d, r8}}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") 248.947668ms ago: executing program 0 (id=2838): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) fcntl$lock(r2, 0x24, &(0x7f0000000100)={0x2, 0x1, 0x6, 0x9}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000280)={0xad2f, 0x5, 0x5, 0x8b, 0x7, "7f4ec452f80d501f"}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000ba00"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64018102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xfe, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x2, @multicast2, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000300), 0x1, 0x4f5, &(0x7f0000000c00)="$eJzs3c9vG1kdAPDvTH452ewmu+wBELBlWSjSqk7i7karPcByQgithNgjSN2QeKModhzlR2miHtr/AUQlTnDkD+DcE3cuCG5cygGJHxGoqcTBaMbj1E3tJNumdhp/PtJo3pux/X0vzrxnf534BTC0rkTEnYgYj4hPI2KmOJ4UW3zU2rLbPTy4vXx4cHs5iWbzk38l+fnsWHTcJ/NK8ZiliPjx9yN+ljwdd3tvf32pVqtutaqTczv1zbntvf1ra/Wl1epqdaNSWVxYnP/g+vuVc+vrW/XxovTVB38stUrTxZHOfpynVtfHjuJkRiPihy8i2ACMFP0ZH3RDeCZpRLwREW/n1/9MjOTP5kmafWoZAPCiNJsz0ZzprAMAl12a58CStFzkAqYjTcvlVg7vzZhKkyKDtbHSypXNxlj62VqtOl/kCmdjLMnqC3n5cb1yrH49Il6PiF9MTOb18nKjtjK4lz0AMNReOTb//3eiNf8DAJdcadANAAD6zvwPAMPH/A8Aw8f8DwDDx/wPAMPH/A8Aw8f8DwBD5Ucff5xtzcPi+69Xbu7trjduXlupbq+X67vL5eXG1mZ5tdFYzb+zp37a49Uajc2F92L31ux3Nrd35rb39m/UG7sbOzfy7/W+UR3rS68AgJO8/tb9vyQRcefDyXyLjrUczNVwuaWDbgAwMCODbgAwMKet9gVcXu33+L989rsCL7kuS/Q+oRQRk8cPNptNq4HCy+vql+T/YVh15P/9FTAMGfl/GF7y/zC8ms3krGv+x1lvCABcbHL8QI/P/98o9r8rPhz46crxW9x7ka0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAi629/m+5WAt8OtK0XI54NSJmYyz5bK1WnY+I1yLizxNjE1l9YcBtBgCeV/r3pFj/6+rMO9PHz44njybyfUT8/Nef/OrW0s7O1p+y4/8+Or5zrzheGUT7AYDTtOfpfN/xRv7hwe3l9tbP9vzjexFRasU/PBiPw6P4ozGa70sxFhFT/0mKekvSkbt4HnfuRsQXu/U/iek8B9Ja+fR4/Cz2q32Nnz4RP83PtfbZz+IL59AWGDb3s/Hno27XXxpX8n3367+Uj1DPrxj/sodaPszHwMfx2+PfSI/x78pZY7z3hx+0SpNPn7sb8eXRiHbsw47xpx0/6RH/nTPG/+tXvvZ2r3PN30Rcje7xO2PN7dQ357b39q+t1ZdWq6vVjUplcWFx/oPr71fm8hz1XO/Z4J8fvvtar3NZ/6d6xC+d0v9vnrH/v/3fpz/5+gnxv/2NbvHTePOE+Nmc+K0zxl+a+n2p17ks/kqP/p/2/L97xvgP/rb/1LLhAMDgbO/try/VatWtfhbaLyT6GDQdTE8VzreQ/dZcgGZ0LXy3X7HG43Pdq9l8pli9RozzyLoBF8HRRR8RjwbdGAAAAAAAAAAAAAAAoKt+/MfSoPsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA5fX/AAAA///EdctD") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$P9_RRENAMEAT(r6, &(0x7f0000000240)={0x7, 0x4b, 0x2}, 0xff9f) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000080)={0x0, r6, 0x2, 0x0, 0x0, 0x2000000000000000}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000340)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x40, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x77, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) 0s ago: executing program 3 (id=2839): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0xa4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x30120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x8}, 0x18) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x6, 0x8000}, 0x100882, 0x801, 0x6, 0x3, 0x600, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f00000001c0)={'icmp6\x00'}, &(0x7f0000000280)=0x1e) mremap(&(0x7f000006b000/0x1000)=nil, 0x1000, 0x2000, 0x6, &(0x7f00001e0000/0x2000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000740)='io_uring_poll_arm\x00', r5, 0x0, 0x9}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x2a8, 0x98, 0x2a8, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x84, 0xe9a, 0x0, 0x5, 0x9, 0x8, 0xfd, 0x0, 0x1}) keyctl$chown(0x4, 0x0, 0x0, 0x0) waitid(0x2, r0, &(0x7f0000000500), 0x40000000, &(0x7f0000000680)) unshare(0x64000680) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000100026bd7000fedbdf2500000000", @ANYRES32=0x0], 0x54}, 0x1, 0x0, 0x0, 0x4011}, 0x40880) kernel console output (not intermixed with test programs): 269] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 395.006500][T15269] ext4 filesystem being remounted at /420/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 395.023113][T15280] loop3: detected capacity change from 0 to 512 [ 395.035415][T15278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2542'. [ 395.070409][T15280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.096225][ T29] audit: type=1326 audit(2000000137.502:37754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.5.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e67cf6c9 code=0x7ffc0000 [ 395.120480][ T29] audit: type=1326 audit(2000000137.523:37755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.5.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e67cf6c9 code=0x7ffc0000 [ 395.143047][T15280] ext4 filesystem being mounted at /517/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.145101][ T29] audit: type=1326 audit(2000000137.544:37756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.5.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5e67cf6c9 code=0x7ffc0000 [ 395.178798][ T29] audit: type=1326 audit(2000000137.544:37757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.5.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e67cf6c9 code=0x7ffc0000 [ 395.202851][ T29] audit: type=1326 audit(2000000137.544:37758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.5.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e67cf6c9 code=0x7ffc0000 [ 395.226888][ T29] audit: type=1326 audit(2000000137.597:37759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.5.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5e67cf6c9 code=0x7ffc0000 [ 395.250479][ T29] audit: type=1326 audit(2000000137.597:37760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.5.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e67cf6c9 code=0x7ffc0000 [ 395.337097][T15287] siw: device registration error -23 [ 395.343226][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2544'. [ 395.380687][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.425718][ T3003] loop6: p1 p3 < > [ 395.511435][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.534744][T15300] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 395.539364][T15291] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 395.565853][T15300] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2548'. [ 395.587467][T15306] netlink: 'syz.2.2550': attribute type 1 has an invalid length. [ 395.601617][T15300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2548'. [ 395.619581][T15308] loop2: detected capacity change from 0 to 512 [ 395.619664][T15309] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2549'. [ 395.635496][T15309] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2549'. [ 395.656667][T15308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.670172][T15308] ext4 filesystem being mounted at /535/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.762987][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.789881][T15319] loop2: detected capacity change from 0 to 512 [ 395.804483][T15319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.817294][T15319] ext4 filesystem being mounted at /536/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.856441][T15319] siw: device registration error -23 [ 395.881637][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.945902][T15328] loop2: detected capacity change from 0 to 2048 [ 395.965208][T15328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.980299][ T8212] Bluetooth: hci4: Frame reassembly failed (-84) [ 395.989405][T15328] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #12: comm syz.2.2555: corrupted in-inode xattr: e_name out of bounds [ 396.239430][ T3003] loop6: p1 p3 < > [ 396.258730][ T3003] loop6: p1 p3 < > [ 396.281363][T15334] siw: device registration error -23 [ 396.303442][T15337] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.348314][T15337] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.399855][T15337] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.424517][T15342] loop5: detected capacity change from 0 to 2048 [ 396.443845][T15342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.460064][T15337] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.565050][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.584142][ T8212] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.606475][ T8212] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.649505][T15353] netlink: 'syz.5.2561': attribute type 1 has an invalid length. [ 396.653342][ T8212] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.682811][ T8212] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.749369][ T3003] loop6: p1 p3 < > [ 396.840135][T15359] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 396.892639][ T31] Bluetooth: hci5: Frame reassembly failed (-84) [ 397.022490][ T3003] loop6: p1 p3 < > [ 397.026688][ T3313] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 397.037751][ T3313] CPU: 0 UID: 0 PID: 3313 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 397.037788][ T3313] Tainted: [W]=WARN [ 397.037795][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 397.037807][ T3313] Call Trace: [ 397.037813][ T3313] [ 397.037819][ T3313] __dump_stack+0x1d/0x30 [ 397.037840][ T3313] dump_stack_lvl+0xe8/0x140 [ 397.037934][ T3313] dump_stack+0x15/0x1b [ 397.037955][ T3313] dump_header+0x81/0x220 [ 397.038024][ T3313] oom_kill_process+0x342/0x400 [ 397.038061][ T3313] out_of_memory+0x979/0xb80 [ 397.038177][ T3313] try_charge_memcg+0x610/0xa10 [ 397.038292][ T3313] charge_memcg+0x51/0xc0 [ 397.038318][ T3313] __mem_cgroup_charge+0x28/0xb0 [ 397.038346][ T3313] filemap_add_folio+0x111/0x360 [ 397.038388][ T3313] __filemap_get_folio+0x31e/0x650 [ 397.038420][ T3313] filemap_fault+0x447/0xb60 [ 397.038446][ T3313] __do_fault+0xbc/0x200 [ 397.038472][ T3313] handle_mm_fault+0xf78/0x2be0 [ 397.038568][ T3313] ? vma_start_read+0x141/0x1f0 [ 397.038628][ T3313] do_user_addr_fault+0x630/0x1080 [ 397.038705][ T3313] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 397.038801][ T3313] exc_page_fault+0x62/0xa0 [ 397.038832][ T3313] asm_exc_page_fault+0x26/0x30 [ 397.038854][ T3313] RIP: 0033:0x7fbbce865f24 [ 397.038873][ T3313] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 78 f8 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 89 f7 ea 00 48 01 d1 [ 397.038908][ T3313] RSP: 002b:00007ffe4abbc9b0 EFLAGS: 00010206 [ 397.038926][ T3313] RAX: 0000001b33924000 RBX: 00000000000006af RCX: 0000000000065130 [ 397.038941][ T3313] RDX: 000000000e205c55 RSI: 00007ffe4abbca40 RDI: 0000000000000001 [ 397.039003][ T3313] RBP: 00007ffe4abbc9ec R08: 0000000035e3523b R09: 7fffffffffffffff [ 397.039093][ T3313] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 397.039108][ T3313] R13: 00000000000927c0 R14: 000000000006537e R15: 00007ffe4abbca40 [ 397.039132][ T3313] [ 397.039139][ T3313] memory: usage 307200kB, limit 307200kB, failcnt 1480 [ 397.146557][T15371] siw: device registration error -23 [ 397.152484][ T3313] memory+swap: usage 342188kB, limit 9007199254740988kB, failcnt 0 [ 397.255565][ T3313] kmem: usage 239728kB, limit 9007199254740988kB, failcnt 0 [ 397.262890][ T3313] Memory cgroup stats for /syz3: [ 397.263068][ T3313] cache 67616768 [ 397.271600][ T3313] rss 1466368 [ 397.274876][ T3313] shmem 67616768 [ 397.278405][ T3313] mapped_file 0 [ 397.281971][ T3313] dirty 0 [ 397.284894][ T3313] writeback 0 [ 397.288275][ T3313] workingset_refault_anon 265 [ 397.292948][ T3313] workingset_refault_file 9709 [ 397.297690][ T3313] swap 35827712 [ 397.301188][ T3313] swapcached 0 [ 397.304548][ T3313] pgpgin 377732 [ 397.308088][ T3313] pgpgout 360864 [ 397.311630][ T3313] pgfault 308611 [ 397.315157][ T3313] pgmajfault 176 [ 397.318846][ T3313] inactive_anon 847872 [ 397.322901][ T3313] active_anon 68235264 [ 397.327067][ T3313] inactive_file 0 [ 397.330687][ T3313] active_file 8192 [ 397.334391][ T3313] unevictable 0 [ 397.337883][ T3313] hierarchical_memory_limit 314572800 [ 397.343264][ T3313] hierarchical_memsw_limit 9223372036854771712 [ 397.349500][ T3313] total_cache 67616768 [ 397.353556][ T3313] total_rss 1466368 [ 397.357384][ T3313] total_shmem 67616768 [ 397.361487][ T3313] total_mapped_file 0 [ 397.365544][ T3313] total_dirty 0 [ 397.369125][ T3313] total_writeback 0 [ 397.372914][ T3313] total_workingset_refault_anon 265 [ 397.378149][ T3313] total_workingset_refault_file 9709 [ 397.383470][ T3313] total_swap 35827712 [ 397.387443][ T3313] total_swapcached 0 [ 397.391334][ T3313] total_pgpgin 379040 [ 397.395396][ T3313] total_pgpgout 362172 [ 397.399452][ T3313] total_pgfault 309940 [ 397.402684][ T3003] loop6: p1 p3 < > [ 397.403545][ T3313] total_pgmajfault 176 [ 397.411377][ T3313] total_inactive_anon 847872 [ 397.416073][ T3313] total_active_anon 68235264 [ 397.420658][ T3313] total_inactive_file 0 [ 397.424900][ T3313] total_active_file 8192 [ 397.429197][ T3313] total_unevictable 0 [ 397.433549][ T3313] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2557,pid=15332,uid=0 [ 397.448472][ T3313] Memory cgroup out of memory: Killed process 15332 (syz.3.2557) total-vm:98324kB, anon-rss:1268kB, file-rss:26584kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 397.675362][ T3003] loop6: p1 p3 < > [ 397.712595][T15380] loop5: detected capacity change from 0 to 512 [ 397.721232][ T3003] loop6: p1 p3 < > [ 397.727041][T15376] syz!: rxe_newlink: already configured on team_slave_0 [ 397.769761][T15382] loop3: detected capacity change from 0 to 1024 [ 397.797765][T15380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.809528][T15382] EXT4-fs: inline encryption not supported [ 397.816116][T15382] EXT4-fs: Ignoring removed i_version option [ 397.818010][ T3003] loop6: p1 p3 < > [ 397.823113][T15380] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.840427][T15382] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 397.861430][T15382] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.2568: pblk 67 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 397.881127][T15382] EXT4-fs error (device loop3): ext4_quota_enable:7139: comm syz.3.2568: Bad quota inode: 3, type: 0 [ 397.945292][ T3546] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 398.041383][T15392] lo speed is unknown, defaulting to 1000 [ 398.048581][T15392] wg1 speed is unknown, defaulting to 1000 [ 398.172187][T15392] lo speed is unknown, defaulting to 1000 [ 398.298276][T15392] lo speed is unknown, defaulting to 1000 [ 398.359829][T15390] siw: device registration error -23 [ 398.598734][T15396] __nla_validate_parse: 7 callbacks suppressed [ 398.598752][T15396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2569'. [ 398.847592][ T3958] Bluetooth: hci5: command 0x1003 tx timeout [ 398.856006][ T4003] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 398.869155][T15382] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 398.904540][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.951716][ T3003] loop6: p1 p3 < > [ 398.986052][T15382] EXT4-fs (loop3): mount failed [ 399.043262][T15401] loop2: detected capacity change from 0 to 1024 [ 399.055251][T15401] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 399.085963][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.391008][ T29] kauditd_printk_skb: 263 callbacks suppressed [ 399.391022][ T29] audit: type=1400 audit(2000000142.006:38024): avc: denied { ioctl } for pid=15400 comm="syz.2.2571" path="socket:[51770]" dev="sockfs" ino=51770 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 399.550973][ T29] audit: type=1326 audit(2000000142.163:38025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz.3.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbce98f6c9 code=0x7ffc0000 [ 399.574945][ T29] audit: type=1326 audit(2000000142.163:38026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz.3.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbce98f6c9 code=0x7ffc0000 [ 399.599097][ T29] audit: type=1326 audit(2000000142.163:38027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz.3.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbce98f6c9 code=0x7ffc0000 [ 399.623007][ T29] audit: type=1326 audit(2000000142.163:38028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz.3.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbce98f6c9 code=0x7ffc0000 [ 399.626491][T15418] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2574'. [ 399.646825][ T29] audit: type=1326 audit(2000000142.163:38029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz.3.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbce98f6c9 code=0x7ffc0000 [ 399.679656][ T29] audit: type=1326 audit(2000000142.163:38030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz.3.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbbce98df10 code=0x7ffc0000 [ 399.703663][ T29] audit: type=1400 audit(2000000142.163:38031): avc: denied { write } for pid=15415 comm="syz.3.2575" name="rt_acct" dev="proc" ino=4026532775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 399.703726][T15421] loop5: detected capacity change from 0 to 512 [ 399.727104][ T29] audit: type=1326 audit(2000000142.163:38032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz.3.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbce98f6c9 code=0x7ffc0000 [ 399.756833][ T29] audit: type=1326 audit(2000000142.163:38033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz.3.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fbbce98f6c9 code=0x7ffc0000 [ 399.783742][T15418] siw: device registration error -23 [ 399.796421][T15420] loop2: detected capacity change from 0 to 512 [ 399.827334][ T3003] loop6: p1 p3 < > [ 399.835616][T15421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.835977][T15420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.856881][T15421] ext4 filesystem being mounted at /427/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 399.874985][T15420] ext4 filesystem being mounted at /540/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.980852][T15433] loop3: detected capacity change from 0 to 512 [ 399.991496][T15433] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 399.995858][T15431] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2578'. [ 400.013431][T15433] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 400.033246][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.049894][T15431] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15431 comm=syz.6.2578 [ 400.050931][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.066801][T15431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.076746][T15433] EXT4-fs (loop3): 1 truncate cleaned up [ 400.081179][T15431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.111239][T15433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.142396][T15443] program syz.5.2580 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.181437][T15448] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.191400][T15448] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.250382][T15448] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.260508][T15448] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.332595][T15448] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.342647][T15448] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.415356][T15448] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.425244][T15448] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.508529][ T8212] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.516807][ T8212] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.544061][ T8212] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.552399][ T8212] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.563392][ T8212] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.571635][ T8212] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.580544][ T8212] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.588789][ T8212] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.103450][T15551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2583'. [ 401.116509][T15551] warn_alloc: 3 callbacks suppressed [ 401.116525][T15551] syz.2.2583: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 401.136469][T15551] CPU: 0 UID: 0 PID: 15551 Comm: syz.2.2583 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 401.136557][T15551] Tainted: [W]=WARN [ 401.136565][T15551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 401.136580][T15551] Call Trace: [ 401.136586][T15551] [ 401.136593][T15551] __dump_stack+0x1d/0x30 [ 401.136615][T15551] dump_stack_lvl+0xe8/0x140 [ 401.136641][T15551] dump_stack+0x15/0x1b [ 401.136658][T15551] warn_alloc+0x12b/0x1a0 [ 401.136760][T15551] __vmalloc_node_range_noprof+0x9d/0xed0 [ 401.136908][T15551] ? x2apic_send_IPI_self+0x10/0x20 [ 401.136944][T15551] ? arch_irq_work_raise+0x46/0x50 [ 401.137035][T15551] ? __irq_work_queue_local+0x10f/0x2c0 [ 401.137070][T15551] ? __rcu_read_unlock+0x4f/0x70 [ 401.137124][T15551] ? avc_has_perm_noaudit+0x1b1/0x200 [ 401.137144][T15551] ? should_fail_ex+0x30/0x280 [ 401.137162][T15551] ? xskq_create+0x36/0xe0 [ 401.137189][T15551] vmalloc_user_noprof+0x7d/0xb0 [ 401.137274][T15551] ? xskq_create+0x80/0xe0 [ 401.137321][T15551] xskq_create+0x80/0xe0 [ 401.137343][T15551] xsk_init_queue+0x95/0xf0 [ 401.137366][T15551] xsk_setsockopt+0x3f5/0x640 [ 401.137405][T15551] ? __pfx_xsk_setsockopt+0x10/0x10 [ 401.137429][T15551] __sys_setsockopt+0x184/0x200 [ 401.137461][T15551] __x64_sys_setsockopt+0x64/0x80 [ 401.137492][T15551] x64_sys_call+0x20ec/0x3000 [ 401.137567][T15551] do_syscall_64+0xd2/0x200 [ 401.137588][T15551] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 401.137615][T15551] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 401.137719][T15551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.137739][T15551] RIP: 0033:0x7ff474bdf6c9 [ 401.137756][T15551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.137778][T15551] RSP: 002b:00007ff473647038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 401.137797][T15551] RAX: ffffffffffffffda RBX: 00007ff474e35fa0 RCX: 00007ff474bdf6c9 [ 401.137817][T15551] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 401.137832][T15551] RBP: 00007ff474c61f91 R08: 0000000000000004 R09: 0000000000000000 [ 401.137847][T15551] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.137862][T15551] R13: 00007ff474e36038 R14: 00007ff474e35fa0 R15: 00007ffe6c3213a8 [ 401.137886][T15551] [ 401.137971][T15551] Mem-Info: [ 401.243176][T15565] netlink: 'syz.2.2583': attribute type 1 has an invalid length. [ 401.246440][T15551] active_anon:18713 inactive_anon:49144 isolated_anon:0 [ 401.246440][T15551] active_file:6701 inactive_file:16669 isolated_file:0 [ 401.246440][T15551] unevictable:0 dirty:43 writeback:11 [ 401.246440][T15551] slab_reclaimable:4257 slab_unreclaimable:102999 [ 401.246440][T15551] mapped:32931 shmem:56108 pagetables:3152 [ 401.246440][T15551] sec_pagetables:0 bounce:0 [ 401.246440][T15551] kernel_misc_reclaimable:0 [ 401.246440][T15551] free:1504289 free_pcp:81035 free_cma:0 [ 401.425385][T15551] Node 0 active_anon:74844kB inactive_anon:196576kB active_file:26812kB inactive_file:66668kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131792kB dirty:236kB writeback:0kB shmem:224388kB kernel_stack:5248kB pagetables:13316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 401.453391][T15551] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 401.483030][T15551] lowmem_reserve[]: 0 2881 7859 7859 [ 401.488364][T15551] Node 0 DMA32 free:2946624kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 401.519812][T15551] lowmem_reserve[]: 0 0 4978 4978 [ 401.524992][T15551] Node 0 Normal free:3055172kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:74844kB inactive_anon:196576kB active_file:26812kB inactive_file:66668kB unevictable:0kB writepending:296kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:318484kB local_pcp:256640kB free_cma:0kB [ 401.558819][T15551] lowmem_reserve[]: 0 0 0 0 [ 401.563408][T15551] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 401.576146][T15551] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946624kB [ 401.592245][T15551] Node 0 Normal: 3*4kB (UE) 3*8kB (UE) 412*16kB (UME) 855*32kB (UE) 574*64kB (UME) 204*128kB (UME) 282*256kB (UME) 311*512kB (UME) 523*1024kB (UME) 72*2048kB (UME) 499*4096kB (UM) = 3055172kB [ 401.611310][T15551] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 401.620674][T15551] 79459 total pagecache pages [ 401.625424][T15551] 10 pages in swap cache [ 401.629683][T15551] Free swap = 0kB [ 401.633477][T15551] Total swap = 124996kB [ 401.637670][T15551] 2097051 pages RAM [ 401.641496][T15551] 0 pages HighMem/MovableOnly [ 401.646162][T15551] 81087 pages reserved [ 401.791444][T15591] lo speed is unknown, defaulting to 1000 [ 401.798396][T15591] wg1 speed is unknown, defaulting to 1000 [ 401.926817][T15591] lo speed is unknown, defaulting to 1000 [ 402.062186][T15591] lo speed is unknown, defaulting to 1000 [ 402.236667][ T3958] Bluetooth: hci4: command 0x1003 tx timeout [ 402.280354][ T4003] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 402.979831][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.094555][T15599] loop5: detected capacity change from 0 to 1024 [ 403.104102][T15599] EXT4-fs: inline encryption not supported [ 403.110048][T15599] EXT4-fs: Ignoring removed i_version option [ 403.140348][ T3003] loop6: p1 p3 < > [ 403.144767][T15599] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 403.156955][ T3387] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 403.164691][ T3387] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 403.176703][ T3387] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x3 [ 403.192693][ T3387] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 403.212976][ T3003] loop6: p1 p3 < > [ 403.218313][T15599] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.2584: pblk 67 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 403.240869][T15603] loop3: detected capacity change from 0 to 1024 [ 403.268307][T15599] EXT4-fs error (device loop5): ext4_quota_enable:7139: comm syz.5.2584: Bad quota inode: 3, type: 0 [ 403.303425][T15603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.327107][T15606] fido_id[15606]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 403.331594][T15599] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 403.373515][T15599] EXT4-fs (loop5): mount failed [ 403.386710][ T3003] loop6: p1 p3 < > [ 403.466397][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.554909][T15627] program syz.5.2593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 403.605562][T15630] siw: device registration error -23 [ 403.615319][ T3003] loop6: p1 p3 < > [ 403.683167][T15597] loop2: detected capacity change from 0 to 512 [ 403.732680][T15597] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.2585: bad orphan inode 11862016 [ 403.752481][T15636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2596'. [ 403.756899][T15597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 403.765278][T15636] netlink: 660 bytes leftover after parsing attributes in process `syz.0.2596'. [ 403.784840][T15597] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.816419][T15636] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 403.905009][T15640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2598'. [ 404.024414][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 404.058193][T15656] loop2: detected capacity change from 0 to 512 [ 404.081736][T15656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.092498][T15654] tipc: New replicast peer: 255.255.255.32 [ 404.095010][T15656] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.100355][T15654] tipc: Enabled bearer , priority 10 [ 404.141572][T15654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2600'. [ 404.150854][T15654] tipc: Disabling bearer [ 404.164162][T15656] siw: device registration error -23 [ 404.170852][T15656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2601'. [ 404.201008][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.221558][ T3003] loop6: p1 p3 < > [ 404.268611][ T3003] loop6: p1 p3 < > [ 404.291145][T15666] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 404.305054][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 404.305069][ T29] audit: type=1326 audit(2000000147.171:38241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.2.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 404.335909][ T29] audit: type=1326 audit(2000000147.171:38242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.2.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 404.359806][ T29] audit: type=1326 audit(2000000147.171:38243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.2.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 404.383559][ T29] audit: type=1326 audit(2000000147.181:38244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15663 comm="syz.2.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 404.549418][T15671] bond0: option arp_interval: invalid value (18446744073265055750) [ 404.557430][T15671] bond0: option arp_interval: allowed values 0 - 2147483647 [ 404.577802][ T3003] loop6: p1 p3 < > [ 404.645891][ T29] audit: type=1400 audit(2000000147.528:38245): avc: denied { mount } for pid=15677 comm="syz.2.2609" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 404.648731][ T3003] loop6: p1 p3 < > [ 404.846028][ T29] audit: type=1400 audit(2000000147.633:38246): avc: denied { unmount } for pid=15677 comm="syz.2.2609" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 404.911181][T15690] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2612'. [ 404.941872][T15691] smc: net device bond0 applied user defined pnetid SYZ0 [ 404.948310][ T3003] loop6: p1 p3 < > [ 404.958690][T15690] netlink: 'syz.6.2612': attribute type 1 has an invalid length. [ 405.013272][T15698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2613'. [ 405.043483][ T29] audit: type=1326 audit(2000000147.937:38247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15697 comm="syz.6.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84353f6c9 code=0x7ffc0000 [ 405.043825][T15700] loop2: detected capacity change from 0 to 512 [ 405.067410][ T29] audit: type=1326 audit(2000000147.937:38248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15697 comm="syz.6.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84353f6c9 code=0x7ffc0000 [ 405.097317][ T29] audit: type=1326 audit(2000000147.937:38249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15697 comm="syz.6.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa84353f6c9 code=0x7ffc0000 [ 405.121070][ T29] audit: type=1326 audit(2000000147.937:38250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15697 comm="syz.6.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84353f6c9 code=0x7ffc0000 [ 405.159690][ T3003] loop6: p1 p3 < > [ 405.176544][T15705] loop3: detected capacity change from 0 to 512 [ 405.187507][T15700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.200619][ T3003] loop6: p1 p3 < > [ 405.204925][T15700] ext4 filesystem being mounted at /549/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 405.253040][T15705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.312131][T15705] ext4 filesystem being mounted at /529/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.439898][T15717] siw: device registration error -23 [ 405.447994][ T3459] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.459245][T15714] program syz.0.2617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 405.465668][T15717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2615'. [ 405.499810][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.551562][ T3459] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.564058][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.609803][T15722] loop2: detected capacity change from 0 to 512 [ 405.618768][ T3459] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.632927][ T3003] loop6: p1 p3 < > [ 405.692075][T15728] loop3: detected capacity change from 0 to 2048 [ 405.702209][T15722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.718852][ T3459] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.728955][T15722] ext4 filesystem being mounted at /551/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.856674][T15740] loop5: detected capacity change from 0 to 1024 [ 405.863921][T15740] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 405.875076][T15740] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 405.886713][ T49] Bluetooth: hci4: Frame reassembly failed (-84) [ 405.893190][ T3003] loop6: p1 p3 < > [ 405.895293][T15740] JBD2: no valid journal superblock found [ 405.902768][T15740] EXT4-fs (loop5): Could not load journal inode [ 405.950345][ T3003] loop6: p1 p3 < > [ 406.012374][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2625'. [ 406.032514][T15743] netlink: 'syz.3.2625': attribute type 1 has an invalid length. [ 406.073249][T15745] loop5: detected capacity change from 0 to 512 [ 406.091271][T15749] loop2: detected capacity change from 0 to 512 [ 406.111029][ T3459] team0: left allmulticast mode [ 406.118161][ T3459] dummy0: left allmulticast mode [ 406.123238][ T3459] bridge0: port 1(team0) entered disabled state [ 406.154960][T15745] ext4 filesystem being mounted at /435/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.171206][T15749] ext4 filesystem being mounted at /552/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.201582][T15747] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 406.208313][T15747] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 406.216854][T15747] vhci_hcd vhci_hcd.0: Device attached [ 406.250867][T15745] siw: device registration error -23 [ 406.257148][T15745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2627'. [ 406.269955][T15759] vhci_hcd vhci_hcd.0: port 0 already used [ 406.322404][ T3459] bond1 (unregistering): (slave macvlan0): Releasing backup interface [ 406.333720][ T3459] bond0 (unregistering): Released all slaves [ 406.343592][ T3459] bond1 (unregistering): Released all slaves [ 406.417088][T15765] netlink: 'syz.0.2629': attribute type 1 has an invalid length. [ 406.489711][ T3414] usb 8-1: SetAddress Request (2) to port 0 [ 406.496174][ T3414] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 406.537559][T15774] netlink: 'syz.5.2631': attribute type 3 has an invalid length. [ 407.028079][T15755] vhci_hcd: connection reset by peer [ 407.056041][ T49] vhci_hcd: stop threads [ 407.060517][ T49] vhci_hcd: release socket [ 407.065130][ T49] vhci_hcd: disconnect device [ 407.087653][ T3459] veth1_macvtap: left promiscuous mode [ 407.119198][ T3459] veth0_macvtap: left promiscuous mode [ 407.373941][ T3459] dummy0 (unregistering): left promiscuous mode [ 407.388293][ T3459] team0 (unregistering): Port device dummy0 removed [ 407.392750][T15806] loop2: detected capacity change from 0 to 512 [ 407.414919][T15806] ext4 filesystem being mounted at /556/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 407.605602][T15824] program syz.0.2639 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.609873][T15805] netlink: 'syz.5.2634': attribute type 298 has an invalid length. [ 407.626508][T15793] loop5: detected capacity change from 0 to 32768 [ 407.643722][T15828] loop3: detected capacity change from 0 to 512 [ 407.684186][T15828] ext4 filesystem being mounted at /534/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.698389][T15793] loop5: p1 p2 p3 < p5 p6 > [ 407.710195][T15793] loop5: p2 size 16775168 extends beyond EOD, truncated [ 407.724680][T15793] loop5: p5 start 4294970168 is beyond EOD, truncated [ 407.767276][T15840] loop2: detected capacity change from 0 to 512 [ 407.787149][T15840] ext4 filesystem being mounted at /557/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.833172][ T4003] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 407.883067][T15856] loop5: detected capacity change from 0 to 512 [ 407.885261][ T3003] loop6: p1 p3 < > [ 407.896387][T15857] loop3: detected capacity change from 0 to 512 [ 407.907382][T15857] EXT4-fs (loop3): orphan cleanup on readonly fs [ 407.921023][T15840] siw: device registration error -23 [ 407.933735][T15856] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.955736][T15857] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2643: bg 0: block 248: padding at end of block bitmap is not set [ 407.975658][ T3003] loop6: p1 p3 < > [ 407.976781][T15857] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.2643: Failed to acquire dquot type 1 [ 407.997257][T15857] EXT4-fs (loop3): 1 truncate cleaned up [ 408.035367][T15873] blktrace: Concurrent blktraces are not allowed on loop4 [ 408.037693][T14129] udevd[14129]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 408.055507][T14130] udevd[14130]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 408.070047][ T3742] udevd[3742]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 408.087086][ T3834] udevd[3834]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 408.177636][T15857] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 408.199315][T15857] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 408.218449][T15857] ext4 filesystem being remounted at /535/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 408.235042][T15885] netlink: 'syz.2.2647': attribute type 1 has an invalid length. [ 408.689330][ T3003] loop6: p1 p3 < > [ 409.000665][T15930] __nla_validate_parse: 3 callbacks suppressed [ 409.000681][T15930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2654'. [ 409.007831][T15927] loop3: detected capacity change from 0 to 2048 [ 409.072232][T15931] loop5: detected capacity change from 0 to 512 [ 409.114225][T15931] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2654: invalid indirect mapped block 256 (level 2) [ 409.128639][T15931] EXT4-fs (loop5): 2 truncates cleaned up [ 409.162790][ T3459] Bluetooth: hci4: Frame reassembly failed (-84) [ 409.245586][T15944] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #12: comm syz.3.2653: corrupted in-inode xattr: e_name out of bounds [ 409.598379][ T3003] loop6: p1 p3 < > [ 409.621547][T15953] program syz.6.2658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 409.994213][T15957] loop5: detected capacity change from 0 to 1024 [ 410.020578][T15957] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 410.031548][T15957] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 410.061759][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 410.061775][ T29] audit: type=1326 audit(2000000153.197:38536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15958 comm="syz.2.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 410.091572][ T29] audit: type=1326 audit(2000000153.197:38537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15958 comm="syz.2.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 410.091664][T15957] JBD2: no valid journal superblock found [ 410.091693][T15957] EXT4-fs (loop5): Could not load journal inode [ 410.115161][ T29] audit: type=1326 audit(2000000153.197:38538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15958 comm="syz.2.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 410.150843][ T29] audit: type=1326 audit(2000000153.197:38539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15958 comm="syz.2.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 410.174532][ T29] audit: type=1326 audit(2000000153.197:38540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15958 comm="syz.2.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 410.198152][ T29] audit: type=1326 audit(2000000153.197:38541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15958 comm="syz.2.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 410.221782][ T29] audit: type=1326 audit(2000000153.197:38542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15958 comm="syz.2.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 410.245422][ T29] audit: type=1326 audit(2000000153.197:38543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15958 comm="syz.2.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 410.269068][ T29] audit: type=1326 audit(2000000153.207:38544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15958 comm="syz.2.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 410.292829][ T29] audit: type=1326 audit(2000000153.207:38545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15958 comm="syz.2.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 410.428465][T15962] loop5: detected capacity change from 0 to 2048 [ 410.534178][ T3003] loop6: p1 p3 < > [ 410.796441][T15975] loop2: detected capacity change from 0 to 512 [ 410.875419][T15972] loop5: detected capacity change from 0 to 1024 [ 410.921687][T15975] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.119018][ T3958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 411.123244][T15943] Set syz1 is full, maxelem 65536 reached [ 411.125217][ T4003] Bluetooth: hci4: command 0x1003 tx timeout [ 411.347793][ T3414] usb 8-1: device descriptor read/8, error -110 [ 411.420027][T16004] loop3: detected capacity change from 0 to 512 [ 411.438458][T16004] ext4 filesystem being mounted at /539/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 411.464966][ T3414] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 411.504084][ T3414] usb 8-1: enqueue for inactive port 0 [ 411.515280][T15995] loop2: detected capacity change from 0 to 512 [ 411.534842][ T3414] usb 8-1: enqueue for inactive port 0 [ 411.567128][ T3414] usb 8-1: enqueue for inactive port 0 [ 411.671659][T15995] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.2667: inode #0: comm syz.2.2667: iget: illegal inode # [ 411.696048][T15995] EXT4-fs (loop2): get orphan inode failed [ 411.706256][T16003] lo speed is unknown, defaulting to 1000 [ 411.713529][T15995] EXT4-fs (loop2): mount failed [ 411.719911][T16003] wg1 speed is unknown, defaulting to 1000 [ 411.789142][T16009] lo speed is unknown, defaulting to 1000 [ 411.790374][T15995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2667'. [ 411.795442][T16009] wg1 speed is unknown, defaulting to 1000 [ 411.838830][T16014] loop3: detected capacity change from 0 to 1024 [ 411.854301][T16014] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 411.865235][T16014] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 411.870595][T15995] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2667'. [ 411.892415][T16014] JBD2: no valid journal superblock found [ 411.898313][T16014] EXT4-fs (loop3): Could not load journal inode [ 412.055323][T16019] loop3: detected capacity change from 0 to 512 [ 412.074626][T16019] ext4 filesystem being mounted at /541/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 412.139088][T16003] lo speed is unknown, defaulting to 1000 [ 412.293082][T16009] lo speed is unknown, defaulting to 1000 [ 412.426145][T16003] lo speed is unknown, defaulting to 1000 [ 412.486722][T16009] lo speed is unknown, defaulting to 1000 [ 412.545905][T16031] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.562403][ T3414] usb usb8-port1: attempt power cycle [ 412.654712][T16031] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.704110][T16042] loop5: detected capacity change from 0 to 512 [ 412.735141][T16038] netlink: 'syz.2.2676': attribute type 12 has an invalid length. [ 412.743069][T16038] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2676'. [ 412.786594][T16038] loop2: detected capacity change from 0 to 512 [ 412.791875][T16042] EXT4-fs mount: 31 callbacks suppressed [ 412.791892][T16042] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.803756][T16038] EXT4-fs: Ignoring removed bh option [ 412.850392][T16042] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.854749][T16031] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.886895][T16038] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 412.931350][T16038] EXT4-fs (loop2): 1 truncate cleaned up [ 413.010020][T16038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.106222][T16038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.118227][T16031] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.160078][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.173750][ T49] Bluetooth: hci4: Frame reassembly failed (-84) [ 413.347725][T16039] syz.3.2685 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 413.361934][T16039] CPU: 1 UID: 0 PID: 16039 Comm: syz.3.2685 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 413.361969][T16039] Tainted: [W]=WARN [ 413.361976][T16039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 413.362009][T16039] Call Trace: [ 413.362016][T16039] [ 413.362023][T16039] __dump_stack+0x1d/0x30 [ 413.362045][T16039] dump_stack_lvl+0xe8/0x140 [ 413.362064][T16039] dump_stack+0x15/0x1b [ 413.362082][T16039] dump_header+0x81/0x220 [ 413.362103][T16039] oom_kill_process+0x342/0x400 [ 413.362180][T16039] out_of_memory+0x979/0xb80 [ 413.362268][T16039] try_charge_memcg+0x610/0xa10 [ 413.362304][T16039] obj_cgroup_charge_pages+0xa6/0x150 [ 413.362326][T16039] __memcg_kmem_charge_page+0x9f/0x170 [ 413.362348][T16039] __alloc_frozen_pages_noprof+0x188/0x360 [ 413.362383][T16039] alloc_pages_mpol+0xb3/0x260 [ 413.362404][T16039] ? alloc_pages_noprof+0xf4/0x130 [ 413.362427][T16039] alloc_pages_noprof+0x90/0x130 [ 413.362449][T16039] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 413.362571][T16039] __kvmalloc_node_noprof+0x483/0x670 [ 413.362609][T16039] ? ip_set_alloc+0x24/0x30 [ 413.362719][T16039] ? ip_set_alloc+0x24/0x30 [ 413.362748][T16039] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 413.362815][T16039] ip_set_alloc+0x24/0x30 [ 413.362850][T16039] hash_netiface_create+0x282/0x740 [ 413.362891][T16039] ? __pfx_hash_netiface_create+0x10/0x10 [ 413.362949][T16039] ip_set_create+0x3cc/0x970 [ 413.363015][T16039] ? __nla_parse+0x40/0x60 [ 413.363037][T16039] nfnetlink_rcv_msg+0x4c6/0x590 [ 413.363093][T16039] netlink_rcv_skb+0x123/0x220 [ 413.363176][T16039] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 413.363210][T16039] nfnetlink_rcv+0x167/0x16c0 [ 413.363249][T16039] ? kmem_cache_free+0xe4/0x3d0 [ 413.363284][T16039] ? __kfree_skb+0x109/0x150 [ 413.363403][T16039] ? nlmon_xmit+0x4f/0x60 [ 413.363425][T16039] ? consume_skb+0x49/0x150 [ 413.363502][T16039] ? nlmon_xmit+0x4f/0x60 [ 413.363527][T16039] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 413.363565][T16039] ? __dev_queue_xmit+0x1200/0x2000 [ 413.363652][T16039] ? __dev_queue_xmit+0x182/0x2000 [ 413.363673][T16039] ? ref_tracker_free+0x37d/0x3e0 [ 413.363711][T16039] ? __netlink_deliver_tap+0x4dc/0x500 [ 413.363807][T16039] netlink_unicast+0x5c0/0x690 [ 413.363894][T16039] netlink_sendmsg+0x58b/0x6b0 [ 413.363917][T16039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.363948][T16039] __sock_sendmsg+0x145/0x180 [ 413.363977][T16039] ____sys_sendmsg+0x31e/0x4e0 [ 413.364010][T16039] ___sys_sendmsg+0x17b/0x1d0 [ 413.364048][T16039] __x64_sys_sendmsg+0xd4/0x160 [ 413.364073][T16039] x64_sys_call+0x191e/0x3000 [ 413.364100][T16039] do_syscall_64+0xd2/0x200 [ 413.364148][T16039] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 413.364181][T16039] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 413.364249][T16039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.364272][T16039] RIP: 0033:0x7fbbce98f6c9 [ 413.364286][T16039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.364304][T16039] RSP: 002b:00007fbbcd3ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.364326][T16039] RAX: ffffffffffffffda RBX: 00007fbbcebe6180 RCX: 00007fbbce98f6c9 [ 413.364341][T16039] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000003 [ 413.364359][T16039] RBP: 00007fbbcea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 413.364399][T16039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.364413][T16039] R13: 00007fbbcebe6218 R14: 00007fbbcebe6180 R15: 00007ffe4abbc628 [ 413.364434][T16039] [ 413.364441][T16039] memory: usage 307200kB, limit 307200kB, failcnt 1696 [ 413.722157][T16039] memory+swap: usage 342188kB, limit 9007199254740988kB, failcnt 0 [ 413.730096][T16039] kmem: usage 239728kB, limit 9007199254740988kB, failcnt 0 [ 413.737416][T16039] Memory cgroup stats for /syz3: [ 413.741029][T16039] cache 67616768 [ 413.749527][T16039] rss 1466368 [ 413.752810][T16039] shmem 67616768 [ 413.756343][T16039] mapped_file 0 [ 413.759829][T16039] dirty 0 [ 413.762780][T16039] writeback 0 [ 413.766047][T16039] workingset_refault_anon 265 [ 413.770745][T16039] workingset_refault_file 9877 [ 413.775881][T16039] swap 35827712 [ 413.779569][T16039] swapcached 0 [ 413.783098][T16039] pgpgin 389669 [ 413.786595][T16039] pgpgout 372801 [ 413.790158][T16039] pgfault 321896 [ 413.793706][T16039] pgmajfault 181 [ 413.797367][T16039] inactive_anon 68063232 [ 413.801610][T16039] active_anon 1019904 [ 413.805658][T16039] inactive_file 0 [ 413.809279][T16039] active_file 8192 [ 413.812987][T16039] unevictable 0 [ 413.816454][T16039] hierarchical_memory_limit 314572800 [ 413.821819][T16039] hierarchical_memsw_limit 9223372036854771712 [ 413.828010][T16039] total_cache 67616768 [ 413.832114][T16039] total_rss 1466368 [ 413.835998][T16039] total_shmem 67616768 [ 413.840080][T16039] total_mapped_file 0 [ 413.844089][T16039] total_dirty 0 [ 413.847537][T16039] total_writeback 0 [ 413.851339][T16039] total_workingset_refault_anon 265 [ 413.856561][T16039] total_workingset_refault_file 9877 [ 413.861854][T16039] total_swap 35827712 [ 413.865867][T16039] total_swapcached 0 [ 413.869763][T16039] total_pgpgin 390977 [ 413.873787][T16039] total_pgpgout 374109 [ 413.877907][T16039] total_pgfault 323225 [ 413.882004][T16039] total_pgmajfault 181 [ 413.886055][T16039] total_inactive_anon 68063232 [ 413.890803][T16039] total_active_anon 1019904 [ 413.895324][T16039] total_inactive_file 0 [ 413.899470][T16039] total_active_file 8192 [ 413.903735][T16039] total_unevictable 0 [ 413.907721][T16039] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2685,pid=16030,uid=0 [ 413.922427][T16039] Memory cgroup out of memory: Killed process 16030 (syz.3.2685) total-vm:98324kB, anon-rss:1268kB, file-rss:26664kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 413.950755][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.983021][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.013904][ T8212] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.045535][T16067] smc: net device bond0 erased user defined pnetid SYZ0 [ 414.046465][ T8212] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.511757][T16087] loop3: detected capacity change from 0 to 512 [ 414.541192][T16087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.554232][T16087] ext4 filesystem being mounted at /544/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 414.715926][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.716213][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 414.732762][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 414.740759][ T23] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x3 [ 414.749295][ T3414] usb usb8-port1: unable to enumerate USB device [ 414.767989][ T23] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 414.804996][T16095] loop3: detected capacity change from 0 to 1024 [ 414.822903][T16096] fido_id[16096]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 414.836813][T16095] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 414.847715][T16095] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 414.863841][T16095] JBD2: no valid journal superblock found [ 414.869607][T16095] EXT4-fs (loop3): Could not load journal inode [ 414.942312][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 414.942407][ T29] audit: type=1326 audit(2000000158.341:38871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16098 comm="syz.2.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 414.995752][ T29] audit: type=1326 audit(2000000158.341:38872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16098 comm="syz.2.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 415.019520][ T29] audit: type=1326 audit(2000000158.341:38873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16098 comm="syz.2.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 415.043381][ T29] audit: type=1326 audit(2000000158.341:38874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16098 comm="syz.2.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 415.044020][ T4003] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 415.067222][ T29] audit: type=1326 audit(2000000158.341:38875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16098 comm="syz.2.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 415.075609][ T3958] Bluetooth: hci4: command 0x1003 tx timeout [ 415.096779][ T29] audit: type=1326 audit(2000000158.341:38876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16098 comm="syz.2.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 415.126499][ T29] audit: type=1326 audit(2000000158.341:38877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16098 comm="syz.2.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 415.150777][ T29] audit: type=1326 audit(2000000158.341:38878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16098 comm="syz.2.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff474be15e7 code=0x7ffc0000 [ 415.174312][ T29] audit: type=1326 audit(2000000158.341:38879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16098 comm="syz.2.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 415.197885][ T29] audit: type=1326 audit(2000000158.341:38880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16098 comm="syz.2.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 415.249248][T16102] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 415.290037][T16102] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2689'. [ 415.290176][T16104] loop5: detected capacity change from 0 to 512 [ 415.315799][T16106] program syz.0.2691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.341834][T16104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.371051][T16109] loop3: detected capacity change from 0 to 1024 [ 415.379862][T16109] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 415.390799][T16109] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 415.405398][T16104] ext4 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.446936][T16109] JBD2: no valid journal superblock found [ 415.452720][T16109] EXT4-fs (loop3): Could not load journal inode [ 415.536401][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.565895][T16112] lo speed is unknown, defaulting to 1000 [ 415.602710][T16112] wg1 speed is unknown, defaulting to 1000 [ 415.618089][T16116] loop5: detected capacity change from 0 to 1024 [ 415.699456][T16116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.751048][T16121] loop3: detected capacity change from 0 to 1024 [ 415.778244][T16116] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #12: block 7: comm syz.5.2693: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 415.811829][T16121] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 415.822794][T16121] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 415.865129][T16116] EXT4-fs error (device loop5): __ext4_new_inode:1073: comm syz.5.2693: reserved inode found cleared - inode=2 [ 415.878128][T16121] JBD2: no valid journal superblock found [ 415.883936][T16121] EXT4-fs (loop3): Could not load journal inode [ 415.908680][T16116] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #12: block 7: comm syz.5.2693: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 415.987995][T16125] loop2: detected capacity change from 0 to 512 [ 415.999762][T16128] netlink: 'syz.3.2696': attribute type 1 has an invalid length. [ 416.016347][T16116] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #12: block 7: comm syz.5.2693: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 416.067192][T16125] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 416.084532][T16125] EXT4-fs (loop2): orphan cleanup on readonly fs [ 416.111757][T16112] lo speed is unknown, defaulting to 1000 [ 416.113970][T16116] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2693'. [ 416.169256][T16125] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.2695: corrupted inode contents [ 416.177454][T16112] lo speed is unknown, defaulting to 1000 [ 416.200756][T16116] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.5.2693: path /452/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 416.242548][T16125] EXT4-fs (loop2): Remounting filesystem read-only [ 416.265479][T16125] EXT4-fs (loop2): 1 truncate cleaned up [ 416.282483][T11226] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 416.293263][T11226] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 416.322342][T11226] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 416.340638][T16125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 416.359737][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.371945][T16125] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.443082][T16138] loop3: detected capacity change from 0 to 512 [ 416.470193][T16140] batman_adv: batadv0: Removing interface: macvtap0 [ 416.526417][T16138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.606135][T16138] ext4 filesystem being mounted at /550/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.758036][T16138] siw: device registration error -23 [ 416.764230][T16138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2699'. [ 416.792131][T16151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2701'. [ 416.825679][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.941482][T16155] program syz.2.2702 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 417.025121][T16156] loop3: detected capacity change from 0 to 512 [ 417.095112][T16156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.125135][T16156] ext4 filesystem being mounted at /551/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.152260][T16136] loop5: detected capacity change from 0 to 512 [ 417.190630][T16136] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.2698: bad orphan inode 11862016 [ 417.203213][T16136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 417.216649][T16136] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.285752][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.355563][T16170] vhci_hcd: invalid port number 85 [ 417.360724][T16170] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 417.429047][T16174] netlink: 'syz.3.2707': attribute type 1 has an invalid length. [ 417.460640][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 417.494358][T16178] warn_alloc: 6 callbacks suppressed [ 417.494373][T16178] syz.5.2710: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 417.514954][T16178] CPU: 0 UID: 0 PID: 16178 Comm: syz.5.2710 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 417.515114][T16178] Tainted: [W]=WARN [ 417.515120][T16178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 417.515132][T16178] Call Trace: [ 417.515137][T16178] [ 417.515196][T16178] __dump_stack+0x1d/0x30 [ 417.515283][T16178] dump_stack_lvl+0xe8/0x140 [ 417.515308][T16178] dump_stack+0x15/0x1b [ 417.515329][T16178] warn_alloc+0x12b/0x1a0 [ 417.515373][T16178] __vmalloc_node_range_noprof+0x9d/0xed0 [ 417.515413][T16178] ? x2apic_send_IPI_self+0x10/0x20 [ 417.515509][T16178] ? arch_irq_work_raise+0x46/0x50 [ 417.515532][T16178] ? __irq_work_queue_local+0x10f/0x2c0 [ 417.515572][T16178] ? __rcu_read_unlock+0x4f/0x70 [ 417.515602][T16178] ? avc_has_perm_noaudit+0x1b1/0x200 [ 417.515700][T16178] ? should_fail_ex+0x30/0x280 [ 417.515721][T16178] ? xskq_create+0x36/0xe0 [ 417.515746][T16178] vmalloc_user_noprof+0x7d/0xb0 [ 417.515819][T16178] ? xskq_create+0x80/0xe0 [ 417.515845][T16178] xskq_create+0x80/0xe0 [ 417.515868][T16178] xsk_init_queue+0x95/0xf0 [ 417.515911][T16178] xsk_setsockopt+0x3f5/0x640 [ 417.515935][T16178] ? __pfx_xsk_setsockopt+0x10/0x10 [ 417.515958][T16178] __sys_setsockopt+0x184/0x200 [ 417.516033][T16178] __x64_sys_setsockopt+0x64/0x80 [ 417.516071][T16178] x64_sys_call+0x20ec/0x3000 [ 417.516145][T16178] do_syscall_64+0xd2/0x200 [ 417.516166][T16178] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 417.516257][T16178] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 417.516323][T16178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.516343][T16178] RIP: 0033:0x7fc5e67cf6c9 [ 417.516401][T16178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.516417][T16178] RSP: 002b:00007fc5e522f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 417.516439][T16178] RAX: ffffffffffffffda RBX: 00007fc5e6a25fa0 RCX: 00007fc5e67cf6c9 [ 417.516457][T16178] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 417.516527][T16178] RBP: 00007fc5e6851f91 R08: 0000000000000004 R09: 0000000000000000 [ 417.516542][T16178] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.516557][T16178] R13: 00007fc5e6a26038 R14: 00007fc5e6a25fa0 R15: 00007ffdd9f8dc68 [ 417.516577][T16178] [ 417.516583][T16178] Mem-Info: [ 417.752501][T16178] active_anon:20403 inactive_anon:44804 isolated_anon:0 [ 417.752501][T16178] active_file:6902 inactive_file:16679 isolated_file:0 [ 417.752501][T16178] unevictable:0 dirty:315 writeback:0 [ 417.752501][T16178] slab_reclaimable:4250 slab_unreclaimable:97932 [ 417.752501][T16178] mapped:30097 shmem:53161 pagetables:3059 [ 417.752501][T16178] sec_pagetables:0 bounce:0 [ 417.752501][T16178] kernel_misc_reclaimable:0 [ 417.752501][T16178] free:1552435 free_pcp:76779 free_cma:0 [ 417.798650][T16178] Node 0 active_anon:81612kB inactive_anon:179216kB active_file:27608kB inactive_file:66716kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120388kB dirty:1260kB writeback:0kB shmem:212644kB kernel_stack:5120kB pagetables:12236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 417.826866][T16178] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 417.856708][T16178] lowmem_reserve[]: 0 2881 7859 7859 [ 417.862079][T16178] Node 0 DMA32 free:2946624kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 417.893357][T16178] lowmem_reserve[]: 0 0 4978 4978 [ 417.898456][T16178] Node 0 Normal free:3247756kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:85672kB inactive_anon:179216kB active_file:27608kB inactive_file:66716kB unevictable:0kB writepending:1260kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:299340kB local_pcp:178980kB free_cma:0kB [ 417.932409][T16178] lowmem_reserve[]: 0 0 0 0 [ 417.936997][T16178] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 417.949882][T16178] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946624kB [ 417.966049][T16178] Node 0 Normal: 3550*4kB (UME) 1918*8kB (UME) 840*16kB (UME) 243*32kB (UME) 488*64kB (UME) 42*128kB (UE) 383*256kB (UME) 499*512kB (UME) 539*1024kB (UME) 99*2048kB (UE) 501*4096kB (UM) = 3247688kB [ 417.985766][T16178] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 417.995131][T16178] 76734 total pagecache pages [ 417.999839][T16178] 10 pages in swap cache [ 418.004111][T16178] Free swap = 0kB [ 418.007860][T16178] Total swap = 124996kB [ 418.012080][T16178] 2097051 pages RAM [ 418.015961][T16178] 0 pages HighMem/MovableOnly [ 418.020792][T16178] 81087 pages reserved [ 418.326748][T16213] loop3: detected capacity change from 0 to 2048 [ 418.364750][T16216] loop5: detected capacity change from 0 to 512 [ 418.469851][T16213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.533825][T16216] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 418.542435][T16216] EXT4-fs (loop5): orphan cleanup on readonly fs [ 418.733667][T16228] lo speed is unknown, defaulting to 1000 [ 418.740399][T16228] wg1 speed is unknown, defaulting to 1000 [ 418.872959][T16228] lo speed is unknown, defaulting to 1000 [ 418.999925][T16228] lo speed is unknown, defaulting to 1000 [ 419.190487][T16216] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.2713: corrupted inode contents [ 419.229640][T16216] EXT4-fs (loop5): Remounting filesystem read-only [ 419.512447][T16216] EXT4-fs (loop5): 1 truncate cleaned up [ 419.518645][T11226] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 419.529387][T11226] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 419.573044][T11226] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 419.585825][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.598751][T16216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 419.626513][T16216] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.091454][T16239] loop2: detected capacity change from 0 to 1024 [ 420.112123][T16243] netlink: 'syz.0.2719': attribute type 1 has an invalid length. [ 420.118865][T16241] blktrace: Concurrent blktraces are not allowed on loop6 [ 420.182930][T16239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 420.219795][T16239] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.283621][T16258] tmpfs: Bad value for 'mpol' [ 420.288523][ T29] kauditd_printk_skb: 534 callbacks suppressed [ 420.288540][ T29] audit: type=1400 audit(2000000163.947:39403): avc: denied { mounton } for pid=16256 comm="syz.3.2722" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 420.299423][T16239] syz.2.2718 (16239): attempted to duplicate a private mapping with mremap. This is not supported. [ 420.376835][T16239] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2718'. [ 420.379780][T16251] audit: audit_backlog=65 > audit_backlog_limit=64 [ 420.392522][T16251] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64 [ 420.400307][T16251] audit: backlog limit exceeded [ 420.418718][ T29] audit: type=1326 audit(2000000163.999:39404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16259 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e67cf6c9 code=0x7ffc0000 [ 420.419802][T16239] netlink: 'syz.2.2718': attribute type 39 has an invalid length. [ 420.442602][ T29] audit: type=1326 audit(2000000163.999:39405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16259 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e67cf6c9 code=0x7ffc0000 [ 420.474120][ T29] audit: type=1326 audit(2000000164.010:39406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16259 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fc5e67cf6c9 code=0x7ffc0000 [ 420.497840][ T29] audit: type=1326 audit(2000000164.010:39407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16259 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e67cf6c9 code=0x7ffc0000 [ 420.521460][ T29] audit: type=1326 audit(2000000164.010:39408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16259 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e67cf6c9 code=0x7ffc0000 [ 420.545048][ T29] audit: type=1326 audit(2000000164.010:39409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16259 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc5e67cf6c9 code=0x7ffc0000 [ 420.656314][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 420.748977][T16282] loop2: detected capacity change from 0 to 2048 [ 420.780279][T16282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.061875][T16292] siw: device registration error -23 [ 421.118748][ T49] Bluetooth: hci4: Frame reassembly failed (-84) [ 421.126740][T16297] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #12: comm syz.2.2723: corrupted in-inode xattr: e_name out of bounds [ 421.403785][T16312] vhci_hcd: invalid port number 85 [ 421.409012][T16312] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 421.752848][T16320] loop3: detected capacity change from 0 to 2048 [ 421.832563][T16320] loop3: p2 p3 p7 [ 421.863971][T16090] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 422.438916][T16324] netlink: 'syz.5.2730': attribute type 1 has an invalid length. [ 422.447037][T16323] program syz.0.2740 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 422.817106][T16330] lo speed is unknown, defaulting to 1000 [ 422.823783][T16330] wg1 speed is unknown, defaulting to 1000 [ 422.958292][T16330] lo speed is unknown, defaulting to 1000 [ 423.084690][T16330] lo speed is unknown, defaulting to 1000 [ 423.247707][ T3958] Bluetooth: hci4: command 0x1003 tx timeout [ 423.262212][ T4003] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 423.583928][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.741286][T16338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2731'. [ 423.751049][T16336] loop5: detected capacity change from 0 to 2048 [ 423.931981][T16341] loop2: detected capacity change from 0 to 512 [ 423.966655][T16341] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2731: invalid indirect mapped block 256 (level 2) [ 424.143254][T16341] EXT4-fs (loop2): 2 truncates cleaned up [ 424.149752][T16341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.278209][T16351] loop3: detected capacity change from 0 to 512 [ 424.322928][T16336] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.392237][T16351] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 424.411109][T16351] EXT4-fs (loop3): orphan cleanup on readonly fs [ 424.427715][T16357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2735'. [ 424.456619][T11226] Bluetooth: hci4: Frame reassembly failed (-84) [ 424.473335][T16333] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #12: comm syz.5.2744: corrupted in-inode xattr: e_name out of bounds [ 424.492154][T16357] netlink: 'syz.0.2735': attribute type 1 has an invalid length. [ 424.534281][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.548711][T16351] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.2732: corrupted inode contents [ 424.580453][T16351] EXT4-fs (loop3): Remounting filesystem read-only [ 424.606664][T16351] EXT4-fs (loop3): 1 truncate cleaned up [ 424.612916][ T8212] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 424.623583][ T8212] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 424.636570][ T8212] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 424.648427][T16351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 424.661777][T16351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.918880][T16364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.941173][T16364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.265748][T16370] loop2: detected capacity change from 0 to 512 [ 425.286524][T16370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.309437][T16370] ext4 filesystem being mounted at /580/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.332454][T16374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2742'. [ 425.362981][T16370] siw: device registration error -23 [ 425.368889][T16370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2741'. [ 425.393773][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.487755][T16382] bridge1: left promiscuous mode [ 425.492828][T16382] geneve2: left promiscuous mode [ 425.497950][T16382] bond1: left promiscuous mode [ 425.502714][T16382] wireguard0: left promiscuous mode [ 425.508144][T16382] bond2: left promiscuous mode [ 425.513011][T16382] wireguard2: left promiscuous mode [ 425.553645][T16382] bond5: left promiscuous mode [ 425.558458][T16382] wireguard4: left promiscuous mode [ 425.605641][T16382] bond7: left promiscuous mode [ 425.610519][T16382] bridge5: left promiscuous mode [ 425.648016][ T29] kauditd_printk_skb: 419 callbacks suppressed [ 425.648032][ T29] audit: type=1400 audit(2000000169.574:39823): avc: denied { bind } for pid=16380 comm="syz.2.2745" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 425.674960][ T29] audit: type=1400 audit(2000000169.574:39824): avc: denied { name_bind } for pid=16380 comm="syz.2.2745" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 425.696228][ T29] audit: type=1400 audit(2000000169.574:39825): avc: denied { node_bind } for pid=16380 comm="syz.2.2745" saddr=100.1.1.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 425.794681][ T29] audit: type=1326 audit(2000000169.721:39826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16380 comm="syz.2.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 425.818391][ T29] audit: type=1326 audit(2000000169.721:39827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16380 comm="syz.2.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 425.841919][ T29] audit: type=1326 audit(2000000169.721:39828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16380 comm="syz.2.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 425.865577][ T29] audit: type=1326 audit(2000000169.721:39829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16380 comm="syz.2.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 425.889076][ T29] audit: type=1326 audit(2000000169.721:39830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16380 comm="syz.2.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 425.912858][ T29] audit: type=1326 audit(2000000169.721:39831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16380 comm="syz.2.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 425.936509][ T29] audit: type=1326 audit(2000000169.721:39832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16380 comm="syz.2.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 426.427031][ T3958] Bluetooth: hci4: command 0x1003 tx timeout [ 426.434741][ T4003] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 426.521278][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.553705][T16399] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.563566][T16399] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.841293][T16387] lo speed is unknown, defaulting to 1000 [ 426.847762][T16387] wg1 speed is unknown, defaulting to 1000 [ 426.911364][T16387] lo speed is unknown, defaulting to 1000 [ 426.976016][T16387] lo speed is unknown, defaulting to 1000 [ 427.032848][T16399] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.042802][T16399] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.078435][T16387] chnl_net:caif_netlink_parms(): no params data found [ 427.099890][T16399] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.109836][T16399] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.177690][T16387] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.184860][T16387] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.193407][T16387] bridge_slave_0: entered allmulticast mode [ 427.200187][T16387] bridge_slave_0: entered promiscuous mode [ 427.208103][T16399] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.217909][T16399] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.230099][T16387] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.237280][T16387] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.244636][T16387] bridge_slave_1: entered allmulticast mode [ 427.252029][T16387] bridge_slave_1: entered promiscuous mode [ 427.273990][T16387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.285572][T16387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.313347][T16387] team0: Port device team_slave_0 added [ 427.320472][T16387] team0: Port device team_slave_1 added [ 427.346411][ T49] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.354651][ T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.363256][T16387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.370409][T16387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.396561][T16387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.411730][T16387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.418779][T16387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.444698][T16387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.455609][ T49] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.463792][ T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.481627][ T49] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.489541][T16379] Set syz1 is full, maxelem 65536 reached [ 427.489970][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.506943][ T49] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.515282][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.547759][T16387] hsr_slave_0: entered promiscuous mode [ 427.554222][T16387] hsr_slave_1: entered promiscuous mode [ 427.560688][T16387] debugfs: 'hsr0' already exists in 'hsr' [ 427.566438][T16387] Cannot create hsr debugfs directory [ 427.633287][T16387] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 427.642301][T16387] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 427.651589][T16387] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 427.661012][T16387] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 427.677552][T16387] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.684629][T16387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.691947][T16387] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.699058][T16387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.729813][T16387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.742303][ T8212] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.750040][ T8212] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.764121][T16387] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.775804][ T8212] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.782904][ T8212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.794148][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.802035][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.850573][T16422] loop5: detected capacity change from 0 to 512 [ 427.875201][T16428] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 427.889931][T16429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2752'. [ 427.897035][T16427] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 427.906051][T16427] IPv6: NLM_F_CREATE should be set when creating new route [ 427.909421][T16422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.928405][T16422] ext4 filesystem being mounted at /462/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.952409][T16435] loop3: detected capacity change from 0 to 512 [ 427.963451][T16435] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2752: invalid indirect mapped block 256 (level 2) [ 427.972525][T16387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.985410][T16435] EXT4-fs (loop3): 2 truncates cleaned up [ 427.993324][T16435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.147563][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.213819][T16448] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2755'. [ 428.235568][T16448] warn_alloc: 3 callbacks suppressed [ 428.235664][T16448] syz.5.2755: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 428.255826][T16448] CPU: 1 UID: 0 PID: 16448 Comm: syz.5.2755 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 428.255885][T16448] Tainted: [W]=WARN [ 428.255893][T16448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 428.255907][T16448] Call Trace: [ 428.255914][T16448] [ 428.255985][T16448] __dump_stack+0x1d/0x30 [ 428.256008][T16448] dump_stack_lvl+0xe8/0x140 [ 428.256032][T16448] dump_stack+0x15/0x1b [ 428.256055][T16448] warn_alloc+0x12b/0x1a0 [ 428.256096][T16448] __vmalloc_node_range_noprof+0x9d/0xed0 [ 428.256136][T16448] ? x2apic_send_IPI_self+0x10/0x20 [ 428.256208][T16448] ? arch_irq_work_raise+0x46/0x50 [ 428.256231][T16448] ? __irq_work_queue_local+0x10f/0x2c0 [ 428.256330][T16448] ? __rcu_read_unlock+0x4f/0x70 [ 428.256423][T16448] ? avc_has_perm_noaudit+0x1b1/0x200 [ 428.256451][T16448] vmalloc_user_noprof+0x7d/0xb0 [ 428.256524][T16448] ? xskq_create+0x80/0xe0 [ 428.256567][T16448] xskq_create+0x80/0xe0 [ 428.256614][T16448] xsk_init_queue+0x95/0xf0 [ 428.256635][T16448] xsk_setsockopt+0x3f5/0x640 [ 428.256718][T16448] ? __pfx_xsk_setsockopt+0x10/0x10 [ 428.256740][T16448] __sys_setsockopt+0x184/0x200 [ 428.256775][T16448] __x64_sys_setsockopt+0x64/0x80 [ 428.256807][T16448] x64_sys_call+0x20ec/0x3000 [ 428.256848][T16448] do_syscall_64+0xd2/0x200 [ 428.256867][T16448] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 428.256893][T16448] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 428.256926][T16448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.256989][T16448] RIP: 0033:0x7fc5e67cf6c9 [ 428.257007][T16448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.257027][T16448] RSP: 002b:00007fc5e522f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 428.257045][T16448] RAX: ffffffffffffffda RBX: 00007fc5e6a25fa0 RCX: 00007fc5e67cf6c9 [ 428.257057][T16448] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 428.257069][T16448] RBP: 00007fc5e6851f91 R08: 0000000000000004 R09: 0000000000000000 [ 428.257081][T16448] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.257173][T16448] R13: 00007fc5e6a26038 R14: 00007fc5e6a25fa0 R15: 00007ffdd9f8dc68 [ 428.257196][T16448] [ 428.257204][T16448] Mem-Info: [ 428.483219][T16448] active_anon:11766 inactive_anon:33868 isolated_anon:0 [ 428.483219][T16448] active_file:6734 inactive_file:16538 isolated_file:0 [ 428.483219][T16448] unevictable:0 dirty:123 writeback:0 [ 428.483219][T16448] slab_reclaimable:4264 slab_unreclaimable:95442 [ 428.483219][T16448] mapped:33145 shmem:33926 pagetables:3030 [ 428.483219][T16448] sec_pagetables:0 bounce:0 [ 428.483219][T16448] kernel_misc_reclaimable:0 [ 428.483219][T16448] free:1659487 free_pcp:29654 free_cma:0 [ 428.528745][T16448] Node 0 active_anon:47064kB inactive_anon:135472kB active_file:26936kB inactive_file:66152kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132580kB dirty:492kB writeback:0kB shmem:135704kB kernel_stack:5296kB pagetables:12120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 428.556905][T16448] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 428.564047][T16387] veth0_vlan: entered promiscuous mode [ 428.586752][T16448] lowmem_reserve[]: 0 2881 7859 7859 [ 428.595601][T16459] netlink: 'syz.5.2755': attribute type 1 has an invalid length. [ 428.597683][T16448] Node 0 DMA32 free:2946624kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 428.619645][T16387] veth1_vlan: entered promiscuous mode [ 428.638001][T16448] lowmem_reserve[]: 0 0 4978 4978 [ 428.648580][T16448] Node 0 Normal free:3675964kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47064kB inactive_anon:135472kB active_file:26936kB inactive_file:66152kB unevictable:0kB writepending:492kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:114956kB local_pcp:49664kB free_cma:0kB [ 428.663524][T16387] veth0_macvtap: entered promiscuous mode [ 428.682141][T16448] lowmem_reserve[]: 0 0 0 0 [ 428.692437][T16448] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 428.705346][T16448] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946624kB [ 428.721549][T16448] Node 0 Normal: 2617*4kB (M) 1954*8kB (UME) 2605*16kB (UME) 1809*32kB (UM) 1155*64kB (UME) 792*128kB (UME) 666*256kB (UME) 508*512kB (UME) 535*1024kB (UME) 128*2048kB (UME) 521*4096kB (UM) = 3675556kB [ 428.741665][T16448] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 428.750974][T16448] 57189 total pagecache pages [ 428.755689][T16448] 10 pages in swap cache [ 428.759917][T16448] Free swap = 4192kB [ 428.763909][T16448] Total swap = 124996kB [ 428.768048][T16448] 2097051 pages RAM [ 428.771942][T16448] 0 pages HighMem/MovableOnly [ 428.776606][T16448] 81087 pages reserved [ 428.785979][T16387] veth1_macvtap: entered promiscuous mode [ 428.806776][T16387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.833995][T16387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.891470][ T8212] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.920413][ T8212] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.929700][T16462] bond0: option arp_interval: invalid value (18446744073265055750) [ 428.937821][T16462] bond0: option arp_interval: allowed values 0 - 2147483647 [ 428.946431][ T8212] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.961491][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.970676][ T9069] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.988998][T16465] loop2: detected capacity change from 0 to 512 [ 429.433659][T16480] lo speed is unknown, defaulting to 1000 [ 429.440538][T16480] wg1 speed is unknown, defaulting to 1000 [ 429.575503][T16480] lo speed is unknown, defaulting to 1000 [ 429.708604][T16480] lo speed is unknown, defaulting to 1000 [ 429.916078][T16465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.075660][T16465] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.110523][T16477] loop5: detected capacity change from 0 to 1024 [ 430.124936][T16477] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 430.135934][T16477] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 430.159119][T16485] siw: device registration error -23 [ 430.175048][T16485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2756'. [ 430.218656][T16462] smc: net device bond0 applied user defined pnetid SYZ0 [ 430.545490][T16471] loop3: detected capacity change from 0 to 512 [ 430.580353][T16477] JBD2: no valid journal superblock found [ 430.586139][T16477] EXT4-fs (loop5): Could not load journal inode [ 430.601319][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 430.601334][ T29] audit: type=1400 audit(2000000174.781:39953): avc: denied { create } for pid=16488 comm="syz.0.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 430.632957][T16489] vhci_hcd: invalid port number 85 [ 430.638316][T16489] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 430.666397][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.687886][T16471] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.2758: bad orphan inode 11862016 [ 430.690167][ T29] audit: type=1400 audit(2000000174.812:39954): avc: denied { write } for pid=16488 comm="syz.0.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 430.722395][ T29] audit: type=1326 audit(2000000174.896:39955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdcfdf6c9 code=0x7ffc0000 [ 430.746287][ T29] audit: type=1326 audit(2000000174.896:39956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdcfdf6c9 code=0x7ffc0000 [ 430.770057][ T29] audit: type=1326 audit(2000000174.928:39957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cdcfdf6c9 code=0x7ffc0000 [ 430.793743][ T29] audit: type=1326 audit(2000000174.928:39958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdcfdf6c9 code=0x7ffc0000 [ 430.817461][ T29] audit: type=1326 audit(2000000174.928:39959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdcfdf6c9 code=0x7ffc0000 [ 430.841125][ T29] audit: type=1326 audit(2000000174.928:39960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2cdcfdf6c9 code=0x7ffc0000 [ 430.864901][ T29] audit: type=1326 audit(2000000174.928:39961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdcfdf6c9 code=0x7ffc0000 [ 430.888549][ T29] audit: type=1326 audit(2000000174.928:39962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cdcfdf6c9 code=0x7ffc0000 [ 430.914807][T16497] loop5: detected capacity change from 0 to 512 [ 430.953683][T16499] program syz.2.2763 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 430.957353][T16471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 431.003578][T16497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.009163][T16471] ext4 filesystem being mounted at /564/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.061522][T16497] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.216649][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.448311][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 432.110704][T16523] bond0: option arp_interval: invalid value (18446744073265055750) [ 432.118788][T16523] bond0: option arp_interval: allowed values 0 - 2147483647 [ 432.131410][T16520] loop5: detected capacity change from 0 to 512 [ 432.163645][T16520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.196140][T16520] ext4 filesystem being mounted at /469/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 432.564750][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.591526][T16494] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.745484][T16533] program syz.3.2768 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.763099][T16530] netlink: 'syz.2.2774': attribute type 30 has an invalid length. [ 432.772876][T16532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 432.780185][T16532] IPv6: NLM_F_CREATE should be set when creating new route [ 432.817882][T16534] geneve4: entered promiscuous mode [ 432.823196][T16534] geneve4: entered allmulticast mode [ 432.858286][T16538] loop3: detected capacity change from 0 to 764 [ 432.883957][T16530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16530 comm=syz.2.2774 [ 432.932854][T16538] Symlink component flag not implemented [ 432.938544][T16538] Symlink component flag not implemented [ 432.968299][T16538] Symlink component flag not implemented (129) [ 432.974570][T16538] Symlink component flag not implemented (6) [ 433.001409][T16538] rock: directory entry would overflow storage [ 433.007653][T16538] rock: sig=0x4f50, size=4, remaining=3 [ 433.013302][T16538] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 433.756979][T16494] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.825140][T16494] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.871049][T16494] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.934491][ T9069] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.945735][ T9069] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.957137][ T9069] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.968354][ T9069] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.999391][T16543] loop2: detected capacity change from 0 to 512 [ 434.012363][T16546] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2776'. [ 434.022352][T16549] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.049789][T16543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.063827][T16543] ext4 filesystem being mounted at /590/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.076427][T16557] loop7: detected capacity change from 0 to 512 [ 434.090162][T16549] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.114150][T16557] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2776: invalid indirect mapped block 256 (level 2) [ 434.128688][T16557] EXT4-fs (loop7): 2 truncates cleaned up [ 434.135429][T16557] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.164942][T16549] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.218511][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.233026][T16549] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.294501][ T9069] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.306691][ T9069] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.315300][ T9069] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.330427][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.355097][T16567] loop2: detected capacity change from 0 to 512 [ 434.373845][T16567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.401805][ T3414] IPVS: starting estimator thread 0... [ 434.404150][T16567] ext4 filesystem being mounted at /592/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.484930][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.495736][T16572] IPVS: using max 4176 ests per chain, 208800 per kthread [ 434.580301][T16578] loop2: detected capacity change from 0 to 2048 [ 434.613292][T16578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.681334][ T9069] Bluetooth: hci1: Frame reassembly failed (-84) [ 434.746349][T16581] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #12: comm syz.2.2784: corrupted in-inode xattr: e_name out of bounds [ 434.857523][T16583] program syz.5.2785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 434.956045][T16588] netlink: 'syz.5.2788': attribute type 30 has an invalid length. [ 435.013208][T16590] geneve2: entered promiscuous mode [ 435.018472][T16590] geneve2: entered allmulticast mode [ 435.057508][T16588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16588 comm=syz.5.2788 [ 435.172940][T16593] loop5: detected capacity change from 0 to 256 [ 435.217502][T16593] netlink: 52083 bytes leftover after parsing attributes in process `syz.5.2789'. [ 435.346856][T16596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2790'. [ 435.364606][T16596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2790'. [ 435.476998][T16602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2793'. [ 435.527941][ T29] kauditd_printk_skb: 517 callbacks suppressed [ 435.527955][ T29] audit: type=1326 audit(2000000179.946:40480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16603 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e67cf6c9 code=0x7ffc0000 [ 435.557889][ T29] audit: type=1326 audit(2000000179.946:40481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16603 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5e67cf6c9 code=0x7ffc0000 [ 435.582412][ T29] audit: type=1326 audit(2000000179.946:40482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16603 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e67cf6c9 code=0x7ffc0000 [ 435.608895][ T29] audit: type=1326 audit(2000000179.998:40483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16603 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc5e67cf6c9 code=0x7ffc0000 [ 435.632572][ T29] audit: type=1326 audit(2000000179.998:40484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16603 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e67cf6c9 code=0x7ffc0000 [ 435.656185][ T29] audit: type=1326 audit(2000000179.998:40485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16603 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc5e67cf6c9 code=0x7ffc0000 [ 435.679811][ T29] audit: type=1326 audit(2000000179.998:40486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16603 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e67cf6c9 code=0x7ffc0000 [ 435.703612][ T29] audit: type=1326 audit(2000000179.998:40487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16603 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc5e67cf6c9 code=0x7ffc0000 [ 435.727141][ T29] audit: type=1326 audit(2000000179.998:40488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16603 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e67cf6c9 code=0x7ffc0000 [ 435.750897][ T29] audit: type=1326 audit(2000000179.998:40489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16603 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc5e67cf6c9 code=0x7ffc0000 [ 435.933744][T16618] loop3: detected capacity change from 0 to 2048 [ 435.950356][T16617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2797'. [ 436.023856][T16622] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 436.056056][T16618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.088157][T16625] program syz.5.2798 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 436.141156][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 436.193235][T16629] program syz.5.2799 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 436.206509][T16615] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #12: comm syz.3.2796: corrupted in-inode xattr: e_name out of bounds [ 436.272492][T16632] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2800'. [ 436.371916][T16633] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 436.434729][T16635] bond0: option arp_interval: invalid value (18446744073265055750) [ 436.442725][T16635] bond0: option arp_interval: allowed values 0 - 2147483647 [ 436.638649][ T3546] Bluetooth: hci1: command 0x1003 tx timeout [ 436.645066][ T4003] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 436.666259][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.855673][T16648] bond0: option arp_interval: invalid value (18446744073265055750) [ 436.863655][T16648] bond0: option arp_interval: allowed values 0 - 2147483647 [ 437.235032][T16656] loop2: detected capacity change from 0 to 512 [ 437.268785][T16656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.282025][T16656] ext4 filesystem being mounted at /598/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.376139][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.409131][T16663] program syz.2.2809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.476694][T16492] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 437.492076][T16492] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 437.508852][T16669] program syz.2.2810 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.603804][T16671] netlink: 'syz.0.2811': attribute type 30 has an invalid length. [ 437.648130][T16678] geneve3: entered promiscuous mode [ 437.653423][T16678] geneve3: entered allmulticast mode [ 437.676138][T16679] loop2: detected capacity change from 0 to 512 [ 437.696613][T16671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16671 comm=syz.0.2811 [ 437.713622][T16681] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2813'. [ 437.723246][T16679] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.2812: inode #0: comm syz.2.2812: iget: illegal inode # [ 437.737918][T16679] EXT4-fs (loop2): get orphan inode failed [ 437.744449][T16679] EXT4-fs (loop2): mount failed [ 437.777389][T16679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2812'. [ 437.792912][T16674] lo speed is unknown, defaulting to 1000 [ 437.800802][T16674] wg1 speed is unknown, defaulting to 1000 [ 437.919389][T16674] lo speed is unknown, defaulting to 1000 [ 438.011075][T16674] lo speed is unknown, defaulting to 1000 [ 438.095550][ T4003] Bluetooth: hci4: command 0x1003 tx timeout [ 438.095620][ T3958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 438.144851][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.214856][T16694] bond0: option arp_interval: invalid value (18446744073265055750) [ 438.222836][T16694] bond0: option arp_interval: allowed values 0 - 2147483647 [ 438.290615][T16698] bond0: option arp_interval: invalid value (18446744073265055750) [ 438.298572][T16698] bond0: option arp_interval: allowed values 0 - 2147483647 [ 438.427053][T16704] loop3: detected capacity change from 0 to 1024 [ 438.446036][T16704] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 438.457011][T16704] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 438.500571][T16704] JBD2: no valid journal superblock found [ 438.506431][T16704] EXT4-fs (loop3): Could not load journal inode [ 438.798744][ T3414] IPVS: starting estimator thread 0... [ 439.260462][T16715] lo speed is unknown, defaulting to 1000 [ 439.267368][T16715] wg1 speed is unknown, defaulting to 1000 [ 439.411288][T16715] lo speed is unknown, defaulting to 1000 [ 439.549098][T16715] lo speed is unknown, defaulting to 1000 [ 439.800711][T16712] IPVS: using max 2352 ests per chain, 117600 per kthread [ 440.089982][T16720] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2824'. [ 440.140328][T16720] 1ªX¹¦À: left allmulticast mode [ 440.225522][T16721] xt_CT: You must specify a L4 protocol and not use inversions on it [ 440.331707][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 440.331722][ T29] audit: type=1326 audit(2000000184.985:40727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16722 comm="syz.2.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 440.361674][ T29] audit: type=1326 audit(2000000184.985:40728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16722 comm="syz.2.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 440.415760][T16387] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.446329][ T29] audit: type=1326 audit(2000000185.058:40729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16722 comm="syz.2.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 440.470164][ T29] audit: type=1326 audit(2000000185.069:40730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16722 comm="syz.2.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 440.493820][ T29] audit: type=1326 audit(2000000185.090:40731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16722 comm="syz.2.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 440.517515][ T29] audit: type=1326 audit(2000000185.090:40732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16722 comm="syz.2.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 440.541231][ T29] audit: type=1326 audit(2000000185.090:40733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16722 comm="syz.2.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 440.564867][ T29] audit: type=1326 audit(2000000185.090:40734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16722 comm="syz.2.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 440.588592][ T29] audit: type=1326 audit(2000000185.100:40735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16722 comm="syz.2.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 440.612247][ T29] audit: type=1326 audit(2000000185.111:40736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16722 comm="syz.2.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff474bdf6c9 code=0x7ffc0000 [ 440.812393][T16738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2831'. [ 440.822335][T16739] loop7: detected capacity change from 0 to 512 [ 440.838312][T16740] loop2: detected capacity change from 0 to 2048 [ 440.874630][T16740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.898232][T16739] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.927712][T16747] warn_alloc: 2 callbacks suppressed [ 440.927736][T16747] syz.5.2832: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 440.947712][T16747] CPU: 1 UID: 0 PID: 16747 Comm: syz.5.2832 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 440.947820][T16747] Tainted: [W]=WARN [ 440.947827][T16747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 440.947839][T16747] Call Trace: [ 440.947847][T16747] [ 440.947856][T16747] __dump_stack+0x1d/0x30 [ 440.947883][T16747] dump_stack_lvl+0xe8/0x140 [ 440.947920][T16747] dump_stack+0x15/0x1b [ 440.947938][T16747] warn_alloc+0x12b/0x1a0 [ 440.948020][T16747] __vmalloc_node_range_noprof+0x9d/0xed0 [ 440.948060][T16747] ? x2apic_send_IPI_self+0x10/0x20 [ 440.948096][T16747] ? arch_irq_work_raise+0x46/0x50 [ 440.948118][T16747] ? __irq_work_queue_local+0x10f/0x2c0 [ 440.948243][T16747] ? __rcu_read_unlock+0x4f/0x70 [ 440.948274][T16747] ? avc_has_perm_noaudit+0x1b1/0x200 [ 440.948298][T16747] vmalloc_user_noprof+0x7d/0xb0 [ 440.948424][T16747] ? xskq_create+0x80/0xe0 [ 440.948470][T16747] xskq_create+0x80/0xe0 [ 440.948495][T16747] xsk_init_queue+0x95/0xf0 [ 440.948553][T16747] xsk_setsockopt+0x3f5/0x640 [ 440.948640][T16747] ? __pfx_xsk_setsockopt+0x10/0x10 [ 440.948661][T16747] __sys_setsockopt+0x184/0x200 [ 440.948744][T16747] __x64_sys_setsockopt+0x64/0x80 [ 440.948803][T16747] x64_sys_call+0x20ec/0x3000 [ 440.948827][T16747] do_syscall_64+0xd2/0x200 [ 440.948846][T16747] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 440.948903][T16747] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 440.948939][T16747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.948959][T16747] RIP: 0033:0x7fc5e67cf6c9 [ 440.948975][T16747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.948992][T16747] RSP: 002b:00007fc5e522f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 440.949035][T16747] RAX: ffffffffffffffda RBX: 00007fc5e6a25fa0 RCX: 00007fc5e67cf6c9 [ 440.949052][T16747] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 440.949067][T16747] RBP: 00007fc5e6851f91 R08: 0000000000000004 R09: 0000000000000000 [ 440.949079][T16747] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.949091][T16747] R13: 00007fc5e6a26038 R14: 00007fc5e6a25fa0 R15: 00007ffdd9f8dc68 [ 440.949192][T16747] [ 440.949200][T16747] Mem-Info: [ 440.965343][T16739] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.974671][T16747] active_anon:11790 inactive_anon:33858 isolated_anon:0 [ 440.974671][T16747] active_file:6832 inactive_file:16545 isolated_file:0 [ 440.974671][T16747] unevictable:7 dirty:448 writeback:0 [ 440.974671][T16747] slab_reclaimable:4291 slab_unreclaimable:93862 [ 440.974671][T16747] mapped:30102 shmem:33958 pagetables:2982 [ 440.974671][T16747] sec_pagetables:0 bounce:0 [ 440.974671][T16747] kernel_misc_reclaimable:0 [ 440.974671][T16747] free:1673448 free_pcp:19850 free_cma:0 [ 441.230100][T16747] Node 0 active_anon:47276kB inactive_anon:135432kB active_file:27328kB inactive_file:66760kB unevictable:28kB isolated(anon):0kB isolated(file):0kB mapped:120524kB dirty:1792kB writeback:0kB shmem:135832kB kernel_stack:5344kB pagetables:12044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 441.230210][T16747] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 441.230269][T16747] lowmem_reserve[]: 0 2881 7859 7859 [ 441.230314][T16747] Node 0 DMA32 free:2946624kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 441.230376][T16747] lowmem_reserve[]: 0 0 4978 4978 [ 441.230402][T16747] Node 0 Normal free:3731808kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47276kB inactive_anon:135432kB active_file:27328kB inactive_file:66760kB unevictable:28kB writepending:1792kB zspages:0kB present:5242880kB managed:5098240kB mlocked:116kB bounce:0kB free_pcp:74740kB local_pcp:15972kB free_cma:0kB [ 441.230537][T16747] lowmem_reserve[]: 0 0 0 0 [ 441.230563][T16747] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 441.230746][T16747] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946624kB [ 441.231044][T16747] Node 0 Normal: 1234*4kB (UME) 733*8kB (UME) 1539*16kB (UME) 1560*32kB (UME) 1032*64kB (UME) 806*128kB (UME) 683*256kB (UME) 560*512kB (UME) 543*1024kB (UME) 149*2048kB (UME) 526*4096kB (UM) = 3731808kB [ 441.231445][T16747] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 441.231498][T16747] 57472 total pagecache pages [ 441.231505][T16747] 12 pages in swap cache [ 441.231512][T16747] Free swap = 4152kB [ 441.231519][T16747] Total swap = 124996kB [ 441.231527][T16747] 2097051 pages RAM [ 441.231533][T16747] 0 pages HighMem/MovableOnly [ 441.231539][T16747] 81087 pages reserved [ 441.389667][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.444964][T16757] loop3: detected capacity change from 0 to 512 [ 441.450970][T16387] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.477696][T16758] loop5: detected capacity change from 0 to 512 [ 441.523911][T16758] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.2837: EA inode hash validation failed [ 441.537515][T16758] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.2837: corrupted inode contents [ 441.553572][T16758] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #15: comm syz.5.2837: mark_inode_dirty error [ 441.575143][T16758] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.2837: corrupted inode contents [ 441.589870][T16758] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2996: inode #15: comm syz.5.2837: mark_inode_dirty error [ 441.602287][T16758] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.2837: mark inode dirty (error -117) [ 441.616139][T16758] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 441.618660][T16757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.626110][T16758] EXT4-fs (loop5): 1 orphan inode deleted [ 441.637831][T16757] ext4 filesystem being mounted at /576/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.657420][T16771] loop2: detected capacity change from 0 to 1024 [ 441.666914][T16771] EXT4-fs: Ignoring removed orlov option [ 441.683276][T16758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.697535][T16771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.746899][T16762] ================================================================== [ 441.755011][T16762] BUG: KCSAN: data-race in shmem_fallocate / shmem_fault [ 441.762049][T16762] [ 441.764376][T16762] write to 0xffff888104b2da18 of 8 bytes by task 16769 on cpu 1: [ 441.772101][T16762] shmem_fallocate+0x301/0x840 [ 441.776904][T16762] vfs_fallocate+0x3b6/0x400 [ 441.781511][T16762] madvise_vma_behavior+0x1920/0x1cf0 [ 441.786911][T16762] madvise_do_behavior+0x5b7/0x970 [ 441.792060][T16762] do_madvise+0x10e/0x190 [ 441.796432][T16762] __x64_sys_madvise+0x64/0x80 [ 441.801225][T16762] x64_sys_call+0x1f1a/0x3000 [ 441.805914][T16762] do_syscall_64+0xd2/0x200 [ 441.810443][T16762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.816445][T16762] [ 441.818792][T16762] read to 0xffff888104b2da18 of 8 bytes by task 16762 on cpu 0: [ 441.826429][T16762] shmem_fault+0x90/0x250 [ 441.830823][T16762] __do_fault+0xbc/0x200 [ 441.835168][T16762] handle_mm_fault+0xf78/0x2be0 [ 441.840055][T16762] __get_user_pages+0x102a/0x1ed0 [ 441.845162][T16762] __mm_populate+0x243/0x3a0 [ 441.849754][T16762] vm_mmap_pgoff+0x232/0x2e0 [ 441.854352][T16762] ksys_mmap_pgoff+0xc2/0x310 [ 441.859022][T16762] x64_sys_call+0x14a3/0x3000 [ 441.863696][T16762] do_syscall_64+0xd2/0x200 [ 441.868280][T16762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.874174][T16762] [ 441.876571][T16762] value changed: 0xffffc900072c3b58 -> 0x0000000000000000 [ 441.883667][T16762] [ 441.885980][T16762] Reported by Kernel Concurrency Sanitizer on: [ 441.892121][T16762] CPU: 0 UID: 0 PID: 16762 Comm: syz.7.2834 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 441.903576][T16762] Tainted: [W]=WARN [ 441.907367][T16762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 441.917413][T16762] ================================================================== [ 441.982896][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.991912][ T5149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.039054][T16762] loop7: detected capacity change from 0 to 512 [ 442.179261][T16762] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.2834: bad orphan inode 11862016 [ 442.190724][T16762] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 442.204520][T16762] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.786718][T16780] lo speed is unknown, defaulting to 1000 [ 442.798743][T16780] wg1 speed is unknown, defaulting to 1000 [ 443.576676][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.587655][T16387] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 443.675215][ T12] dvmrp1 (unregistering): left allmulticast mode [ 443.684131][ T12] bond1 (unregistering): (slave geneve2): Releasing active interface [ 443.831774][ T12] $Hÿ (unregistering): Released all slaves [ 443.840767][ T12] bond1 (unregistering): Released all slaves [ 443.850411][ T12] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 443.858751][ T12] wireguard0: left promiscuous mode [ 443.864746][ T12] bond2 (unregistering): (slave wireguard1): Releasing backup interface [ 443.873489][ T12] bond2 (unregistering): Released all slaves [ 443.883187][ T12] bond0 (unregistering): Released all slaves [ 443.891672][ T3387] syb2: Port: 1 Link DOWN [ 444.107098][T16780] lo speed is unknown, defaulting to 1000 [ 444.583094][T16780] lo speed is unknown, defaulting to 1000 [ 444.720200][ T12] tipc: Disabling bearer [ 444.725223][ T12] tipc: Left network mode [ 444.855358][ T12] hsr_slave_0: left promiscuous mode [ 444.881932][ T12] hsr_slave_1: left promiscuous mode [ 444.948440][ T49] smc: removing ib device syz! [ 444.962036][T11226] smc: removing ib device syû [ 445.412718][ T12] IPVS: stop unused estimator thread 0...