last executing test programs: 4m0.048807049s ago: executing program 32 (id=105): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 3m47.294028831s ago: executing program 33 (id=305): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000400000000b70800230000e7057b8af8ff00000000bfa20000d67a000007020000f8ffffffb7c60008080000b704000000000000850000001600000095c80860ec8def"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x7400}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0xffffffffffffff38) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001}, 0x0, 0x0, 0x0, 0x7, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xfffffef4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f0000000040)=r4}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) 3m43.411429021s ago: executing program 34 (id=350): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2b0, &(0x7f00000015c0)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r1, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000002018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10064, 0x13033}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x8}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044895}, 0x0) r9 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x1}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x40, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000180), &(0x7f00000001c0)=r9}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) getpgid(0x0) sendto$packet(r6, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x18) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) 3m40.052926297s ago: executing program 35 (id=372): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="620ac4ff0000000071104a000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES32=r0], 0xfe33) recvmsg(r2, &(0x7f00000000c0), 0x40002022) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x20000000000000b1, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000040000181120009bbcfaf70e1b3345e86709cdf20176a6f3d8f163a3249f14954ced8c55e52428bc9a9f28205506839262edc551200b46a5cd107a4e0950d0d4871a0f597b40e2df2cecacfe2a175c7d5e81a02b41c97b6c9975a29f7b8927025160961ae14c9d8db24e604e9d0caf882f379c62ff84624293bd3db0fbbd624286211b166e13c2196fc6857ccf0a269f2f2d4a075ab1485c1cf206a240ea121eed7fd067f35c86f21fe3e374ce4d343049f6eb80c67321ef60282334fe678d32ff96d536b8dc34e9ce7d29d654aacc544041cfc6027add106d5011d3386f90ad704d5eefb9", @ANYRES32=r1, @ANYRESOCT], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = msgget$private(0x0, 0x790) msgsnd(r5, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x10001, 0x80) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x2080c1) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r8}, 0x10) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCGPGRP(r9, 0x5437, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x20000, {0x2a00, 0x80010000, 0x0, 0x2, 0x20000002, 0x0, 0x0, 0xb, 0x30, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe1085975480900000500c11d0000000000000000b420a1a93c5240e44f819e01177d3d8dd4992861ac0000001be200", "f4bd000000801900", [0x0, 0x22000000000001]}}) msgrcv(0x0, 0x0, 0x36, 0x3, 0x2000) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000280)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0x0, 0x40, 0x2, 0x2, 0x7, 0x10001, 0xfffc, 0x0, 0x40}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r11 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001900010005fe020001000000000000000000000000000000924f5ebab1dd3b38b3b256be53896db7df6db4afbf35fb9be35895815b791f0ab4a5f5bf8bfbf31b5e181c272453579a7b8f2498c0a278f00862df390201dd2007f2ee0e133f28150760475cf67bcf37b07ee3b1040624e9e0179799d352920680cf0837929e12728f9c4e4c09b32d3aa2c52fac738b49aedd170ea2bd5733e58230ce9e45ad000f9f7fd3edd9ff3be61a65c38a00e151f0a7da52f60da1da851438fc44a0972f22a746e31a2de818e652734161231744a40ff009b6e6d2a61297b174"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) add_key(&(0x7f0000000480)='asymmetric\x00', 0x0, &(0x7f00000007c0)="10", 0x1, r11) 3m35.113759694s ago: executing program 36 (id=424): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x0) (async) statfs(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000eb03"], 0x14}}, 0x4008840) r2 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x80000000}, 0xc) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000280)=0x16, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) (async) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) (async) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) recvmmsg(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/221, 0xdd}, {&(0x7f00000004c0)=""/93, 0x5d}], 0x2, &(0x7f0000000300)=""/50, 0x32}, 0x8}, {{&(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000005c0)=""/43, 0x2b}, {&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/234, 0xea}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/116, 0x74}, {&(0x7f0000000940)=""/235, 0xeb}], 0x7}, 0x10001}], 0x2, 0x2001, &(0x7f0000000b40)={0x0, 0x989680}) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x3}, 0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) (async) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x80044940, &(0x7f0000001b00)) (async) ppoll(&(0x7f0000000000)=[{r6, 0x88}], 0x1, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) (async) fsetxattr$security_selinux(r4, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001200010300000000000000000000000217c1200002000000000000000000000000000000030000000700"/56, @ANYRES32=0x0, @ANYBLOB="000000000000000700000000000000000800030011"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) lstat(&(0x7f0000002000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000180)) 3m29.071112622s ago: executing program 37 (id=492): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x7f, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x7ffffefc, 0x3, 0xfffffffffffffffe, 0x0, 0x4000, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x9) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x1000000000000}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES32, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', 0x1008489, &(0x7f0000000100)=ANY=[@ANYBLOB='nodots,showexec,codevage=865,dos1xfloppy,\x00'], 0x41, 0x11ed, &(0x7f0000002440)="$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") 3m28.881857978s ago: executing program 38 (id=496): setfsgid(0xee01) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x210804, &(0x7f00000000c0)={'trans=unix,', {[{@access_client}], [{@smackfsroot={'smackfsroot', 0x3d, '@\''}}, {@obj_role={'obj_role', 0x3d, '\'))\'$'}}, {@measure}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@dont_measure}]}}) 3m22.42183771s ago: executing program 39 (id=552): rt_sigsuspend(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000070000000000000000000000000000000000000000b8d3f74cffa3f33506e0fb104b66386c548d79689a321f95f27629f1b4e459305329ba4d9c89999b994ea4af8af47104155f6bf84a3108b560204fadd625fe70457ba4af13cc76f52520dc54cc4f284b94881be0bdb119b4ab43e3feb37b7e1caaf31e5a3e67a18aeeee4b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m18.812934408s ago: executing program 40 (id=589): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa3) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 3m17.024417905s ago: executing program 41 (id=604): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x7fffffff, 0xfff, 0x7, 0x2c40}, 0x50) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000540)={{0x85, 0x48}, 'port1\x00', 0xa2, 0x1, 0x6, 0x101, 0x1200, 0xfffffff7, 0x0, 0x0, 0x6, 0x4}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 3m15.375193751s ago: executing program 42 (id=615): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="021800001c000000000000000000000005000500000000000a00000000000000fe8000000000000000000000200000aa00000000000000000800120000000000000000000000000006000000000000000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000008001900", @ANYRES64], 0xe0}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) migrate_pages(0x0, 0x4421, &(0x7f00000003c0)=0x8ff, &(0x7f0000000400)=0x80000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x8000000000000}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000001540)='GPL\x00', 0x4, 0x9d, &(0x7f0000001580)=""/157, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000016c0)={0x1, 0xd, 0x7fffffff, 0xc}, 0x10, 0xde20, r4, 0x3, 0x0, &(0x7f0000001740)=[{0x2, 0x3, 0xc, 0x1}, {0x0, 0x2, 0x4, 0x2}, {0x1, 0x3, 0x5, 0x9}], 0x10, 0x80000001}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) socket(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) gettid() timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x5f}, 0x18) eventfd2(0xce77, 0x800) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000083c0)={{0x1}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) 3m9.31750368s ago: executing program 43 (id=654): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = geteuid() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21081e, &(0x7f0000000540)={[{@discard}, {@noauto_da_alloc}, {@quota}, {@stripe={'stripe', 0x3d, 0x6}}, {@jqfmt_vfsold}], [{@subj_role={'subj_role', 0x3d, 'ext4\x00'}}, {@euid_eq={'euid', 0x3d, r3}}, {@smackfsroot={'smackfsroot', 0x3d, '#}\xe7+'}}]}, 0xfd, 0x4ff, &(0x7f0000000ac0)="$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") unlink(&(0x7f0000000180)='./file1\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f00000004c0)='./file0\x00', 0x4000c5d) close_range(r4, 0xffffffffffffffff, 0x0) 2m58.565454526s ago: executing program 44 (id=753): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe17, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x4092}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") 2m55.984270719s ago: executing program 45 (id=771): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe00181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2m48.887616063s ago: executing program 46 (id=814): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r1, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 2m47.752212687s ago: executing program 47 (id=821): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_robust_list(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x1, 0x6, @local}, 0x10) r1 = gettid() mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000007, 0x12, r0, 0x825bb000) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000004c0)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xffe0000, @remote, 0xeedc}, r2}}, 0x30) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x200000003000000) 2m45.677399238s ago: executing program 48 (id=833): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000080)={[{@dioread_lock}, {@nobh}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nodiscard}]}, 0x2, 0x5ad, &(0x7f0000000180)="$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") 2m32.084346058s ago: executing program 49 (id=939): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) fsetxattr$security_capability(r2, &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x2, 0xd}, {0x1}]}, 0x18, 0x3) 2m30.6058275s ago: executing program 50 (id=948): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@grpquota}, {@errors_remount}, {@block_validity}, {@grpjquota}]}, 0x3, 0x45b, &(0x7f00000010c0)="$eJzs281rHOUfAPDvTJL217dfYq0vfVGjVQy+JE1atQcvioIHBcFLPcYkLbXbRpoIthStIvUoBcGjeBT8CzzpRdST4FXvUijSi9XTyuzOdF+6u0nTTabNfj4w2eeZeWbn+c4zz+4z82QDGFjj2Z8kYmdE/B4Ro/Vsa4Hx+sv1axfm/rl2YS6JavWtv5Jaub+vXZgrihb77cgzE2lE+mkS+zscd+nc+VOzlcrC2Tw/tXz6vamlc+efPXl69sTCiYUzM0ePHjk8/cLzM8/1Jc57srru+3DxwN7X3r78xtyxy+/8/G1SxN8WR5+M99r4RLXa58OVa1dTOhlexQ5D61gZVi1rhqy5Rmr9fzSGotF4o/HqJ6VWDlhX1VyXzRerwCaWRNk1AMpRfNFn97/FsnGjj/Jdfal+A5TFfT1f6luGI83LjLTd3/bTeEQcu/jvV9kS6/McAgCgxffZ+OeZTuO/NO5vKvf/2FqbGxrL51J2R8S9EbEnIu6LqJV9ICIe7HSQHhMC7ZMkN49/0itrj25l2fjvxXxuq3X8V4z+Ymwoz+2qxT+SHD9ZWThUOycREzGyNctP9zjGD6/89nm3bc3jv2zJjl+MBfN6XBne2rrP/Ozy7O3E3OzqxxH7hjvFn9yYCUgiYm9E7FvjMU4+9c2BbttWjr+H1cwzraD6dcST9fa/GG3xF5Le85NT/4vKwqGp4qq42S+/Xnqz2/FvK/4+yNp/e8fr/0b8Y0nzfO3Srbx7vXdf+uOzrvc0k2u6/hsrtuSvH8wuL5+djtiSvF6vdPP6mca+Rb4on8U/cbBz/98djTOxPyKyi/ihiHg4Ih7Jo3s0Ih6LiIM9zsJPLz/+bq8zVHb7z7e1/1hrkbb2byS2RPuazomhUz9+1/qOjeTqPv+O1FIT+Zra59+XveNaTb1u9WoGAACAu1UaETsjSSdvpNN0crL+P/x7YntaWVxafvr44vtn5uu/ERiLkbR40jXa9Dx0Or+tL/IzbfnD+XPjL4a21fKTc4uV+bKDhwG3o0v/z/zpNxqw+fVhHg24S+n/MLj0fxhc+j8Mrg79f1sZ9QA2Xqfv/49KqAew8dr6v2k/GCDu/2Fw6f8wuJr7f1JiPYANtbQtVv6R/GZIVKvV6h1Qjc2TiPSOqEZ/Esk694KdZQd464myP5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6478AAAD//+Jk61o=") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r1, &(0x7f0000000080)='./mnt\x00', r1, &(0x7f0000000100)='./mnt\x00') io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4, 0x0, 0x8}, 0x18) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000407be0510000000653533c8dd2b1c2a02b1e5259caba9792ab5a8731b183f4b88e448296b83f12dae7306b9061a938b07dfe56c7acdcfc71294057a84b88d650d06a802969e7df422e40cd65365b6dc2ef51b0d0e86e3dd3b7559c693c001f4991b201a91393a93f43200cb2a68e57adacf5af7da653e492f640c46782daeb68655a46f80cbae807bf6694ec84ea09556dacb74c36b3bd3368a5e9eeb0ff4a9c7f476ea0ef1c699f54bc8de52c9fb378cb25a8b7260aa4ba547996"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1, 0x0, r5, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) 2m26.95844035s ago: executing program 51 (id=975): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES16=0x0, @ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00'}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000980)={0x0, @broadcast, @private}, &(0x7f0000000a00)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000a40)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x7fffffff, 0x2, {{0x36, 0x4, 0x1, 0x6, 0xd8, 0x67, 0x0, 0x9, 0x4, 0x0, @local, @multicast1, {[@cipso={0x86, 0x6c, 0xffffffffffffffff, [{0x5, 0xf, "41535fdd4347c5c4b3fd71a95a"}, {0x6, 0x2}, {0x5, 0xc, "0dcb8a73a4374f29fc60"}, {0x0, 0x4, "0bfa"}, {0x1, 0xd, "ea4af963f86540aaf91927"}, {0x5, 0x8, "796e3c135f3b"}, {0x1, 0x10, "60fc2e84c93f32380a625f273a5d"}, {0x0, 0x10, "793f0c2ca70514a77953c26e067a"}, {0x7, 0x9, "4bab582f681196"}, {0x2, 0x7, "233c07c172"}]}, @timestamp_addr={0x44, 0x54, 0x50, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@broadcast, 0xfffffff4}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@private=0xa010102, 0xffff}, {@loopback, 0xfffffff7}, {@broadcast, 0x31a1}, {@rand_addr=0x64010101, 0x101}, {@broadcast, 0x1}, {@multicast2, 0x8}]}, @ra={0x94, 0x4}]}}}}}) socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001180)={0x0, 0x2, 0xe41, 0x10000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x14022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x4, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 2m23.284079113s ago: executing program 52 (id=1022): r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, &(0x7f0000000080)) 2m20.608525624s ago: executing program 53 (id=1059): r0 = gettid() r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x3, 0x5004) r2 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x10a000, 0x2000, 0x1000, 0x5}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x9}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32=r7, @ANYBLOB="0600"], 0x44}}, 0x0) sched_getattr(r0, &(0x7f0000000340)={0x38}, 0x38, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x5, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="c9e2975d3ef5bdd59dd159e5011b2455375f26bbcf0a4f1fcd8f027c87d5207a4e0c0081f180f68db9777c968341ac5c73acacc44c726286e944353f73bba241a8315a9d0fe5e26a1b565fff89b6046e8ffadc3c6b0af0c2fc1e4e2fef6ceba4553402562f6899433b236ed8daa32a30387cd554b0", @ANYBLOB="b1a79d986ec7b4338181e9378fd3acf13de1a63eed6384d13c8802d87430f1eb2f79d8294847d67154cb199d3b9eb230b4fd", @ANYRES16=r3, @ANYBLOB="cfe037acb9af5ec1a8d78cde8b0b3623ea0ef8cd178c5b104cc9ddf06009745447646c61b9e4c5aab1d96d0ab1287ce40ff1873c854bdbc4afd423d95a50256ef2c684e065c50448eb64c39f6506d1b5883a4a39c8f1acbc", @ANYRES8, @ANYRES16, @ANYRESHEX=r8], 0x0, 0x16, 0x0, 0x0, 0x0, 0x9, '\x00', r7, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x18) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000019c0)=ANY=[@ANYRES8=r2, @ANYBLOB="a4ffadc9753a3cb831074dccaa9dc3bece2200d13f149607f80678bcaa25f345518a3fbd4f2bb823a550701f2bb0180e1ad8d85ed5c01a6ffb3b0a059b167663cd988a40c70c10ec2aa1144fccc3cd85a8fc2821726256c104c752371239b956efa9b9b877e3fc85fd926ca84c349fd46f5ef135dd8f17f9d3ba8f67028255e062e39715e031af020a31726e6c312c21e3dc8e32471d9c8672dca5e52dd63c378c462ed8dde7f5958baee427c0bf6f393c7a4c98d06dfef4945a8e4e83dccec25498e6578da494a89cfdf4a81b4bcca96f6b57a8639f937a7cc0d48964319c83790fe612852860e350cf2924e541c11442628d827f212548cb9337a12fbf050c224bed4db0ae78b089284e800af819e37c8f4563ab3c3464e8d4228011d802ce00a79815b6a844e3db582d4b4581d5fbc55f7e8daf6d552961e6b73a473a5c6399b026d39672fba931fa15617e0859b808586d9db5c11fe52c3fbcab68a01b3538f8be6369b6d0388109d9732a4a9b484ee746dcff4e774f6362fb1da4b6d02edbb1ef8f9f46afda14e99f13be9561d4ba9c5380e29f13537f5106262432db7fb27d4a9942b00483edb1d471beabd516ae60116cab0dcb639a958f9c23943774f0e6c2338cf3012941f4a20ecb9f7aae48952307502599eee0ef94e691f8ddd652a6e1cfa3701f8ac36ac715b2fa2e6f74385f2844685e4e55eafcb73ca59135f4a6c0d06a4dffae6d018f339ea418d6932b1ff0e165f5da0937c21749014654942f565f1812961a2a6553783c3c2a3d7db738b42bdd7231032dfbf37aa45316f9636cc2572ce5482dbe25e29f12f4988e56c03af85e026aaad5cbcc998c8ffeb7b521e3d7f17a50ec7a0c66492b5fe95738cafe78ffbdc83ffac684991d8fedd28da59507b8721da0d48227cebdc4ea06b40fc54fbab6ab161eef3b2a35f82e6c45dd1a8cf38c3df593a0d2eaf2b8847cda9ebcfb9872084b3fe9e6ab7802c5bf6718884fa892c9f6063edbd0c269a7d2e21b9fc3a3ecd5e3d15ca5912080dd91e0aa04390028a420535d0118be19c1b3e1d929ec3ff791676850f5ebef32bab6a3113d0f3afeeafd3912bd77abdfcdaf413e903e68429409fb4f120f6c676c6f7983ad94750d92d8fde0dd6215aab5bfecd7baffab8c13dbfeefb7a9d8bfa44d63cabedd8bc1c3002d51e1343bb8957986e5ece47d75b1db645f54a1a51e17e37ca471e9710e8b92f956d6c5b3700c8dfd18cd200c5662250ffb1d3e4bfa5f91f04d80a7bde299216c450b056e18554d511b54025de1d304570ec9612b205d9b2c87a5384b63e7a62b7f6e4484ed0086dae392dcacd8b87cb13f09730527f07c3b3e0773ccd0f41124b3133146c050ac054418d7c7f7f62cf124e291a0f04458c271bbe5737e01be83e51a3bf2f53b79e4618da34c54a7f626798234f43ecc3ffd7a1bdaf0c3e4433bda0ea1c105e01ac70fbd4adb9d98808cd53652af1fd0b37274cb843f918488ac0a1bb28a1bb0019281d4d22e64ee816de472d640ecfd5ba1bb7a2a1e364f7ea313a1b2d84833ddad8c0e263cda16aefce58e86c671ad3b39574f3ae42be2b26a97fdf9b97bb243036d85d6df4b18c355109fd70b07053be45d31dfb62780c87987385969897717caa5795d1aeee6c71c5fc0af598511b8b9137281e8a50e92293aaedc56c3afb35b6780033ab50ebd71f819fbd382a5b6a8bdba8457fcc53388178934d3ef7f294639b707319510eed8a94c31c13392dd519b4bd04ae498caae18f2a0558bf7f86888c1759c1e951faebf0f4f3321628057ffee802f8a493b97f96474ec78baa7ddba76b34df90e242d218586a386c44833505f65dda4939fbe68a6f9bb56f2b2cf11386f70147555e4519b3c3267ac91ab96bbd4fad38441df6efc30f0019fde34cba8b922b09db8ce98ff91e492fed7eeea9c492526d750c0ba5c39669321ee7aca95b87c7934de027da76a6025eb2cc7b002fae3712416a33373b582c1c7f1129e5cdc6bca027fb7313110180dd7dbe18982051eddee1318fd94fb68eefe979ea6f8eff6998073f27edb53fb6ea72c57cc50f112c548071448becc6be00fa2cf75ddc7dbb922d52fa655d42f33816f77c7e174e9cab67c34e3afbb491681e3f9a69ea8b11ee8efd9787a1ec1b22623800dc00dd984c5c19f1c03933d34a83c63e9dc9a59e807fa7aa06d699cdcf4f6e6e52e4284410b33d74152cb46f333ca8c4b28265dd3d085c3a1f947ea00aeb5248af7abed72d3f93aff8c8e316ee191f2393a0828a2c9abbb61a2f06ebd409d5850a6997d06f4d892dc39c096c5adc6e7ab3477e6bda66426f60c0b5937479363454ed4490102e1e81e2f318611277dad9b83315fd2f391fa1509b4a1801d69ad8cc97b12bb48a59259e30a584ceb8467f0b0bfdf358bebf8a6845a6c152a38eeede0dc1bd94ceb0af07895ceadb1aa99dca22f3d2a889d18b320c9d4701bf4ff005494ee5b829b5d67ffbe5ea64b4b14f024fb63d092d2dcf49308405bcf3af76b28864ec0b012298755d0e27066818a0111fbc2e84136b9b917d716e2eb50f91e6e33971f1b901103d541591b053b309dec5fd79530e3dc237213ffd8d18566d81b720bf59e7f9eb6414fd2e1f8163de6ff94c9839281b84a4fc0b093ee3891e0b9699272dd61a41fd68e6829641e58ce04f3928c2a22fa1763dc475a0de1164611111c7a5d65ccccefc8624ce916a59bb4bfe9bf56e732845b629933a2d314696f7e04e314d200f645fab6415e52355646eb2cb073163d91eac89d5723d96e033ad5e6b7854ca555e0ebed8d04a50283a55c5650b84f68b25bd8bbbad9785a9cd786a062402cd18c69a28a9c622d925cddc05ef1db3acc8f7718cc35812dd497f543d951e3aad070f0fcf73ff36de0ef5b1e20ce33a29105db503e899dbe4ddaf324c10aef557e778583b72585bac5d6e649edb9f44a3667d80474da8b7d021112d62a8d1164c68bdfbc2a80bcca2c0481cd90f3e477f818d50202f8047924fef3d9188e44319ebbde8df458d052226d7b13519a6c58011289726b5d1f4b04861188359dbf01634de3aad07b259a2c3f6d6ee5ec002007c613d9c810010ea09c46a231bdb891e6bf138cd07ac4940c4f719820ce8fcf33a3e7b4b7f6deb7a2dbf0c3f1208905f37752808d4b1d0a85a37a20938d1cab42b2603922342167ea5058ef5d5831a16d98e4e1e9e2388713decd365894f43b41da410b23a8050fba5bd8f07ba7966d94b099d064b8bae91e8457d578643ddc5054cb5c112278e25ac0cc76f86db93e93099baafef033379af00a304e4aa808099e4159f4d21985bb1a6bd4a56f5451b2362637aac0269f6d270c75a6bc60ee595a942018f9bbb336548bcf8d41060eff4de8b77369798e7a36fab6c159c5feebb692f470dfa9c97190a112326d2b7e5cd653e28e71994fe8f1e5e81d65819c25d661e383a2008b7248b27864836c9ed74916e6bac1273ff4a0301025c33e70db367fc320bfb25675c5b8040afd2f34ef0a3150dd1c153785a6ce834f1c43831d57549adb9b2c345196b5979bf0f2e878327bc2860b4bc6029e0f42afb43f6325c8fa7d148cb54cf0835cd21a6c66f43287d5f74c81fa3a66004704a0efbed4ff7e783628879228ec585a3d8dfdb0e332313fb9ea16c77a66001d22c7b0bd22f0eee25664d8688ed37276ab938f7679957341ccf65600ace298dac9c680a921e1294ef36d2cedfb37626ae5c78a66305f49568b600b679ca39173ac9dc0e49813da9e27401127c7696d5abbc1b1af447570394a1af59a6ea057da8ecc27b861e535dac7bd19ee9b61fac70f762fca472805928b643f6c2d8ff315436c49fb64b7ac4c18debf3a4c3de879489f69f5dc2cbac3741bf011d4c4f0d90a9e76553046797c9daefc6719bd962f04210f1ea6d00001251501365874be059a849b11faaf8c0b43d3871aeb63484041ff674626233855cbf7d820c19c621b7ca0a93c9997193b8cee2b389c1656c4392529f4b14c52ff0581459217cb6779edcaa9a9f395936b61ed0c7db1cabff07b7bf8512bbad4cfcc399c5f7c6da1a8cf3f87cbb854d67e6474fb66ba08ba8956715dee3ed17afab2ab27150b808e38e24a0467b7852aa668add8eec25d6f086b1957fe77a1ae849c177448c2b7749ea90569bab9e3b7ca2d1c337b56890b2c7ffe20796a980c6c8588e3b95cc26d6f6ecbd61d23a2bc25ab851ff3a3811ac3a3847357fbb2a063c081584eb583379e3ba26567e092bfae3354c4ba826565030b77c9f5b107995c0b0f474c4f0ba27f4d69a2ac447c31e384c7168ca9a12636691ef03ae843c572c605fbc60f8c945866043ed8225ca2fb768aaa2f96875466257ad0dd2ca3c96a18a80362be42e4d9145568ad1108a0ecdba1ad79e3ae81fe14ddbd9221251155f16d39d37f50da019f30ba5c77f4b551e358efe95000c973c33ca57cfd3f29cdcbe66e36ccbb4fbf29452f31edbd49b0223a3d500263dacbc5e0fbe799e8c5e3917e745254c27b92cf1bd779ef658405e97580031b342e2032397be34f2c2583c0831de05eee63d5f200a8425a94e6ffdab275def0be2d5337f832077c6cf84785b6ecbc9635f4c76164680b6bd550c7a4d1a91fb823ddf35fec52aadd51cc09c829ee335bd93ff3cf322f2bdae6e2611924fde2ad4ad2b2f67c33ead4490fbd47c334431c9db769a3b21a55f1958fde5186404804f706ddf8cffa1b05dc201717679c7ff387605f059ccf0124a6206718150f1d205571e8fa23730e7d120ac602dcd706eea1b41b82b0eeb742ae31552978882436c8911b010776e07faf4a8049bc79b185b21b46146c793f13167ab6bbf71e0a4c227f88e4533ae07e3fbd4f3268cd551c69dcc7966f8aee7d2c5427d19dfb261d13b3f60ec86d0234c334503e85d4fd70bcddfd5fb904333825ab8af8bcead7e81878ba464feee613d48e99aa01c7815e7ff7109e3b60e98da71260f55da5af1a063d60e0b863dfad1a5aedde18196bd72cc287f8c9a60b8e951bf926fca544bc6706bff2f0ab9ac4e75367e9fcdd59a51bb9417dcd9a568c916fba4367b6d7c436605aed160a150791f94f5fa9d4f6cb3c9641805d37daaec48b536bdc221fe4588a6cd7cf918108bd022b765f625f28c2d4be529ccfb88baff58e8d186980a814d81e3a73ead7fa0720f85a253f97b1ca21f7203fe0983d22abc00bf4eb0f39da1941c0e44aa5e3dd81935ebf5adc4d31fc93de4d004ce91f2c98f0e0e2b0039d68f1a55301ab138e8245950a707b77f8145326c824e4f6e91518a82e6e25fd3930a0390535027361f3777166f3b69238d7a1ff7581dca35d85b1d3e852c9e4384abcf19923f9d2528aa4de6ab0f97295990d7cb7325245311f43625f1b359f054cf4c174adf638b319dc7d43dd0333203cf8bf9a32062eaae62d195fdbce18d36ff03aafd417c384d9f47130234d0cb9fec1bf562175eb58589d2008c98c19a92ff62ed207142c7ace547d5a0f7df9244c5a9f06fb6c68ea1f1b50744210a9fb75ca3b8687a4019a6d3c52c15c851d5f7d7bd054c8db6c8ae5717e9b6d448fb7a719c71a5ae5745d39c328a873df969a391ede90e56e4b044499a96edc7a32bf1af7b7525b7e5ef4e52f75c8e6d052b8b9eba1930a435a45e4acbe1d2fa7430814165a9da9a394406a5fd421dff3d8197f440db3444919ee18ae6f8f713fd911c0bcf53a56ff1c60acb719a03d6e33c100e02b7b88a12626795b41da91cd"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=r10, @ANYRESHEX=r11, @ANYRES8=r1], 0x58}, 0x1, 0x0, 0x0, 0x85}, 0x40000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r10, &(0x7f0000000640)=""/4113, 0x1011) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000001880)=ANY=[@ANYBLOB="6240e56eb06e5903109f10ab45e1542247", @ANYRES16=0x0, @ANYBLOB="020029bd7000fedbdf2516000000180004801400078008000200ffffffffd8250400060000001800078008000200040000000c000300810000000000000050000280080001000700000008000200070000000800010005000000080002000000000014000380080002000100000008000200ce060000040004000400040008000200050000000400040004000400200002800800020000f8ffff0400038008000100000001000800020000020000f7ff0780080002000400000008000100000000000800010004000000080001000e0000000c0003000200000000000000", @ANYRESHEX=r7, @ANYBLOB="475ed3c3e5b082dc0e3b4fdff2659d5d2ffb59bf8d6e8f721f881e94b441a8", @ANYRES8], 0xe4}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2m14.527920265s ago: executing program 2 (id=1115): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 2m14.396278586s ago: executing program 2 (id=1116): r0 = socket$unix(0x1, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1b, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x18) removexattr(0x0, 0x0) bind$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000104e95463160000000000000000000f0500010001"], 0x1c}}, 0x54) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000000000)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3}}, 0x10, 0x0}, 0x10050) close(r3) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) mq_open(&(0x7f0000000180)='GPL\x00', 0x40, 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x1000, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x2, r5, &(0x7f0000000040)="0100ffff0000", 0x6}]) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 2m14.233023199s ago: executing program 2 (id=1118): r0 = syz_open_dev$usbfs(0x0, 0x800000001fd, 0x82) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x5, 0x2000, 0x0, 0x3, 0x0}) 2m14.09236093s ago: executing program 2 (id=1121): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000005000)=""/120, 0x78}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = dup3(r2, r1, 0x80000) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x410, &(0x7f0000000140)=ANY=[@ANYBLOB="696f636861727365743d61736369692c636865636b3d7374726963742c008dc72788a4fd1d7a9e96f5af8b1e45accead19436f26d694969a11ba75120b4d62f34885979931a363c752e585ec3604e30dbe2a796fc821132b494dde1c10c9dd6e964a204d3419f8429a34ad0f9eef6d8e64551e180300000043f138d74174cf31003d8e2e285a38f0c00baa5f773735f6e6eb3d29d249635d3f5317a9cd809294ebc15b04d444ccb0c1a90e8e0587fae4eefddd7e3d5c20a076101fd7f3ee5634000000000000fda9bc4dbfe77e9b101986ec88"], 0xfe, 0x340, &(0x7f0000000bc0)="$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") r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r4) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2c, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1f0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r6}, 0x10) r7 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r7, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, 0x0, 0x25, 0x10, @val=@perf_event}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000240), r8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_clone(0x630c0500, 0x0, 0x0, 0x0, 0x0, 0x0) 2m13.742955659s ago: executing program 0 (id=1124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000500)={[{@nofavordynmods}]}) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x28) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = io_uring_setup(0x678d, &(0x7f0000000340)={0x0, 0xffffffff, 0x80, 0x0, 0xf1}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, "7e12ddc5a89047bf00"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) read(r4, 0x0, 0x2006) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)) dup2(r4, r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r4, 0x4, 0x2000) r6 = getuid() setreuid(0x0, r6) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000601, r6, &(0x7f0000000080)={0xff, 0x0, 0x0, 0x1}) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) 2m13.531806557s ago: executing program 2 (id=1128): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) close(r1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='kfree\x00', r4}, 0x18) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 2m13.291645357s ago: executing program 0 (id=1134): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40086610, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00'}, 0x18) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fchown(0xffffffffffffffff, 0x0, r1) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0x0, r3, 0x1, 0x2, 0xbb, 0x7fffffff}) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2m12.850535693s ago: executing program 0 (id=1137): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)='4', 0x1}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_gettime(0x1, &(0x7f0000000000)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 2m12.803213847s ago: executing program 0 (id=1139): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000005000)=""/120, 0x78}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = dup3(r2, r1, 0x80000) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x410, &(0x7f0000000140)=ANY=[@ANYBLOB="696f636861727365743d61736369692c636865636b3d7374726963742c008dc72788a4fd1d7a9e96f5af8b1e45accead19436f26d694969a11ba75120b4d62f34885979931a363c752e585ec3604e30dbe2a796fc821132b494dde1c10c9dd6e964a204d3419f8429a34ad0f9eef6d8e64551e180300000043f138d74174cf31003d8e2e285a38f0c00baa5f773735f6e6eb3d29d249635d3f5317a9cd809294ebc15b04d444ccb0c1a90e8e0587fae4eefddd7e3d5c20a076101fd7f3ee5634000000000000fda9bc4dbfe77e9b101986ec88"], 0xfe, 0x340, &(0x7f0000000bc0)="$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") r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r4) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2c, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1f0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r6}, 0x10) r7 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r7, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, 0x0, 0x25, 0x10, @val=@perf_event}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000240), r8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_clone(0x630c0500, 0x0, 0x0, 0x0, 0x0, 0x0) 2m12.570317116s ago: executing program 0 (id=1141): rt_sigsuspend(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffff}, 0x18) socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000070000000000000000000000000000000000000000b8d3f74cffa3f33506e0fb104b66386c548d79689a321f95f27629f1b4e459305329ba4d9c89999b994ea4af8af47104155f6bf84a3108b560204fadd625fe70457ba4af13cc76f52520dc54cc4f284b94881be0bdb119b4ab43e3feb37b7e1caaf31e5a3e67a18aeeee"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m12.264514851s ago: executing program 0 (id=1143): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851160007"]) 2m12.264357131s ago: executing program 54 (id=1143): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851160007"]) 2m12.091950495s ago: executing program 2 (id=1146): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fd, 0x82) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) 2m12.03013926s ago: executing program 55 (id=1146): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fd, 0x82) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) 2m9.689276263s ago: executing program 7 (id=1162): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x5, 0xb, &(0x7f0000001280)=ANY=[@ANYRESOCT, @ANYRES32=r0], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80800, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000540)={0x10, 0x0, 0x0, 'queue1\x00', 0x72}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000e80)=ANY=[@ANYRES16, @ANYBLOB="796100000005000000007e"], 0x1c}}, 0x4004044) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7, 0x8000, 0x8, 0x0, 0x806b}) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x0) syz_io_uring_setup(0x427c, 0x0, 0x0, 0x0) clock_gettime(0xfffffff2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r7 = syz_open_pts(r0, 0x28101) r8 = dup3(r7, r0, 0x0) write$UHID_INPUT(r8, &(0x7f00000001c0)={0xa, {"08c39ee52f329f1698b1c4865f8b540a5eee9f496a0809c3d20325867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76023256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0xe00}}, 0xffffff5c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000140)={'wg0\x00'}) 2m9.320543184s ago: executing program 7 (id=1165): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000407be0510000000653533c8dd2b1c2a02b1e5259caba9792ab5a8731b183f4b88e448296b83f12dae7306b9061a938b07dfe56c7acdcfc71294057a84b88d650d06a802969e7df422e40cd65365b6dc2ef51b0d0e86e3dd3b7559c693c001f4991b201a91393a93f43200cb2a68e57adacf5af7da653e492f640c46782daeb68655a46f80cbae807bf6694ec84ea09556dacb74c36b3bd3368a5e9eeb0ff4a9c7f476ea0ef1c699f54bc8de52c9fb378cb25a8b7260aa4ba547996"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1, 0x0, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) 2m9.287993987s ago: executing program 7 (id=1166): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)='4', 0x1}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 2m9.202603793s ago: executing program 7 (id=1168): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000005000)=""/120, 0x78}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x410, &(0x7f0000000140)=ANY=[@ANYBLOB="696f636861727365743d61736369692c636865636b3d7374726963742c008dc72788a4fd1d7a9e96f5af8b1e45accead19436f26d694969a11ba75120b4d62f34885979931a363c752e585ec3604e30dbe2a796fc821132b494dde1c10c9dd6e964a204d3419f8429a34ad0f9eef6d8e64551e180300000043f138d74174cf31003d8e2e285a38f0c00baa5f773735f6e6eb3d29d249635d3f5317a9cd809294ebc15b04d444ccb0c1a90e8e0587fae4eefddd7e3d5c20a076101fd7f3ee5634000000000000fda9bc4dbfe77e9b101986ec88"], 0xfe, 0x340, &(0x7f0000000bc0)="$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") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2c, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1f0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r5}, 0x10) r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r2, 0x25, 0x10, @val=@perf_event}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000240), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_clone(0x630c0500, 0x0, 0x0, 0x0, 0x0, 0x0) 2m8.824710435s ago: executing program 7 (id=1171): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$pid(0x3, 0x0, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000000c0)="9545", 0x2, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x20}, 0x80000000}, 0x1c) r4 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)={0xa0000010}) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r3, 0x1) sendfile(r2, r2, 0x0, 0x7) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@remote, 0x7, 0x2, 0x3, 0x8, 0x2, 0x4dd}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000037b587b002003bae9483666cc07e5e2700000007000000185ee8a3110000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0x1}, 0x18) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x2}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) 2m7.948442467s ago: executing program 7 (id=1174): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000407be0510000000653533c8dd2b1c2a02b1e5259caba9792ab5a8731b183f4b88e448296b83f12dae7306b9061a938b07dfe56c7acdcfc71294057a84b88d650d06a802969e7df422e40cd65365b6dc2ef51b0d0e86e3dd3b7559c693c001f4991b201a91393a93f43200cb2a68e57adacf5af7da653e492f640c46782daeb68655a46f80cbae807bf6694ec84ea09556dacb74c36b3bd3368a5e9eeb0ff4a9c7f476ea0ef1c699f54bc8de52c9fb378cb25a8b7260aa4ba547996"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1, 0x0, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) 2m7.948189197s ago: executing program 56 (id=1174): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000407be0510000000653533c8dd2b1c2a02b1e5259caba9792ab5a8731b183f4b88e448296b83f12dae7306b9061a938b07dfe56c7acdcfc71294057a84b88d650d06a802969e7df422e40cd65365b6dc2ef51b0d0e86e3dd3b7559c693c001f4991b201a91393a93f43200cb2a68e57adacf5af7da653e492f640c46782daeb68655a46f80cbae807bf6694ec84ea09556dacb74c36b3bd3368a5e9eeb0ff4a9c7f476ea0ef1c699f54bc8de52c9fb378cb25a8b7260aa4ba547996"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1, 0x0, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) 2m6.8188726s ago: executing program 6 (id=1182): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), 0x0}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() r1 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r2, 0x1000}, &(0x7f00000000c0)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='vnet_tx_trigger\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = timerfd_create(0x0, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r0}, 0x9) unshare(0x64000600) 2m5.779726935s ago: executing program 6 (id=1192): keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) 2m5.696453682s ago: executing program 6 (id=1193): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x800000004, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r1, 0x0, 0x1, 0x4}}, 0x20) 2m5.688503293s ago: executing program 6 (id=1194): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000005000)=""/120, 0x78}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = dup3(0xffffffffffffffff, r1, 0x80000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x410, &(0x7f0000000140)=ANY=[@ANYBLOB="696f636861727365743d61736369692c636865636b3d7374726963742c008dc72788a4fd1d7a9e96f5af8b1e45accead19436f26d694969a11ba75120b4d62f34885979931a363c752e585ec3604e30dbe2a796fc821132b494dde1c10c9dd6e964a204d3419f8429a34ad0f9eef6d8e64551e180300000043f138d74174cf31003d8e2e285a38f0c00baa5f773735f6e6eb3d29d249635d3f5317a9cd809294ebc15b04d444ccb0c1a90e8e0587fae4eefddd7e3d5c20a076101fd7f3ee5634000000000000fda9bc4dbfe77e9b101986ec88"], 0xfe, 0x340, &(0x7f0000000bc0)="$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") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r5) sendmsg$ETHTOOL_MSG_EEE_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2c, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1f0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r7}, 0x10) r8 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r8, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r4, 0x25, 0x10, @val=@perf_event}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000240), r9) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_clone(0x630c0500, 0x0, 0x0, 0x0, 0x0, 0x0) 2m5.337271282s ago: executing program 6 (id=1201): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu>=0||!') 2m5.046291916s ago: executing program 1 (id=1206): bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000003c0)={0x1d, r3, 0xfffffffffffffffd, {0x0, 0xf0, 0x4}, 0x2}, 0x18) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x1, {0x2, 0xf0, 0x1}, 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='net_dev_xmit\x00', r1, 0x0, 0xfffffffffffffffc}, 0xfffffc50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0xa, 0x0, &(0x7f0000000600)="35b63c4c049e43ea2ce4"}, 0x50) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r9}, 0x10) r10 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',b']) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='host1x_cdma_push\x00', r11, 0x0, 0x60f8}, 0x18) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r12, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 2m4.960298303s ago: executing program 6 (id=1207): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x2c, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x204010, &(0x7f0000000580)={[{@minixdf}, {@nouid32}, {@nombcache}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x58a, &(0x7f0000001440)="$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") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3b}, @initr0]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x1) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000300)={0x1, 0x400, 0x40}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) unlink(&(0x7f0000000180)='./file1\x00') request_key(&(0x7f0000000440)='id_legacy\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)='-\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_seqnum', 0x115000, 0x0) close_range(r0, r1, 0x0) 2m4.922552326s ago: executing program 57 (id=1207): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x2c, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x204010, &(0x7f0000000580)={[{@minixdf}, {@nouid32}, {@nombcache}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x58a, &(0x7f0000001440)="$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") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3b}, @initr0]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x1) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000300)={0x1, 0x400, 0x40}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) unlink(&(0x7f0000000180)='./file1\x00') request_key(&(0x7f0000000440)='id_legacy\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)='-\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_seqnum', 0x115000, 0x0) close_range(r0, r1, 0x0) 2m4.87623825s ago: executing program 1 (id=1209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x3375cbbe, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x2007, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0x10001, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x2, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 2m4.87053361s ago: executing program 1 (id=1210): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)='4', 0x1}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r4, r5+10000000}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r3, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r0, 0x20, &(0x7f0000000440)={&(0x7f0000000300)=""/12, 0xc, 0x0, &(0x7f0000000c00)=""/4096, 0x1000}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000018640000000000000000020003000000012f0600080000009500000000000000254002000000000018460000fdffffff000000000000000085100000f9ffffff9500000000000000e59f38ba34b7727c1d63e754236166dc7ac979c2be32f9e5661e639a05f9e324bbdaf5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='rss_stat\x00', r9}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000aa8000/0x2000)=nil, 0x2000, 0x10, 0x4, 0x40000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) mmap(&(0x7f0000106000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0xdf8b9000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r10}, 0x18) r11 = gettid() process_vm_writev(r11, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) close_range(r12, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0x0, &(0x7f00000002c0)) 2m4.696268765s ago: executing program 1 (id=1211): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000005000)=""/120, 0x78}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = dup3(0xffffffffffffffff, r1, 0x80000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x410, &(0x7f0000000140)=ANY=[@ANYBLOB="696f636861727365743d61736369692c636865636b3d7374726963742c008dc72788a4fd1d7a9e96f5af8b1e45accead19436f26d694969a11ba75120b4d62f34885979931a363c752e585ec3604e30dbe2a796fc821132b494dde1c10c9dd6e964a204d3419f8429a34ad0f9eef6d8e64551e180300000043f138d74174cf31003d8e2e285a38f0c00baa5f773735f6e6eb3d29d249635d3f5317a9cd809294ebc15b04d444ccb0c1a90e8e0587fae4eefddd7e3d5c20a076101fd7f3ee5634000000000000fda9bc4dbfe77e9b101986ec88"], 0xfe, 0x340, &(0x7f0000000bc0)="$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") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r5) sendmsg$ETHTOOL_MSG_EEE_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2c, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1f0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r7}, 0x10) r8 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r8, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r4, 0x25, 0x10, @val=@perf_event}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000240), r9) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_clone(0x630c0500, 0x0, 0x0, 0x0, 0x0, 0x0) 2m4.472749323s ago: executing program 1 (id=1212): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open(0x0, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000540)={0x10, 0x70, 0x100000}, 0x20) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$eJzs3E9rE08YwPGnaZOmKW1y+PEDBfFBL3pZ2vgKgrQgBpTaiHoQpnajIWtSsjESEdubV19H8ehNsL6BXrx5Fy9FELz0IF3pbrfZ1qW2te3W5vuBstOdeTKzfxKeXZhZu/fmab3qWlXTllRWJSXZJVkXKUhKQgNb25RfzkjUklwd/fH5wp37D26WyuWpGdXp0uy1oqqOX/zw/OXbSx/bo3ffjb8fltXCw7XvxS+r/6+eW9uYDT+92Vajc81m28w5ts7X3LqletuxjWtrreHarR31Vae5sNBV05gfyy20bNdV0+hq3e5qu6ntVlfNY1NrqGVZOpaTOJnYvWfD4IEjKsszM6Z0LINBEkbidrZaJTMYW1lZPolBAQCA0+X3/F9OJP9/UnO15mrjT/l/So42/0eUn/9vxCaNOBvSmw8AJZPb+v7uRP4PAAAAAAAAAAAAAAAAAAAAAMC/YN3z8p7n5cNt+DcsIlkRCf9Pepw4Hoe4/gMJDhdHLDJxLyvivO5UOpVgG9SXqlITR2yZSPtzibxtQXn6RnlqQn0FWXEWt+L9SYLDYXyoEB8/GcRrJH6xU0lLLtp/UfLyX3x8cVd8WkQ6lYxcuRyJtyQvnx5JUxyZ9+/rXvyrSdXrt8q7+h/x2wEAAAAAcBZYuq2w8/k3WE3SsjRcNmRXfbCz935A8vJzz/cDKisZ6cUPyfmh5I4bAAAAAIB+4nZf1I3j2K1+LozIwaP68dRZ2eCm2bOx53mLm43+vtOUiCR0pN9E5BSc8KMufH0WXMD9NE7yVwkAAADAcegl/UmPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/rXfxcPC9odZeyzS3WAyRwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcDr8CAAD//4DOGY4=") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00000000000000000001"], 0x40}, 0x20000000) 2m4.14858297s ago: executing program 1 (id=1219): io_uring_setup(0x664c, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x40000005}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) unshare(0x20000600) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ec0)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4044090) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020000000900010073797a300000000008000340000000010c0006400000000000000002140000001100010000000000000000000000000a"], 0x98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = epoll_create(0x4c4) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0x20000000}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000180)='cpu>=0||!') 2m4.137897241s ago: executing program 58 (id=1219): io_uring_setup(0x664c, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x40000005}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) unshare(0x20000600) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ec0)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4044090) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020000000900010073797a300000000008000340000000010c0006400000000000000002140000001100010000000000000000000000000a"], 0x98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = epoll_create(0x4c4) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0x20000000}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000180)='cpu>=0||!') 5.665459803s ago: executing program 4 (id=3112): rt_sigsuspend(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffff}, 0x18) socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000070000000000000000000000000000000000000000b8d3f74cffa3f33506e0fb104b66386c548d79689a321f95f27629f1b4e459305329ba4d9c89999b994ea4af8af47104155f6bf84a3108b560204fadd625fe70457ba4af13cc76f52520dc54cc4f284b94881be0bdb119b4ab43e3feb37b7e1caaf31e5a3e67a18aeeee4b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.0996658s ago: executing program 4 (id=3120): r0 = socket(0x2c, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) write$binfmt_script(r1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r0, r1, 0x0) 5.036120145s ago: executing program 4 (id=3122): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES16=0x0, @ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000980)={0x0, @broadcast, @private}, &(0x7f0000000a00)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000a40)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x7fffffff, 0x2, {{0x36, 0x4, 0x1, 0x6, 0xd8, 0x67, 0x0, 0x9, 0x4, 0x0, @local, @multicast1, {[@cipso={0x86, 0x6c, 0xffffffffffffffff, [{0x5, 0xf, "41535fdd4347c5c4b3fd71a95a"}, {0x6, 0x2}, {0x5, 0xc, "0dcb8a73a4374f29fc60"}, {0x0, 0x4, "0bfa"}, {0x1, 0xd, "ea4af963f86540aaf91927"}, {0x5, 0x8, "796e3c135f3b"}, {0x1, 0x10, "60fc2e84c93f32380a625f273a5d"}, {0x0, 0x10, "793f0c2ca70514a77953c26e067a"}, {0x7, 0x9, "4bab582f681196"}, {0x2, 0x7, "233c07c172"}]}, @timestamp_addr={0x44, 0x54, 0x50, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@broadcast, 0xfffffff4}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@private=0xa010102, 0xffff}, {@loopback, 0xfffffff7}, {@broadcast, 0x31a1}, {@rand_addr=0x64010101, 0x101}, {@broadcast, 0x1}, {@multicast2, 0x8}]}, @ra={0x94, 0x4}]}}}}}) r7 = socket(0x10, 0x3, 0x6) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000010c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000001080)={&(0x7f00000011c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="020029bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="bc00028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ffff000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="ec01028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000500000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000600000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400f9ffffff08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400d300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2d02028034fe0100240001006c625f74785f686173685f746f5f706f72745fec49f4e0eaec9a6d617070696e67000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=r4, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000f00000008000600", @ANYRES32=r5, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004007e00000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004008100000008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100656e61626c6564000000000000000000000000000000000000000000000000000500", @ANYRES32=r9, @ANYBLOB], 0x500}, 0x1, 0x0, 0x0, 0x8091}, 0x40000) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001180)={0x0, 0x2, 0xe41, 0x10000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r10 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x14022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x4, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r11}, &(0x7f0000000080), &(0x7f00000001c0)=r10}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r12, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 4.597534401s ago: executing program 4 (id=3127): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) mlockall(0x7) 4.308998945s ago: executing program 4 (id=3131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000001, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x101, 0xe, 0x3, 0xffff0001}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.225328014s ago: executing program 3 (id=3159): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000004440000001e0a05020000000000000000010000000900020073797a32000000001800038014000080100001800400028008000180000000000900010073797a30"], 0xc8}}, 0x0) 3.189445737s ago: executing program 3 (id=3160): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES16=0x0, @ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000980)={0x0, @broadcast, @private}, &(0x7f0000000a00)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000a40)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x7fffffff, 0x2, {{0x36, 0x4, 0x1, 0x6, 0xd8, 0x67, 0x0, 0x9, 0x4, 0x0, @local, @multicast1, {[@cipso={0x86, 0x6c, 0xffffffffffffffff, [{0x5, 0xf, "41535fdd4347c5c4b3fd71a95a"}, {0x6, 0x2}, {0x5, 0xc, "0dcb8a73a4374f29fc60"}, {0x0, 0x4, "0bfa"}, {0x1, 0xd, "ea4af963f86540aaf91927"}, {0x5, 0x8, "796e3c135f3b"}, {0x1, 0x10, "60fc2e84c93f32380a625f273a5d"}, {0x0, 0x10, "793f0c2ca70514a77953c26e067a"}, {0x7, 0x9, "4bab582f681196"}, {0x2, 0x7, "233c07c172"}]}, @timestamp_addr={0x44, 0x54, 0x50, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@broadcast, 0xfffffff4}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@private=0xa010102, 0xffff}, {@loopback, 0xfffffff7}, {@broadcast, 0x31a1}, {@rand_addr=0x64010101, 0x101}, {@broadcast, 0x1}, {@multicast2, 0x8}]}, @ra={0x94, 0x4}]}}}}}) r7 = socket(0x10, 0x3, 0x6) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000010c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000001080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="00050000", @ANYRES16=0x0, @ANYBLOB="020029bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="bc00028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ffff000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="ec01028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000500000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000600000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400f9ffffff08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400d300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2d02028034fe0100240001006c625f74785f686173685f746f5f706f72745fec49f4e0eaec9a6d617070696e67000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=r4, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000f00000008000600", @ANYRES32=r5, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004007e00000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004008100000008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100656e61626c6564000000000000000000000000000000000000000000000000000500", @ANYRES32=r9, @ANYBLOB], 0x500}, 0x1, 0x0, 0x0, 0x8091}, 0x40000) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001180)={0x0, 0x2, 0xe41, 0x10000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r10 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x14022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x4, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r11}, &(0x7f0000000080), &(0x7f00000001c0)=r10}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r12, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 2.79312383s ago: executing program 9 (id=3164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2040400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup(r4) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x3, @none, 0x6, 0x1}, 0x5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000180), &(0x7f0000000840)=r1}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r6) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01071dbd7000fcdfdfa50600000008000300f9"], 0x1c}, 0x1, 0x0, 0x0, 0x2404c811}, 0x4000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x18) removexattr(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}]}, 0x3, 0x4eb, &(0x7f0000001fc0)="$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") 2.723859246s ago: executing program 3 (id=3165): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf5}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x40701, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) r6 = socket$nl_route(0x10, 0x3, 0x0) flock(r6, 0x1) 2.568739698s ago: executing program 9 (id=3166): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x005\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x2, 0x0, {0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}}, 0x3a) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f00000025c0), 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000004300)="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", 0x1a7}], 0x1}}], 0x1, 0x4) 2.254560474s ago: executing program 8 (id=3172): creat(&(0x7f00000000c0)='./file0\x00', 0x8b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000000840)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@journal_checksum}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nobh}, {@grpid}], [], 0x2c}, 0x84, 0x4d8, &(0x7f0000000900)="$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") 2.193317509s ago: executing program 8 (id=3174): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0400000004000000040000000559"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfea8, 0xa) 2.079675038s ago: executing program 8 (id=3175): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES16=0x0, @ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000980)={0x0, @broadcast, @private}, &(0x7f0000000a00)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000a40)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x7fffffff, 0x2, {{0x36, 0x4, 0x1, 0x6, 0xd8, 0x67, 0x0, 0x9, 0x4, 0x0, @local, @multicast1, {[@cipso={0x86, 0x6c, 0xffffffffffffffff, [{0x5, 0xf, "41535fdd4347c5c4b3fd71a95a"}, {0x6, 0x2}, {0x5, 0xc, "0dcb8a73a4374f29fc60"}, {0x0, 0x4, "0bfa"}, {0x1, 0xd, "ea4af963f86540aaf91927"}, {0x5, 0x8, "796e3c135f3b"}, {0x1, 0x10, "60fc2e84c93f32380a625f273a5d"}, {0x0, 0x10, "793f0c2ca70514a77953c26e067a"}, {0x7, 0x9, "4bab582f681196"}, {0x2, 0x7, "233c07c172"}]}, @timestamp_addr={0x44, 0x54, 0x50, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@broadcast, 0xfffffff4}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@private=0xa010102, 0xffff}, {@loopback, 0xfffffff7}, {@broadcast, 0x31a1}, {@rand_addr=0x64010101, 0x101}, {@broadcast, 0x1}, {@multicast2, 0x8}]}, @ra={0x94, 0x4}]}}}}}) r7 = socket(0x10, 0x3, 0x6) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000010c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000001080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="00050000", @ANYRES16=0x0, @ANYBLOB="020029bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="bc00028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ffff000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="ec01028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000500000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000600000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400f9ffffff08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400d300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2d02028034fe0100240001006c625f74785f686173685f746f5f706f72745fec49f4e0eaec9a6d617070696e67000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=r4, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000f00000008000600", @ANYRES32=r5, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004007e00000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004008100000008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100656e61626c6564000000000000000000000000000000000000000000000000000500", @ANYRES32=r9, @ANYBLOB], 0x500}, 0x1, 0x0, 0x0, 0x8091}, 0x40000) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001180)={0x0, 0x2, 0xe41, 0x10000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r10 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x14022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x4, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r11}, &(0x7f0000000080), &(0x7f00000001c0)=r10}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r12, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1.715457389s ago: executing program 3 (id=3176): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0x0, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x5, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.715029049s ago: executing program 3 (id=3177): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd2", 0x60, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) getxattr(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)=@random={'os2.', '\x00'}, &(0x7f0000000980)=""/153, 0x99) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x60004ce) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2c, r7, 0x801, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_gettime(0x1, 0x0) 1.674947352s ago: executing program 8 (id=3178): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)='4', 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r2, r3+10000000}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r0, 0x20, &(0x7f0000000440)={&(0x7f0000000300)=""/12, 0xc, 0x0, &(0x7f0000000c00)=""/4096, 0x1000}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018640000000000000000020003000000012f0600080000009500000000000000254002000000000018460000fdffffff000000000000000085100000f9ffffff9500000000000000e59f38ba34b7727c1d63e754236166dc7ac979c2be32f9e5661e639a05f9e324bbdaf5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='rss_stat\x00', r7}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000aa8000/0x2000)=nil, 0x2000, 0x10, 0x4, 0x40000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) mmap(&(0x7f0000106000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0xdf8b9000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r8}, 0x18) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0x0, &(0x7f00000002c0)) 1.670361782s ago: executing program 9 (id=3179): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/vmallocinfo\x00', 0x0, 0x0) read$hiddev(r0, 0x0, 0x0) 1.57210634s ago: executing program 9 (id=3180): r0 = fsopen(&(0x7f0000000080)='nfs4\x00', 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x1, @ANYBLOB="7b8b0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000400"/28], 0x50) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='syzkaller0\x00', 0x0, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183640, 0x40) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0100c2000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e6174001400048008000140000000000800024080"], 0xa4}}, 0x24000001) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000002000)={[{@utf8}, {@overriderock}, {@check_strict}, {@hide}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@hide}, {@dmode={'dmode', 0x3d, 0x9}}, {@hide}, {@sbsector={'sbsector', 0x3d, 0x6}}, {@unhide}, {@map_acorn}, {@map_normal}, {@map_normal}, {@sbsector={'sbsector', 0x3d, 0xc}}, {@nocompress}, {@session={'session', 0x3d, 0x45}}, {@map_acorn}, {@utf8}, {@uid}]}, 0x4, 0xa16, &(0x7f00000015c0)="$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") ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r7, 0x400454cc, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r10}, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x5, 0xfffffffa, 0x1, 0xb3a}, 0xb6, 0x1, 0xffff, 0x2, 0x508, 0x10, 0x1e, 0x1d, 0x5, 0xff, {0x6, 0x9c22, 0x9, 0x4, 0x4, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40008d1}, 0x0) 1.364208657s ago: executing program 4 (id=3181): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) splice(r3, 0x0, r2, 0x0, 0xfea8, 0xa) 1.100774279s ago: executing program 8 (id=3184): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x3375cbbe, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x2007, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0x10001, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x2, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000500)={r6, 0x7}, 0xc) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) bind$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x64000680) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) 1.030842125s ago: executing program 5 (id=3185): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0400000004000000040000000559"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfea8, 0xa) 917.842324ms ago: executing program 5 (id=3186): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 842.899ms ago: executing program 5 (id=3187): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="080100000001050588000000000000000a0000053c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004002001000000000000000000000000000108000740000000007400068014000500fe80000000000000000000000000001d08000200ac1414bb080002000a01010008000100e0000001080002006401010108000100ac1e00e52c000380060002004e220000060001004e22eeff050002"], 0x108}}, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[]) 470.273261ms ago: executing program 5 (id=3188): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe, &(0x7f0000000700)={[{@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x7fffffff}}, {@debug}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000cc0)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000043}, 0x24000844) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xaf, 0x8}}, './file0\x00'}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) set_mempolicy(0x8000, &(0x7f0000000400)=0x5, 0xfffffffffffffff9) sched_setaffinity(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r6, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) 469.157621ms ago: executing program 9 (id=3189): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES16=0x0, @ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000980)={0x0, @broadcast, @private}, &(0x7f0000000a00)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000a40)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x7fffffff, 0x2, {{0x36, 0x4, 0x1, 0x6, 0xd8, 0x67, 0x0, 0x9, 0x4, 0x0, @local, @multicast1, {[@cipso={0x86, 0x6c, 0xffffffffffffffff, [{0x5, 0xf, "41535fdd4347c5c4b3fd71a95a"}, {0x6, 0x2}, {0x5, 0xc, "0dcb8a73a4374f29fc60"}, {0x0, 0x4, "0bfa"}, {0x1, 0xd, "ea4af963f86540aaf91927"}, {0x5, 0x8, "796e3c135f3b"}, {0x1, 0x10, "60fc2e84c93f32380a625f273a5d"}, {0x0, 0x10, "793f0c2ca70514a77953c26e067a"}, {0x7, 0x9, "4bab582f681196"}, {0x2, 0x7, "233c07c172"}]}, @timestamp_addr={0x44, 0x54, 0x50, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@broadcast, 0xfffffff4}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@private=0xa010102, 0xffff}, {@loopback, 0xfffffff7}, {@broadcast, 0x31a1}, {@rand_addr=0x64010101, 0x101}, {@broadcast, 0x1}, {@multicast2, 0x8}]}, @ra={0x94, 0x4}]}}}}}) r7 = socket(0x10, 0x3, 0x6) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000010c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000001080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="00050000", @ANYRES16=0x0, @ANYBLOB="020029bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="bc00028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ffff000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="ec01028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000500000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000600000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400f9ffffff08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400d300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2d02028034fe0100240001006c625f74785f686173685f746f5f706f72745fec49f4e0eaec9a6d617070696e67000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=r4, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000f00000008000600", @ANYRES32=r5, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004007e00000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004008100000008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100656e61626c6564000000000000000000000000000000000000000000000000000500", @ANYRES32=r9, @ANYBLOB], 0x500}, 0x1, 0x0, 0x0, 0x8091}, 0x40000) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001180)={0x0, 0x2, 0xe41, 0x10000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r10 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x14022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x4, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r11}, &(0x7f0000000080), &(0x7f00000001c0)=r10}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r12, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 228.418051ms ago: executing program 5 (id=3190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) (fail_nth: 9) 228.062821ms ago: executing program 3 (id=3191): rt_sigsuspend(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffff}, 0x18) socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000070000000000000000000000000000000000000000b8d3f74cffa3f33506e0fb104b66386c548d79689a321f95f27629f1b4e459305329ba4d9c89999b994ea4af8af47104155f6bf84a3108b560204fadd625fe70457ba4af13cc76f52520dc54cc4f284b94881be0bdb119b4ab43e3feb37b7e1caaf31e5a3e67a18aeeee4b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 223.619781ms ago: executing program 5 (id=3192): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES16=0x0, @ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000980)={0x0, @broadcast, @private}, &(0x7f0000000a00)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000a40)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x7fffffff, 0x2, {{0x36, 0x4, 0x1, 0x6, 0xd8, 0x67, 0x0, 0x9, 0x4, 0x0, @local, @multicast1, {[@cipso={0x86, 0x6c, 0xffffffffffffffff, [{0x5, 0xf, "41535fdd4347c5c4b3fd71a95a"}, {0x6, 0x2}, {0x5, 0xc, "0dcb8a73a4374f29fc60"}, {0x0, 0x4, "0bfa"}, {0x1, 0xd, "ea4af963f86540aaf91927"}, {0x5, 0x8, "796e3c135f3b"}, {0x1, 0x10, "60fc2e84c93f32380a625f273a5d"}, {0x0, 0x10, "793f0c2ca70514a77953c26e067a"}, {0x7, 0x9, "4bab582f681196"}, {0x2, 0x7, "233c07c172"}]}, @timestamp_addr={0x44, 0x54, 0x50, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@broadcast, 0xfffffff4}, {@remote, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@private=0xa010102, 0xffff}, {@loopback, 0xfffffff7}, {@broadcast, 0x31a1}, {@rand_addr=0x64010101, 0x101}, {@broadcast, 0x1}, {@multicast2, 0x8}]}, @ra={0x94, 0x4}]}}}}}) r7 = socket(0x10, 0x3, 0x6) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000010c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000001080)={&(0x7f00000011c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="020029bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="bc00028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ffff000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="ec01028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000500000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000600000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400f9ffffff08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400d300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="2d02028034fe0100240001006c625f74785f686173685f746f5f706f72745fec49f4e0eaec9a6d617070696e67000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=r4, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000f00000008000600", @ANYRES32=r5, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004007e00000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004008100000008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100656e61626c6564000000000000000000000000000000000000000000000000000500", @ANYRES32=r9, @ANYBLOB], 0x500}, 0x1, 0x0, 0x0, 0x8091}, 0x40000) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000001180)={0x0, 0x2, 0xe41, 0x10000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r10 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x14022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x4, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r11}, &(0x7f0000000080), &(0x7f00000001c0)=r10}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r12, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 29.995278ms ago: executing program 9 (id=3193): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "ead43f1ebd755fcaa13bae2a229fb3bd16e4c459c1f46a6c", "391aa94c42fca7ead0e17e59f1bea955800221ccbbdacfc61a4a9a2dc4ed4c44"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 8 (id=3194): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)='4', 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r2, r3+10000000}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r0, 0x20, &(0x7f0000000440)={&(0x7f0000000300)=""/12, 0xc, 0x0, &(0x7f0000000c00)=""/4096, 0x1000}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018640000000000000000020003000000012f0600080000009500000000000000254002000000000018460000fdffffff000000000000000085100000f9ffffff9500000000000000e59f38ba34b7727c1d63e754236166dc7ac979c2be32f9e5661e639a05f9e324bbdaf5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='rss_stat\x00', r7}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000aa8000/0x2000)=nil, 0x2000, 0x10, 0x4, 0x40000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) mmap(&(0x7f0000106000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0xdf8b9000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r8}, 0x18) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001c00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000140a03000000000000000000010000040900010073797a30000000000900000073797a310000000000000800bdcee228aaceb9fdfd80b12cd2514909c4f3c4c7653e94517e86e7027b67a4d715221d6075e5bc52fa8f0c486243d9dda1ef97939fceeeae794caf79e1374a28354c57904af228f6c78fb174b9f9d4f16a1d12cd040ba3bb0e9ed184aad3402bb623179666f04857b6b09339ef31b5b128383124bbffea2a92d98dfedc8b56baeaf77d8c9a7f30d5344cd279c4051a8b02958418be4ccb92b0e236e340faf351bdb4d16e1acffd00000900020073797a30000000000500064000000000000000030900020054797a3200000000140000001100010000000000000000dd0100003fad46223542249a302544de355baa7a7abd903b66c7e641fe5235263e7c638f3d9bb1fac98190aa357538032206d280782cba1121b75daa1bd2cec5f63444bd21c75350ea4627f367108168669f6b9f52278bf282b01c967583c02587d6fa7c094943f87f10fc86cc25b9eebe1230ddc726e937af1edefe59d904103016b70a4a0ce79cce78c10944ccb336d2b0bc0da7bbc9987673d32c01ee36a4a0477fa437f9003f862f777dd84b7e73309ecd91041bcc74e10269005edd4954ac47e441f0fab813dd602ba537c5ccf5c7e70e72593b4fc7bf2283681a410d0355f450a4719492e0ba9fbe4b81b8fb05dc6b"], 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0x0, &(0x7f00000002c0)) kernel console output (not intermixed with test programs): sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.148575][ T29] audit: type=1400 audit(220.244:13879): avc: denied { open } for pid=9689 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.172251][ T29] audit: type=1400 audit(220.244:13880): avc: denied { ioctl } for pid=9689 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.205739][ T29] audit: type=1326 audit(220.328:13881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12732 comm="syz.9.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708b4eeb69 code=0x7ffc0000 [ 230.228999][ T29] audit: type=1326 audit(220.328:13882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12732 comm="syz.9.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f708b4eeb69 code=0x7ffc0000 [ 230.902580][T12751] tipc: Enabled bearer , priority 0 [ 230.911577][T12751] syzkaller0: entered promiscuous mode [ 230.917096][T12751] syzkaller0: entered allmulticast mode [ 230.950992][T12750] tipc: Resetting bearer [ 230.961089][T12756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2331'. [ 230.978065][T12750] tipc: Disabling bearer [ 231.194545][T12768] loop4: detected capacity change from 0 to 128 [ 231.219031][T12768] FAT-fs (loop4): Directory bread(block 162) failed [ 231.250189][T12768] FAT-fs (loop4): Directory bread(block 163) failed [ 231.256871][T12768] FAT-fs (loop4): Directory bread(block 164) failed [ 231.290017][T12768] FAT-fs (loop4): Directory bread(block 165) failed [ 231.297451][T12774] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2339'. [ 231.335294][T12768] FAT-fs (loop4): Directory bread(block 166) failed [ 231.341943][T12768] FAT-fs (loop4): Directory bread(block 167) failed [ 231.362697][T12768] FAT-fs (loop4): Directory bread(block 168) failed [ 231.377318][T12768] FAT-fs (loop4): Directory bread(block 169) failed [ 231.397510][T12768] FAT-fs (loop4): Directory bread(block 162) failed [ 231.404379][T12768] FAT-fs (loop4): Directory bread(block 163) failed [ 231.416367][T12768] syz.4.2335: attempt to access beyond end of device [ 231.416367][T12768] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 231.445768][T12768] syz.4.2335: attempt to access beyond end of device [ 231.445768][T12768] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 231.526012][T12788] lo speed is unknown, defaulting to 1000 [ 231.580968][T12788] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2345'. [ 231.891328][T12806] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 232.180619][T12814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12814 comm=syz.3.2352 [ 232.261190][T12818] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2357'. [ 232.280477][T12824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2352'. [ 232.417506][T12834] loop4: detected capacity change from 0 to 128 [ 232.454644][T12834] FAT-fs (loop4): Directory bread(block 162) failed [ 232.464738][T12834] FAT-fs (loop4): Directory bread(block 163) failed [ 232.563790][T12834] FAT-fs (loop4): Directory bread(block 164) failed [ 232.573306][T12841] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2366'. [ 232.598075][T12834] FAT-fs (loop4): Directory bread(block 165) failed [ 232.604743][T12834] FAT-fs (loop4): Directory bread(block 166) failed [ 232.752943][T12844] lo speed is unknown, defaulting to 1000 [ 232.792804][T12844] siw: device registration error -23 [ 232.813651][T12846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12846 comm=syz.5.2368 [ 232.831411][T12834] FAT-fs (loop4): Directory bread(block 167) failed [ 232.854085][T12834] FAT-fs (loop4): Directory bread(block 168) failed [ 232.863336][T12843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2368'. [ 232.999813][T12834] FAT-fs (loop4): Directory bread(block 169) failed [ 233.105514][T12834] FAT-fs (loop4): Directory bread(block 162) failed [ 233.188801][T12834] FAT-fs (loop4): Directory bread(block 163) failed [ 233.213251][T12834] syz.4.2363: attempt to access beyond end of device [ 233.213251][T12834] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 233.255151][T12834] syz.4.2363: attempt to access beyond end of device [ 233.255151][T12834] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 233.260058][T12857] FAULT_INJECTION: forcing a failure. [ 233.260058][T12857] name failslab, interval 1, probability 0, space 0, times 0 [ 233.281280][T12857] CPU: 1 UID: 0 PID: 12857 Comm: syz.8.2373 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 233.281343][T12857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.281365][T12857] Call Trace: [ 233.281372][T12857] [ 233.281380][T12857] __dump_stack+0x1d/0x30 [ 233.281459][T12857] dump_stack_lvl+0xe8/0x140 [ 233.281477][T12857] dump_stack+0x15/0x1b [ 233.281494][T12857] should_fail_ex+0x265/0x280 [ 233.281535][T12857] ? cap_convert_nscap+0x284/0x340 [ 233.281620][T12857] should_failslab+0x8c/0xb0 [ 233.281646][T12857] __kmalloc_cache_noprof+0x4c/0x320 [ 233.281686][T12857] cap_convert_nscap+0x284/0x340 [ 233.281740][T12857] vfs_setxattr+0xd7/0x270 [ 233.281764][T12857] file_setxattr+0x139/0x1b0 [ 233.281930][T12857] path_setxattrat+0x290/0x310 [ 233.281982][T12857] __x64_sys_fsetxattr+0x6b/0x80 [ 233.282010][T12857] x64_sys_call+0x1ced/0x2ff0 [ 233.282042][T12857] do_syscall_64+0xd2/0x200 [ 233.282063][T12857] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 233.282091][T12857] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 233.282189][T12857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.282217][T12857] RIP: 0033:0x7f29529feb69 [ 233.282234][T12857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.282252][T12857] RSP: 002b:00007f2951067038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 233.282316][T12857] RAX: ffffffffffffffda RBX: 00007f2952c25fa0 RCX: 00007f29529feb69 [ 233.282332][T12857] RDX: 0000200000000180 RSI: 0000200000000080 RDI: 0000000000000003 [ 233.282349][T12857] RBP: 00007f2951067090 R08: 0000000000000001 R09: 0000000000000000 [ 233.282362][T12857] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 233.282374][T12857] R13: 0000000000000000 R14: 00007f2952c25fa0 R15: 00007ffec27d75c8 [ 233.282398][T12857] [ 233.570532][T12861] FAULT_INJECTION: forcing a failure. [ 233.570532][T12861] name failslab, interval 1, probability 0, space 0, times 0 [ 233.583253][T12861] CPU: 1 UID: 0 PID: 12861 Comm: syz.3.2376 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 233.583284][T12861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.583297][T12861] Call Trace: [ 233.583304][T12861] [ 233.583312][T12861] __dump_stack+0x1d/0x30 [ 233.583338][T12861] dump_stack_lvl+0xe8/0x140 [ 233.583364][T12861] dump_stack+0x15/0x1b [ 233.583387][T12861] should_fail_ex+0x265/0x280 [ 233.583426][T12861] should_failslab+0x8c/0xb0 [ 233.583452][T12861] kmem_cache_alloc_noprof+0x50/0x310 [ 233.583479][T12861] ? audit_log_start+0x365/0x6c0 [ 233.583538][T12861] audit_log_start+0x365/0x6c0 [ 233.583582][T12861] audit_seccomp+0x48/0x100 [ 233.583614][T12861] ? __seccomp_filter+0x68c/0x10d0 [ 233.583682][T12861] __seccomp_filter+0x69d/0x10d0 [ 233.583771][T12861] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 233.583801][T12861] ? vfs_write+0x75e/0x8e0 [ 233.583828][T12861] ? __rcu_read_unlock+0x4f/0x70 [ 233.583855][T12861] __secure_computing+0x82/0x150 [ 233.583881][T12861] syscall_trace_enter+0xcf/0x1e0 [ 233.583972][T12861] do_syscall_64+0xac/0x200 [ 233.584016][T12861] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 233.584042][T12861] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 233.584070][T12861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.584098][T12861] RIP: 0033:0x7f218210d57c [ 233.584145][T12861] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 233.584164][T12861] RSP: 002b:00007f2180777030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 233.584250][T12861] RAX: ffffffffffffffda RBX: 00007f2182335fa0 RCX: 00007f218210d57c [ 233.584262][T12861] RDX: 000000000000000f RSI: 00007f21807770a0 RDI: 0000000000000006 [ 233.584274][T12861] RBP: 00007f2180777090 R08: 0000000000000000 R09: 0000000000000000 [ 233.584286][T12861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.584298][T12861] R13: 0000000000000000 R14: 00007f2182335fa0 R15: 00007ffe152f70e8 [ 233.584317][T12861] [ 233.799176][T12863] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2374'. [ 233.896242][T12870] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2374'. [ 233.931698][T12863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.036728][T12886] tipc: Enabled bearer , priority 0 [ 234.049733][T12878] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2383'. [ 234.061760][T12886] tipc: Resetting bearer [ 234.077485][T12884] tipc: Disabling bearer [ 234.163540][T12897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2385'. [ 234.187467][T12899] FAULT_INJECTION: forcing a failure. [ 234.187467][T12899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.190762][T12897] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2385'. [ 234.200626][T12899] CPU: 0 UID: 0 PID: 12899 Comm: syz.3.2389 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 234.200664][T12899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 234.200720][T12899] Call Trace: [ 234.200729][T12899] [ 234.200740][T12899] __dump_stack+0x1d/0x30 [ 234.200771][T12899] dump_stack_lvl+0xe8/0x140 [ 234.200798][T12899] dump_stack+0x15/0x1b [ 234.200902][T12899] should_fail_ex+0x265/0x280 [ 234.200948][T12899] should_fail+0xb/0x20 [ 234.200988][T12899] should_fail_usercopy+0x1a/0x20 [ 234.201015][T12899] strncpy_from_user+0x25/0x230 [ 234.201105][T12899] ? kmem_cache_alloc_noprof+0x186/0x310 [ 234.201142][T12899] ? getname_flags+0x80/0x3b0 [ 234.201183][T12899] getname_flags+0xae/0x3b0 [ 234.201230][T12899] __se_sys_acct+0x3d/0x490 [ 234.201302][T12899] __x64_sys_acct+0x1f/0x30 [ 234.201338][T12899] x64_sys_call+0x2f2b/0x2ff0 [ 234.201406][T12899] do_syscall_64+0xd2/0x200 [ 234.201451][T12899] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 234.201480][T12899] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 234.201500][T12899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.201523][T12899] RIP: 0033:0x7f218210eb69 [ 234.201545][T12899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.201571][T12899] RSP: 002b:00007f2180777038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 234.201652][T12899] RAX: ffffffffffffffda RBX: 00007f2182335fa0 RCX: 00007f218210eb69 [ 234.201670][T12899] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 234.201688][T12899] RBP: 00007f2180777090 R08: 0000000000000000 R09: 0000000000000000 [ 234.201704][T12899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.201721][T12899] R13: 0000000000000000 R14: 00007f2182335fa0 R15: 00007ffe152f70e8 [ 234.201747][T12899] [ 234.495070][T12917] netlink: 92 bytes leftover after parsing attributes in process `syz.8.2397'. [ 234.637322][T12933] hsr_slave_0: left promiscuous mode [ 234.647633][T12933] hsr_slave_1: left promiscuous mode [ 234.965229][T12960] lo speed is unknown, defaulting to 1000 [ 235.136576][T12976] loop9: detected capacity change from 0 to 512 [ 235.146903][T12976] EXT4-fs: Ignoring removed bh option [ 235.179165][T12976] EXT4-fs: Mount option(s) incompatible with ext3 [ 235.232014][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 235.232033][ T29] audit: type=1400 audit(225.024:14096): avc: denied { open } for pid=12975 comm="syz.9.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 235.257286][ T29] audit: type=1400 audit(225.024:14097): avc: denied { kernel } for pid=12975 comm="syz.9.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 235.289528][ T29] audit: type=1326 audit(225.033:14098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.3.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218210eb69 code=0x7ffc0000 [ 235.312738][ T29] audit: type=1326 audit(225.033:14099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.3.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218210eb69 code=0x7ffc0000 [ 235.335858][ T29] audit: type=1326 audit(225.033:14100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.3.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f218210eb69 code=0x7ffc0000 [ 235.338502][T12989] audit: audit_lost=13 audit_rate_limit=0 audit_backlog_limit=64 [ 235.358894][ T29] audit: type=1326 audit(225.033:14101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.3.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218210eb69 code=0x7ffc0000 [ 235.366609][T12989] audit: out of memory in audit_log_start [ 235.395885][ T29] audit: type=1326 audit(225.033:14102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.3.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218210eb69 code=0x7ffc0000 [ 235.418912][ T29] audit: type=1326 audit(225.033:14103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.3.2425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f218210eb69 code=0x7ffc0000 [ 235.445612][T12968] @: renamed from vlan0 (while UP) [ 235.477834][T12976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.485426][T12976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.519182][T12976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.526796][T12976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.594885][T12993] lo speed is unknown, defaulting to 1000 [ 235.716858][T13003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.749617][T13003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.891597][T13013] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 235.908415][T13012] 9pnet_fd: Insufficient options for proto=fd [ 236.162007][T13031] pim6reg: entered allmulticast mode [ 236.188493][T13031] pim6reg: left allmulticast mode [ 236.596294][T13049] 9pnet_fd: Insufficient options for proto=fd [ 236.972703][T13065] lo speed is unknown, defaulting to 1000 [ 237.132106][T13073] 9pnet_fd: Insufficient options for proto=fd [ 237.397464][T13086] lo speed is unknown, defaulting to 1000 [ 237.916931][T13096] __nla_validate_parse: 9 callbacks suppressed [ 237.917013][T13096] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2467'. [ 237.952043][T13097] lo speed is unknown, defaulting to 1000 [ 238.255852][T13104] lo speed is unknown, defaulting to 1000 [ 238.273863][T13106] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2473'. [ 238.343105][T13108] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2474'. [ 238.361078][T13108] hsr_slave_0: left promiscuous mode [ 238.373817][T13108] hsr_slave_1: left promiscuous mode [ 238.492178][T13116] loop9: detected capacity change from 0 to 512 [ 238.499538][T13116] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 238.510730][T13116] EXT4-fs (loop9): orphan cleanup on readonly fs [ 238.521078][T13116] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.2476: Failed to acquire dquot type 1 [ 238.533874][T13116] EXT4-fs (loop9): 1 truncate cleaned up [ 238.540464][T13116] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 238.633264][T13123] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2480'. [ 238.650674][T13122] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 238.683028][T13123] hsr_slave_0: left promiscuous mode [ 238.712522][T13122] loop4: detected capacity change from 0 to 1024 [ 238.733302][T13122] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 238.757629][T13123] hsr_slave_1: left promiscuous mode [ 238.812298][T13122] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.2478: lblock 1 mapped to illegal pblock 1 (length 1) [ 238.961331][T13122] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2478: Failed to acquire dquot type 0 [ 238.990523][T13122] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.2478: Freeing blocks not in datazone - block = 0, count = 4096 [ 239.053380][T13130] lo speed is unknown, defaulting to 1000 [ 239.104533][T13130] siw: device registration error -23 [ 239.265683][T13122] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.2478: Invalid inode bitmap blk 0 in block_group 0 [ 239.338793][ T9689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.399951][T13122] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 239.408832][ T56] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 239.423604][ T56] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 0 [ 239.465720][T13122] EXT4-fs (loop4): 1 orphan inode deleted [ 239.509059][T13122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.628650][ T9563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.642078][T13151] loop9: detected capacity change from 0 to 512 [ 239.662986][T13151] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 239.676036][T13151] EXT4-fs (loop9): orphan cleanup on readonly fs [ 239.682992][T13151] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.2488: Failed to acquire dquot type 1 [ 239.696122][T13151] EXT4-fs (loop9): 1 truncate cleaned up [ 239.725038][T13151] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 239.784032][ T4987] IPVS: starting estimator thread 0... [ 239.877868][T13156] IPVS: using max 2688 ests per chain, 134400 per kthread [ 239.881547][T13162] 9pnet_fd: Insufficient options for proto=fd [ 240.008504][T13158] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2492'. [ 240.047288][T13174] loop4: detected capacity change from 0 to 128 [ 240.066394][T13158] netem: change failed [ 240.093627][T13174] FAT-fs (loop4): Directory bread(block 162) failed [ 240.116261][T13174] FAT-fs (loop4): Directory bread(block 163) failed [ 240.134807][T13174] FAT-fs (loop4): Directory bread(block 164) failed [ 240.158450][T13174] FAT-fs (loop4): Directory bread(block 165) failed [ 240.182273][T13174] FAT-fs (loop4): Directory bread(block 166) failed [ 240.207323][T13174] FAT-fs (loop4): Directory bread(block 167) failed [ 240.231485][T13174] FAT-fs (loop4): Directory bread(block 168) failed [ 240.253443][T13174] FAT-fs (loop4): Directory bread(block 169) failed [ 240.306416][T13174] FAT-fs (loop4): Directory bread(block 162) failed [ 240.313215][T13174] FAT-fs (loop4): Directory bread(block 163) failed [ 240.322437][T13174] syz.4.2498: attempt to access beyond end of device [ 240.322437][T13174] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 240.343385][T13174] syz.4.2498: attempt to access beyond end of device [ 240.343385][T13174] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 240.545688][T13187] lo speed is unknown, defaulting to 1000 [ 240.574044][T13187] siw: device registration error -23 [ 241.422403][T13188] lo speed is unknown, defaulting to 1000 [ 241.439669][ T9689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.464432][T13188] siw: device registration error -23 [ 241.471400][ T29] kauditd_printk_skb: 426 callbacks suppressed [ 241.471417][ T29] audit: type=1400 audit(230.853:14523): avc: denied { create } for pid=13171 comm="syz.8.2499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 241.501346][ T29] audit: type=1400 audit(230.853:14524): avc: denied { ioctl } for pid=13171 comm="syz.8.2499" path="socket:[52120]" dev="sockfs" ino=52120 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 241.536742][T13196] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2507'. [ 241.556780][ T29] audit: type=1400 audit(230.938:14525): avc: denied { map_create } for pid=13197 comm="syz.9.2508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 241.575676][ T29] audit: type=1400 audit(230.938:14526): avc: denied { bpf } for pid=13197 comm="syz.9.2508" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 241.605749][ T29] audit: type=1400 audit(230.975:14527): avc: denied { map_create } for pid=13199 comm="syz.5.2509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 241.624549][ T29] audit: type=1400 audit(230.975:14528): avc: denied { map_read map_write } for pid=13199 comm="syz.5.2509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 241.665385][ T29] audit: type=1400 audit(230.994:14529): avc: denied { prog_load } for pid=13199 comm="syz.5.2509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 241.684121][ T29] audit: type=1400 audit(230.994:14530): avc: denied { perfmon } for pid=13199 comm="syz.5.2509" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 241.704858][ T29] audit: type=1400 audit(230.994:14531): avc: denied { create } for pid=13199 comm="syz.5.2509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 241.724030][ T29] audit: type=1400 audit(230.994:14532): avc: denied { ioctl } for pid=13199 comm="syz.5.2509" path="socket:[52361]" dev="sockfs" ino=52361 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 241.821972][T13211] loop4: detected capacity change from 0 to 1024 [ 241.833809][T13211] EXT4-fs: Invalid want_extra_isize 2700 [ 241.948951][T13211] program syz.4.2515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.958484][T13211] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 242.040905][T13223] lo speed is unknown, defaulting to 1000 [ 242.602368][T13223] siw: device registration error -23 [ 242.654128][T13224] lo speed is unknown, defaulting to 1000 [ 242.705842][T13224] siw: device registration error -23 [ 242.716796][T13211] siw: device registration error -23 [ 242.843370][T13226] hub 9-0:1.0: USB hub found [ 242.877968][T13226] hub 9-0:1.0: 8 ports detected [ 242.884460][T13228] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 242.929514][T13233] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 242.967370][T13233] loop4: detected capacity change from 0 to 1024 [ 242.985309][T13233] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 242.998597][T13234] lo speed is unknown, defaulting to 1000 [ 243.013981][T13233] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.2520: lblock 1 mapped to illegal pblock 1 (length 1) [ 243.043050][T13233] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2520: Failed to acquire dquot type 0 [ 243.097628][T13233] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.2520: Freeing blocks not in datazone - block = 0, count = 4096 [ 243.111986][T13233] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.2520: Invalid inode bitmap blk 0 in block_group 0 [ 243.113412][T13245] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2525'. [ 243.134771][ T37] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 243.159548][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 243.203520][T13233] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 243.223936][T13233] EXT4-fs (loop4): 1 orphan inode deleted [ 243.241676][T13250] /dev/nullb0: Can't lookup blockdev [ 243.258411][T13233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.331346][T13260] loop9: detected capacity change from 0 to 1024 [ 243.342192][T13260] EXT4-fs: Invalid want_extra_isize 2700 [ 243.400231][T13260] program syz.9.2530 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.409937][T13260] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 243.430338][ T9563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.441614][T13260] siw: device registration error -23 [ 243.517321][T13266] lo speed is unknown, defaulting to 1000 [ 243.566927][T13266] siw: device registration error -23 [ 243.670686][T13264] loop9: detected capacity change from 0 to 1024 [ 243.691027][T13264] EXT4-fs: Ignoring removed nobh option [ 243.820558][T13264] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 243.888649][T13264] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.2532: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 243.913908][T13264] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.2532: couldn't read orphan inode 11 (err -117) [ 243.926775][T13264] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.946794][T13264] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.2532: Invalid block bitmap block 0 in block_group 0 [ 243.960973][T13264] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.2532: Failed to acquire dquot type 0 [ 243.999906][ T9689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.032976][T13277] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2536'. [ 244.115764][T13280] hub 9-0:1.0: USB hub found [ 244.135262][T13280] hub 9-0:1.0: 8 ports detected [ 244.307457][T13292] loop9: detected capacity change from 0 to 512 [ 244.315639][T13292] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 244.326669][T13292] EXT4-fs (loop9): orphan cleanup on readonly fs [ 244.333462][T13292] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.2539: Failed to acquire dquot type 1 [ 244.346555][T13292] EXT4-fs (loop9): 1 truncate cleaned up [ 244.353172][T13292] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 244.449982][T13296] lo speed is unknown, defaulting to 1000 [ 244.527528][T13301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2544'. [ 244.569336][T13303] FAULT_INJECTION: forcing a failure. [ 244.569336][T13303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.571032][T13301] lo speed is unknown, defaulting to 1000 [ 244.582617][T13303] CPU: 1 UID: 0 PID: 13303 Comm: syz.8.2545 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 244.582690][T13303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 244.582712][T13303] Call Trace: [ 244.582724][T13303] [ 244.582735][T13303] __dump_stack+0x1d/0x30 [ 244.582767][T13303] dump_stack_lvl+0xe8/0x140 [ 244.582795][T13303] dump_stack+0x15/0x1b [ 244.582828][T13303] should_fail_ex+0x265/0x280 [ 244.582906][T13303] should_fail+0xb/0x20 [ 244.582946][T13303] should_fail_usercopy+0x1a/0x20 [ 244.582973][T13303] _copy_from_iter+0xcf/0xe40 [ 244.583006][T13303] ? __build_skb_around+0x1a0/0x200 [ 244.583179][T13303] ? __alloc_skb+0x223/0x320 [ 244.583221][T13303] netlink_sendmsg+0x471/0x6b0 [ 244.583278][T13303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.583385][T13303] __sock_sendmsg+0x142/0x180 [ 244.583419][T13303] ____sys_sendmsg+0x31e/0x4e0 [ 244.583521][T13303] ___sys_sendmsg+0x17b/0x1d0 [ 244.583595][T13303] __x64_sys_sendmsg+0xd4/0x160 [ 244.583647][T13303] x64_sys_call+0x191e/0x2ff0 [ 244.583676][T13303] do_syscall_64+0xd2/0x200 [ 244.583755][T13303] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 244.583789][T13303] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 244.583819][T13303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.583850][T13303] RIP: 0033:0x7f29529feb69 [ 244.583871][T13303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.583965][T13303] RSP: 002b:00007f2951067038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.583991][T13303] RAX: ffffffffffffffda RBX: 00007f2952c25fa0 RCX: 00007f29529feb69 [ 244.584009][T13303] RDX: 0000000000048002 RSI: 0000200000000080 RDI: 0000000000000006 [ 244.584027][T13303] RBP: 00007f2951067090 R08: 0000000000000000 R09: 0000000000000000 [ 244.584044][T13303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.584138][T13303] R13: 0000000000000000 R14: 00007f2952c25fa0 R15: 00007ffec27d75c8 [ 244.584166][T13303] [ 244.667192][T13308] program syz.8.2547 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.802158][T13308] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 244.817371][T13308] siw: device registration error -23 [ 245.153156][T13325] lo speed is unknown, defaulting to 1000 [ 245.234507][T13325] siw: device registration error -23 [ 245.274437][ T9689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.514601][T13330] lo speed is unknown, defaulting to 1000 [ 245.575826][T13323] netlink: 'syz.4.2552': attribute type 10 has an invalid length. [ 245.595318][T13323] ipvlan0: entered allmulticast mode [ 245.600726][T13323] veth0_vlan: entered allmulticast mode [ 245.613915][T13323] team0: Device ipvlan0 failed to register rx_handler [ 245.736220][T13343] program syz.5.2558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.762945][T13343] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 245.775243][T13343] siw: device registration error -23 [ 245.791661][T13349] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2562'. [ 245.800752][T13349] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2562'. [ 245.888141][T13352] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 245.932129][T13358] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2563'. [ 245.993868][T13364] lo speed is unknown, defaulting to 1000 [ 246.101526][T13368] FAULT_INJECTION: forcing a failure. [ 246.101526][T13368] name failslab, interval 1, probability 0, space 0, times 0 [ 246.114348][T13368] CPU: 1 UID: 0 PID: 13368 Comm: syz.5.2570 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 246.114389][T13368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 246.114407][T13368] Call Trace: [ 246.114412][T13368] [ 246.114420][T13368] __dump_stack+0x1d/0x30 [ 246.114442][T13368] dump_stack_lvl+0xe8/0x140 [ 246.114463][T13368] dump_stack+0x15/0x1b [ 246.114508][T13368] should_fail_ex+0x265/0x280 [ 246.114609][T13368] should_failslab+0x8c/0xb0 [ 246.114706][T13368] __kmalloc_node_noprof+0xa9/0x410 [ 246.114738][T13368] ? __vmalloc_node_range_noprof+0x3f9/0xe00 [ 246.114804][T13368] __vmalloc_node_range_noprof+0x3f9/0xe00 [ 246.114847][T13368] ? cred_has_capability+0x210/0x280 [ 246.114885][T13368] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 246.114934][T13368] __vmalloc_noprof+0x83/0xc0 [ 246.114966][T13368] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 246.114994][T13368] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 246.115037][T13368] ? bpf_prog_alloc+0x2a/0x150 [ 246.115065][T13368] bpf_prog_alloc+0x3c/0x150 [ 246.115092][T13368] bpf_prog_load+0x514/0x1070 [ 246.115146][T13368] ? security_bpf+0x2b/0x90 [ 246.115178][T13368] __sys_bpf+0x462/0x7b0 [ 246.115213][T13368] __x64_sys_bpf+0x41/0x50 [ 246.115238][T13368] x64_sys_call+0x2aea/0x2ff0 [ 246.115267][T13368] do_syscall_64+0xd2/0x200 [ 246.115292][T13368] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 246.115394][T13368] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 246.115417][T13368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.115440][T13368] RIP: 0033:0x7f7742d6eb69 [ 246.115459][T13368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.115479][T13368] RSP: 002b:00007f77413d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.115545][T13368] RAX: ffffffffffffffda RBX: 00007f7742f95fa0 RCX: 00007f7742d6eb69 [ 246.115560][T13368] RDX: 0000000000000094 RSI: 00002000000008c0 RDI: 0000000000000005 [ 246.115574][T13368] RBP: 00007f77413d7090 R08: 0000000000000000 R09: 0000000000000000 [ 246.115587][T13368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.115601][T13368] R13: 0000000000000001 R14: 00007f7742f95fa0 R15: 00007ffee94c2088 [ 246.115621][T13368] [ 246.115630][T13368] warn_alloc: 1 callbacks suppressed [ 246.115641][T13368] syz.5.2570: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 246.275970][T13371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2571'. [ 246.291888][T13368] ,cpuset=/,mems_allowed=0 [ 246.377758][T13368] CPU: 1 UID: 0 PID: 13368 Comm: syz.5.2570 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 246.377799][T13368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 246.377817][T13368] Call Trace: [ 246.377824][T13368] [ 246.377834][T13368] __dump_stack+0x1d/0x30 [ 246.377903][T13368] dump_stack_lvl+0xe8/0x140 [ 246.377943][T13368] dump_stack+0x15/0x1b [ 246.377965][T13368] warn_alloc+0x12b/0x1a0 [ 246.377998][T13368] ? should_failslab+0x8c/0xb0 [ 246.378051][T13368] __vmalloc_node_range_noprof+0x497/0xe00 [ 246.378094][T13368] ? cred_has_capability+0x210/0x280 [ 246.378194][T13368] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 246.378230][T13368] __vmalloc_noprof+0x83/0xc0 [ 246.378260][T13368] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 246.378296][T13368] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 246.378436][T13368] ? bpf_prog_alloc+0x2a/0x150 [ 246.378470][T13368] bpf_prog_alloc+0x3c/0x150 [ 246.378503][T13368] bpf_prog_load+0x514/0x1070 [ 246.378554][T13368] ? security_bpf+0x2b/0x90 [ 246.378707][T13368] __sys_bpf+0x462/0x7b0 [ 246.378806][T13368] __x64_sys_bpf+0x41/0x50 [ 246.378838][T13368] x64_sys_call+0x2aea/0x2ff0 [ 246.378866][T13368] do_syscall_64+0xd2/0x200 [ 246.378896][T13368] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 246.378927][T13368] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 246.378954][T13368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.379023][T13368] RIP: 0033:0x7f7742d6eb69 [ 246.379043][T13368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.379067][T13368] RSP: 002b:00007f77413d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.379122][T13368] RAX: ffffffffffffffda RBX: 00007f7742f95fa0 RCX: 00007f7742d6eb69 [ 246.379139][T13368] RDX: 0000000000000094 RSI: 00002000000008c0 RDI: 0000000000000005 [ 246.379153][T13368] RBP: 00007f77413d7090 R08: 0000000000000000 R09: 0000000000000000 [ 246.379165][T13368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.379214][T13368] R13: 0000000000000001 R14: 00007f7742f95fa0 R15: 00007ffee94c2088 [ 246.379238][T13368] [ 246.379260][T13368] Mem-Info: [ 246.595439][T13368] active_anon:48718 inactive_anon:0 isolated_anon:0 [ 246.595439][T13368] active_file:26602 inactive_file:2641 isolated_file:0 [ 246.595439][T13368] unevictable:0 dirty:305 writeback:0 [ 246.595439][T13368] slab_reclaimable:3771 slab_unreclaimable:15362 [ 246.595439][T13368] mapped:34676 shmem:40665 pagetables:1403 [ 246.595439][T13368] sec_pagetables:0 bounce:0 [ 246.595439][T13368] kernel_misc_reclaimable:0 [ 246.595439][T13368] free:1823848 free_pcp:16962 free_cma:0 [ 246.640580][T13368] Node 0 active_anon:195800kB inactive_anon:0kB active_file:106408kB inactive_file:10564kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143808kB dirty:1220kB writeback:0kB shmem:163588kB kernel_stack:3488kB pagetables:5612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 246.668358][T13368] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 246.697053][T13368] lowmem_reserve[]: 0 2883 7862 7862 [ 246.702399][T13368] Node 0 DMA32 free:2949228kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952860kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 246.711349][T13374] loop4: detected capacity change from 0 to 512 [ 246.732801][T13368] lowmem_reserve[]: 0 0 4978 4978 [ 246.732845][T13368] Node 0 Normal free:4323224kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:201436kB inactive_anon:0kB active_file:106408kB inactive_file:10572kB unevictable:0kB writepending:1232kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:65188kB local_pcp:62900kB free_cma:0kB [ 246.776390][T13368] lowmem_reserve[]: 0 0 0 0 [ 246.781039][T13368] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 246.783589][T13374] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 246.793755][T13368] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949228kB [ 246.820102][T13368] Node 0 Normal: 1195*4kB (UM) 2616*8kB (UME) 1592*16kB (UME) 886*32kB (UME) 426*64kB (UME) 153*128kB (UME) 94*256kB (UME) 78*512kB (UME) 70*1024kB (UME) 40*2048kB (UME) 971*4096kB (UM) = 4321196kB [ 246.839967][T13368] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 246.849305][T13368] 72161 total pagecache pages [ 246.854022][T13368] 0 pages in swap cache [ 246.858217][T13368] Free swap = 124996kB [ 246.862541][T13368] Total swap = 124996kB [ 246.866722][T13368] 2097051 pages RAM [ 246.870567][T13368] 0 pages HighMem/MovableOnly [ 246.875305][T13368] 80436 pages reserved [ 246.916584][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 246.916602][ T29] audit: type=1326 audit(235.951:14767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13379 comm="syz.8.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29529feb69 code=0x7ffc0000 [ 246.962429][T13374] EXT4-fs (loop4): 1 truncate cleaned up [ 246.968870][T13374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.970728][T13384] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2576'. [ 246.990151][ T29] audit: type=1326 audit(235.989:14768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13379 comm="syz.8.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f29529feb69 code=0x7ffc0000 [ 246.998797][T13386] loop9: detected capacity change from 0 to 1024 [ 247.013274][ T29] audit: type=1326 audit(235.989:14769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13379 comm="syz.8.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29529feb69 code=0x7ffc0000 [ 247.042492][ T29] audit: type=1326 audit(235.989:14770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13379 comm="syz.8.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29529feb69 code=0x7ffc0000 [ 247.065502][ T29] audit: type=1326 audit(235.989:14771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13379 comm="syz.8.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29529feb69 code=0x7ffc0000 [ 247.088553][ T29] audit: type=1326 audit(235.989:14772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13379 comm="syz.8.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f29529feb69 code=0x7ffc0000 [ 247.102249][T13386] EXT4-fs: Invalid want_extra_isize 2700 [ 247.111464][ T29] audit: type=1326 audit(235.989:14773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13379 comm="syz.8.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29529feb69 code=0x7ffc0000 [ 247.111497][ T29] audit: type=1400 audit(236.017:14774): avc: denied { mount } for pid=13373 comm="syz.4.2572" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 247.163405][T13389] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 247.169958][T13390] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2578'. [ 247.222141][T13386] program syz.9.2575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.258345][T13386] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 247.322765][T13386] siw: device registration error -23 [ 247.354972][T13400] hub 9-0:1.0: USB hub found [ 247.360492][T13400] hub 9-0:1.0: 8 ports detected [ 247.367499][T13403] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2581'. [ 247.399378][ T9563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.406473][ T29] audit: type=1400 audit(236.064:14775): avc: denied { remove_name } for pid=13373 comm="syz.4.2572" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 247.430915][ T29] audit: type=1400 audit(236.064:14776): avc: denied { rename } for pid=13373 comm="syz.4.2572" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 247.559342][T13410] lo speed is unknown, defaulting to 1000 [ 247.595623][T13412] 9pnet_fd: Insufficient options for proto=fd [ 247.737818][T13421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2590'. [ 247.989708][T13434] loop4: detected capacity change from 0 to 128 [ 247.991434][T13434] FAT-fs (loop4): Directory bread(block 162) failed [ 248.003312][T13434] FAT-fs (loop4): Directory bread(block 163) failed [ 248.056667][T13434] FAT-fs (loop4): Directory bread(block 164) failed [ 248.074171][T13434] FAT-fs (loop4): Directory bread(block 165) failed [ 248.128109][T13434] FAT-fs (loop4): Directory bread(block 166) failed [ 248.218825][T13434] FAT-fs (loop4): Directory bread(block 167) failed [ 248.225768][T13434] FAT-fs (loop4): Directory bread(block 168) failed [ 248.232475][T13434] FAT-fs (loop4): Directory bread(block 169) failed [ 248.331607][T13434] FAT-fs (loop4): Directory bread(block 162) failed [ 248.366624][T13434] FAT-fs (loop4): Directory bread(block 163) failed [ 248.559453][T13464] hub 9-0:1.0: USB hub found [ 248.569625][T13464] hub 9-0:1.0: 8 ports detected [ 248.589254][T13434] syz.4.2596: attempt to access beyond end of device [ 248.589254][T13434] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 248.637251][T13434] syz.4.2596: attempt to access beyond end of device [ 248.637251][T13434] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 249.282018][T13524] 9pnet_fd: Insufficient options for proto=fd [ 249.368009][T13528] loop9: detected capacity change from 0 to 128 [ 249.394402][T13528] FAT-fs (loop9): Directory bread(block 162) failed [ 249.415091][T13528] FAT-fs (loop9): Directory bread(block 163) failed [ 249.421779][T13528] FAT-fs (loop9): Directory bread(block 164) failed [ 249.461018][T13528] FAT-fs (loop9): Directory bread(block 165) failed [ 249.477354][T13528] FAT-fs (loop9): Directory bread(block 166) failed [ 249.495281][T13528] FAT-fs (loop9): Directory bread(block 167) failed [ 249.513738][T13528] FAT-fs (loop9): Directory bread(block 168) failed [ 249.524078][T13528] FAT-fs (loop9): Directory bread(block 169) failed [ 249.534533][T13528] FAT-fs (loop9): Directory bread(block 162) failed [ 249.545046][T13534] program syz.3.2638 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.554693][T13534] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 249.582562][T13528] FAT-fs (loop9): Directory bread(block 163) failed [ 249.590466][T13528] syz.9.2636: attempt to access beyond end of device [ 249.590466][T13528] loop9: rw=3, sector=226, nr_sectors = 6 limit=128 [ 249.604014][T13528] syz.9.2636: attempt to access beyond end of device [ 249.604014][T13528] loop9: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 249.919796][T13554] 9pnet_fd: Insufficient options for proto=fd [ 250.124007][T13572] tipc: Enabled bearer , priority 0 [ 250.183538][T13572] tipc: Resetting bearer [ 250.200034][T13578] 9pnet_fd: Insufficient options for proto=fd [ 250.207244][T13569] tipc: Disabling bearer [ 250.552547][T13608] __nla_validate_parse: 7 callbacks suppressed [ 250.552566][T13608] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2667'. [ 250.568320][T13608] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2667'. [ 250.687694][T13619] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2672'. [ 250.735424][T13616] lo speed is unknown, defaulting to 1000 [ 250.763715][T13622] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2671'. [ 250.999498][T13630] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2677'. [ 251.052559][ T5207] IPVS: starting estimator thread 0... [ 251.059907][ T5207] hid_parser_main: 70 callbacks suppressed [ 251.059924][ T5207] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 251.073623][ T5207] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 251.081129][ T5207] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 251.088538][ T5207] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 251.096117][ T5207] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 251.103569][ T5207] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 251.111006][ T5207] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 251.118488][ T5207] hid-generic 0000:0000:0000.000F: unknown main item tag 0x4 [ 251.118892][T13630] loop9: detected capacity change from 0 to 1024 [ 251.126054][ T5207] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 251.126083][ T5207] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 251.159421][T13633] IPVS: using max 2256 ests per chain, 112800 per kthread [ 251.167533][T13632] lo speed is unknown, defaulting to 1000 [ 251.202408][ T5207] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 251.320233][T13630] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 251.495611][T13651] netlink: 'syz.3.2684': attribute type 11 has an invalid length. [ 251.503566][T13651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2684'. [ 251.517820][T13630] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: block 4: comm syz.9.2677: lblock 4 mapped to illegal pblock 4 (length 1) [ 251.552476][T13630] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 251.565035][T13630] EXT4-fs (loop9): This should not happen!! Data will be lost [ 251.565035][T13630] [ 251.653395][T13654] bridge_slave_0: left allmulticast mode [ 251.659203][T13654] bridge_slave_0: left promiscuous mode [ 251.664990][T13654] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.808402][T13664] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2689'. [ 251.830042][T13653] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: block 3: comm syz.9.2677: lblock 3 mapped to illegal pblock 3 (length 1) [ 251.902498][T13654] bridge_slave_1: left allmulticast mode [ 251.908325][T13654] bridge_slave_1: left promiscuous mode [ 251.914093][T13654] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.924530][T13653] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 251.936954][T13653] EXT4-fs (loop9): This should not happen!! Data will be lost [ 251.936954][T13653] [ 252.281729][ T29] kauditd_printk_skb: 826 callbacks suppressed [ 252.281793][ T29] audit: type=1400 audit(240.978:15603): avc: denied { module_request } for pid=13672 comm="syz.4.2693" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 252.340518][T13654] bond0: (slave bond_slave_0): Releasing backup interface [ 252.354688][ T29] audit: type=1400 audit(241.025:15604): avc: denied { sys_module } for pid=13672 comm="syz.4.2693" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 252.383634][T13654] bond0: (slave bond_slave_1): Releasing backup interface [ 252.414952][ T29] audit: type=1400 audit(241.090:15605): avc: denied { unmount } for pid=9689 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 252.435602][ T37] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 252.447869][T13654] team0: Port device team_slave_0 removed [ 252.451499][ T37] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 252.468002][ T37] EXT4-fs (loop9): This should not happen!! Data will be lost [ 252.468002][ T37] [ 252.480491][ T9689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 252.509799][T13654] team0: Port device team_slave_1 removed [ 252.546125][T13654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.553629][T13654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.571007][ T29] audit: type=1400 audit(241.249:15606): avc: denied { ioctl } for pid=13689 comm="syz.9.2695" path="socket:[54343]" dev="sockfs" ino=54343 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 252.598759][ T29] audit: type=1400 audit(241.277:15607): avc: denied { relabelfrom } for pid=13650 comm="syz.8.2685" name="" dev="pipefs" ino=54144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 252.599282][T13654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.628478][T13654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.637752][ T29] audit: type=1400 audit(241.305:15608): avc: denied { ioctl } for pid=13650 comm="syz.8.2685" path="socket:[54145]" dev="sockfs" ino=54145 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 252.699368][T13676] tipc: Enabled bearer , priority 0 [ 252.711564][T13683] tipc: Resetting bearer [ 252.719137][T13672] tipc: Disabling bearer [ 252.736837][ T29] audit: type=1400 audit(241.305:15609): avc: denied { write } for pid=13650 comm="syz.8.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 252.755794][ T29] audit: type=1400 audit(241.333:15610): avc: denied { execmem } for pid=13689 comm="syz.9.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 252.843299][T13695] loop4: detected capacity change from 0 to 1024 [ 252.857932][ T29] audit: type=1400 audit(241.511:15611): avc: denied { mounton } for pid=13694 comm="syz.4.2697" path="/304/file0" dev="tmpfs" ino=1622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 252.882679][T13695] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 252.908421][T13697] FAULT_INJECTION: forcing a failure. [ 252.908421][T13697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.921556][T13697] CPU: 0 UID: 0 PID: 13697 Comm: syz.5.2698 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 252.921628][T13697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.921644][T13697] Call Trace: [ 252.921653][T13697] [ 252.921663][T13697] __dump_stack+0x1d/0x30 [ 252.921689][T13697] dump_stack_lvl+0xe8/0x140 [ 252.921707][T13697] dump_stack+0x15/0x1b [ 252.921729][T13697] should_fail_ex+0x265/0x280 [ 252.921792][T13697] should_fail+0xb/0x20 [ 252.921842][T13697] should_fail_usercopy+0x1a/0x20 [ 252.921861][T13697] _copy_from_iter+0xcf/0xe40 [ 252.921887][T13697] ? __build_skb_around+0x1a0/0x200 [ 252.921968][T13697] ? __alloc_skb+0x223/0x320 [ 252.921999][T13697] netlink_sendmsg+0x471/0x6b0 [ 252.922034][T13697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.922085][T13697] __sock_sendmsg+0x142/0x180 [ 252.922184][T13697] ____sys_sendmsg+0x31e/0x4e0 [ 252.922234][T13697] ___sys_sendmsg+0x17b/0x1d0 [ 252.922281][T13697] __x64_sys_sendmsg+0xd4/0x160 [ 252.922329][T13697] x64_sys_call+0x191e/0x2ff0 [ 252.922406][T13697] do_syscall_64+0xd2/0x200 [ 252.922430][T13697] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 252.922457][T13697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.922484][T13697] RIP: 0033:0x7f7742d6eb69 [ 252.922576][T13697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.922594][T13697] RSP: 002b:00007f77413d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.922614][T13697] RAX: ffffffffffffffda RBX: 00007f7742f95fa0 RCX: 00007f7742d6eb69 [ 252.922626][T13697] RDX: 000000002008c014 RSI: 0000200000000580 RDI: 0000000000000006 [ 252.922642][T13697] RBP: 00007f77413d7090 R08: 0000000000000000 R09: 0000000000000000 [ 252.922674][T13697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.922690][T13697] R13: 0000000000000000 R14: 00007f7742f95fa0 R15: 00007ffee94c2088 [ 252.922714][T13697] [ 252.941412][T13695] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 253.148155][T13695] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 253.187881][T13695] EXT4-fs (loop4): orphan cleanup on readonly fs [ 253.210393][ T29] audit: type=1400 audit(241.829:15612): avc: denied { write } for pid=13703 comm="syz.5.2701" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 253.244598][T13695] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.2697: Inode bitmap for bg 0 marked uninitialized [ 253.291628][T13695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 253.307312][T13712] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2704'. [ 253.370475][T13695] FAULT_INJECTION: forcing a failure. [ 253.370475][T13695] name failslab, interval 1, probability 0, space 0, times 0 [ 253.383273][T13695] CPU: 1 UID: 0 PID: 13695 Comm: syz.4.2697 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 253.383389][T13695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 253.383405][T13695] Call Trace: [ 253.383412][T13695] [ 253.383421][T13695] __dump_stack+0x1d/0x30 [ 253.383443][T13695] dump_stack_lvl+0xe8/0x140 [ 253.383477][T13695] dump_stack+0x15/0x1b [ 253.383497][T13695] should_fail_ex+0x265/0x280 [ 253.383607][T13695] ? audit_log_d_path+0x8d/0x150 [ 253.383684][T13695] should_failslab+0x8c/0xb0 [ 253.383716][T13695] __kmalloc_cache_noprof+0x4c/0x320 [ 253.383803][T13695] audit_log_d_path+0x8d/0x150 [ 253.383833][T13695] audit_log_d_path_exe+0x42/0x70 [ 253.383904][T13695] audit_log_task+0x1e9/0x250 [ 253.383942][T13695] audit_seccomp+0x61/0x100 [ 253.383971][T13695] ? __seccomp_filter+0x68c/0x10d0 [ 253.384000][T13695] __seccomp_filter+0x69d/0x10d0 [ 253.384029][T13695] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 253.384061][T13695] ? vfs_write+0x75e/0x8e0 [ 253.384168][T13695] ? __rcu_read_unlock+0x4f/0x70 [ 253.384192][T13695] ? __fget_files+0x184/0x1c0 [ 253.384252][T13695] __secure_computing+0x82/0x150 [ 253.384275][T13695] syscall_trace_enter+0xcf/0x1e0 [ 253.384300][T13695] do_syscall_64+0xac/0x200 [ 253.384326][T13695] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 253.384356][T13695] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 253.384413][T13695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.384441][T13695] RIP: 0033:0x7f5df63beb69 [ 253.384460][T13695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.384542][T13695] RSP: 002b:00007f5df4a27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.384567][T13695] RAX: ffffffffffffffda RBX: 00007f5df65e5fa0 RCX: 00007f5df63beb69 [ 253.384584][T13695] RDX: 0000200000000080 RSI: 0000000000002284 RDI: 000000000000000c [ 253.384598][T13695] RBP: 00007f5df4a27090 R08: 0000000000000000 R09: 0000000000000000 [ 253.384614][T13695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.384629][T13695] R13: 0000000000000000 R14: 00007f5df65e5fa0 R15: 00007ffd21aaac78 [ 253.384654][T13695] [ 253.385164][T13717] tipc: Enabled bearer , priority 0 [ 253.408239][T13695] sd 0:0:1:0: device reset [ 253.415832][T13717] tipc: Resetting bearer [ 253.702306][T13716] tipc: Disabling bearer [ 253.718973][ T9563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.827879][T13723] loop9: detected capacity change from 0 to 512 [ 253.906188][T13723] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 254.188416][T13729] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2711'. [ 254.205287][T13729] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2711'. [ 254.231197][T13723] EXT4-fs (loop9): 1 truncate cleaned up [ 254.277895][T13723] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.468720][ T9689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.852115][T13775] FAULT_INJECTION: forcing a failure. [ 254.852115][T13775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.865323][T13775] CPU: 1 UID: 0 PID: 13775 Comm: syz.3.2728 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 254.865360][T13775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.865372][T13775] Call Trace: [ 254.865444][T13775] [ 254.865454][T13775] __dump_stack+0x1d/0x30 [ 254.865479][T13775] dump_stack_lvl+0xe8/0x140 [ 254.865502][T13775] dump_stack+0x15/0x1b [ 254.865523][T13775] should_fail_ex+0x265/0x280 [ 254.865557][T13775] should_fail+0xb/0x20 [ 254.865641][T13775] should_fail_usercopy+0x1a/0x20 [ 254.865703][T13775] _copy_from_user+0x1c/0xb0 [ 254.865730][T13775] ____sys_sendmsg+0x1c5/0x4e0 [ 254.865776][T13775] ___sys_sendmsg+0x17b/0x1d0 [ 254.865837][T13775] __x64_sys_sendmsg+0xd4/0x160 [ 254.865876][T13775] x64_sys_call+0x191e/0x2ff0 [ 254.865903][T13775] do_syscall_64+0xd2/0x200 [ 254.866001][T13775] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 254.866025][T13775] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 254.866113][T13775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.866160][T13775] RIP: 0033:0x7f218210eb69 [ 254.866179][T13775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.866292][T13775] RSP: 002b:00007f2180756038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.866318][T13775] RAX: ffffffffffffffda RBX: 00007f2182336080 RCX: 00007f218210eb69 [ 254.866413][T13775] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 254.866426][T13775] RBP: 00007f2180756090 R08: 0000000000000000 R09: 0000000000000000 [ 254.866441][T13775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.866457][T13775] R13: 0000000000000000 R14: 00007f2182336080 R15: 00007ffe152f70e8 [ 254.866482][T13775] [ 255.095647][T13782] loop4: detected capacity change from 0 to 2048 [ 255.125863][T13782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.187444][T13788] lo speed is unknown, defaulting to 1000 [ 255.404727][ T9563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.600993][T13807] lo speed is unknown, defaulting to 1000 [ 255.659764][T13807] siw: device registration error -23 [ 256.530954][T13830] __nla_validate_parse: 2 callbacks suppressed [ 256.530974][T13830] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2750'. [ 256.725167][T13834] lo speed is unknown, defaulting to 1000 [ 256.818974][T13834] siw: device registration error -23 [ 257.208691][T13842] lo speed is unknown, defaulting to 1000 [ 257.444832][T13839] loop9: detected capacity change from 0 to 512 [ 257.554259][T13839] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 257.582239][T13849] lo speed is unknown, defaulting to 1000 [ 257.643231][T13839] EXT4-fs (loop9): 1 truncate cleaned up [ 257.655878][T13839] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.656107][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 257.656123][ T29] audit: type=1400 audit(246.000:15910): avc: denied { mount } for pid=13832 comm="syz.9.2751" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 257.690215][ T29] audit: type=1400 audit(246.038:15911): avc: denied { unmount } for pid=9689 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 257.691067][ T9689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.800831][T13857] lo speed is unknown, defaulting to 1000 [ 257.857276][ T29] audit: type=1400 audit(246.187:15912): avc: denied { open } for pid=13859 comm="syz.3.2759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 257.857350][ T29] audit: type=1400 audit(246.187:15913): avc: denied { kernel } for pid=13859 comm="syz.3.2759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 257.879227][ T29] audit: type=1326 audit(246.197:15914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.3.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218210eb69 code=0x7ffc0000 [ 257.879267][ T29] audit: type=1326 audit(246.197:15915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.3.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f218210eb69 code=0x7ffc0000 [ 257.879294][ T29] audit: type=1326 audit(246.197:15916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.3.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218210eb69 code=0x7ffc0000 [ 257.879341][ T29] audit: type=1326 audit(246.197:15917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.3.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f218210eb69 code=0x7ffc0000 [ 257.879459][ T29] audit: type=1326 audit(246.197:15918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.3.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f218210eba3 code=0x7ffc0000 [ 257.879494][ T29] audit: type=1326 audit(246.197:15919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.3.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f218210d61f code=0x7ffc0000 [ 258.094805][T13874] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2762'. [ 258.436623][T13885] hub 9-0:1.0: USB hub found [ 258.443044][T13885] hub 9-0:1.0: 8 ports detected [ 258.597865][T13892] netlink: 'syz.4.2771': attribute type 10 has an invalid length. [ 258.607066][T13892] team0: Device ipvlan0 failed to register rx_handler [ 258.684285][T13904] tipc: Enabling of bearer rejected, failed to enable media [ 258.974128][T13922] netlink: 'syz.8.2780': attribute type 10 has an invalid length. [ 258.992532][T13922] ipvlan0: entered allmulticast mode [ 258.997947][T13922] veth0_vlan: entered allmulticast mode [ 259.012001][T13922] team0: Device ipvlan0 failed to register rx_handler [ 259.094706][T13925] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2781'. [ 259.315628][T13943] tipc: Enabling of bearer rejected, failed to enable media [ 259.332360][T13944] netlink: 'syz.3.2790': attribute type 10 has an invalid length. [ 259.340641][T13944] ipvlan0: entered allmulticast mode [ 259.346118][T13944] veth0_vlan: entered allmulticast mode [ 259.356270][T13944] team0: Device ipvlan0 failed to register rx_handler [ 259.471595][T13953] lo speed is unknown, defaulting to 1000 [ 259.564689][T13959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2795'. [ 259.750163][T13974] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2802'. [ 259.775362][T13978] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2800'. [ 259.862144][T13980] loop4: detected capacity change from 0 to 512 [ 259.870251][T13980] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 259.879809][T13980] EXT4-fs (loop4): orphan cleanup on readonly fs [ 259.886647][T13980] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2803: Failed to acquire dquot type 1 [ 259.899223][T13980] EXT4-fs (loop4): 1 truncate cleaned up [ 259.905564][T13980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 259.946208][ T9563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.003485][T13985] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2805'. [ 260.003710][T13983] loop9: detected capacity change from 0 to 128 [ 260.036051][T13985] loop4: detected capacity change from 0 to 1024 [ 260.041089][T13983] FAT-fs (loop9): Directory bread(block 162) failed [ 260.049209][T13983] FAT-fs (loop9): Directory bread(block 163) failed [ 260.056117][T13983] FAT-fs (loop9): Directory bread(block 164) failed [ 260.064699][T13983] FAT-fs (loop9): Directory bread(block 165) failed [ 260.077875][T13985] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 260.085689][T13983] FAT-fs (loop9): Directory bread(block 166) failed [ 260.098734][T13983] FAT-fs (loop9): Directory bread(block 167) failed [ 260.105553][T13985] System zones: 0-1, 3-36 [ 260.110721][T13983] FAT-fs (loop9): Directory bread(block 168) failed [ 260.118290][T13985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.123390][T13983] FAT-fs (loop9): Directory bread(block 169) failed [ 260.289173][T13988] bond0 (unregistering): Released all slaves [ 260.319929][T13992] lo speed is unknown, defaulting to 1000 [ 260.330159][T13983] FAT-fs (loop9): Directory bread(block 162) failed [ 260.340209][T13983] FAT-fs (loop9): Directory bread(block 163) failed [ 260.369833][ T9563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.379679][T13983] syz.9.2804: attempt to access beyond end of device [ 260.379679][T13983] loop9: rw=3, sector=226, nr_sectors = 6 limit=128 [ 260.393541][T13983] syz.9.2804: attempt to access beyond end of device [ 260.393541][T13983] loop9: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 260.443990][T14001] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2809'. [ 260.588787][T14009] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2813'. [ 260.670388][T14012] netlink: 92 bytes leftover after parsing attributes in process `syz.8.2815'. [ 260.751992][T14024] lo speed is unknown, defaulting to 1000 [ 260.829894][T14034] hub 9-0:1.0: USB hub found [ 260.834826][T14034] hub 9-0:1.0: 8 ports detected [ 261.312331][T14051] lo speed is unknown, defaulting to 1000 [ 261.424624][T14051] siw: device registration error -23 [ 261.713688][T14053] loop4: detected capacity change from 0 to 512 [ 261.750521][T14053] EXT4-fs: Ignoring removed nobh option [ 261.861701][T14053] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 261.873347][T14053] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 261.883477][T14053] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2830: Corrupt directory, running e2fsck is recommended [ 261.921748][T14053] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 261.932064][T14053] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.2830: corrupted in-inode xattr: invalid ea_ino [ 262.036507][T14053] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2830: couldn't read orphan inode 15 (err -117) [ 262.039946][T14070] tipc: Enabling of bearer rejected, failed to enable media [ 262.070035][T14053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.092155][T14053] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.286475][T14083] __nla_validate_parse: 3 callbacks suppressed [ 262.286491][T14083] netlink: 92 bytes leftover after parsing attributes in process `syz.9.2841'. [ 262.483095][T14087] lo speed is unknown, defaulting to 1000 [ 262.547597][T14092] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2844'. [ 262.617408][T14095] loop4: detected capacity change from 0 to 128 [ 262.651897][T14095] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 262.659821][T14095] FAT-fs (loop4): Filesystem has been set read-only [ 262.705247][T14095] syz.4.2845: attempt to access beyond end of device [ 262.705247][T14095] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 262.758762][T14095] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 262.766678][T14095] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 262.775046][T14100] syz.4.2845: attempt to access beyond end of device [ 262.775046][T14100] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 262.775091][T14100] buffer_io_error: 28358 callbacks suppressed [ 262.775106][T14100] Buffer I/O error on dev loop4, logical block 2065, async page read [ 262.775176][T14100] syz.4.2845: attempt to access beyond end of device [ 262.775176][T14100] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 262.775305][T14100] Buffer I/O error on dev loop4, logical block 2066, async page read [ 262.776367][T14100] syz.4.2845: attempt to access beyond end of device [ 262.776367][T14100] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 262.776471][T14100] Buffer I/O error on dev loop4, logical block 2067, async page read [ 262.776525][T14100] syz.4.2845: attempt to access beyond end of device [ 262.776525][T14100] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 262.776551][T14100] Buffer I/O error on dev loop4, logical block 2068, async page read [ 262.776683][T14100] syz.4.2845: attempt to access beyond end of device [ 262.776683][T14100] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 262.776712][T14100] Buffer I/O error on dev loop4, logical block 2069, async page read [ 262.776902][T14100] syz.4.2845: attempt to access beyond end of device [ 262.776902][T14100] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 262.776929][T14100] Buffer I/O error on dev loop4, logical block 2070, async page read [ 262.777035][T14100] syz.4.2845: attempt to access beyond end of device [ 262.777035][T14100] loop4: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 262.777056][T14100] Buffer I/O error on dev loop4, logical block 2071, async page read [ 262.777075][T14100] Buffer I/O error on dev loop4, logical block 2072, async page read [ 262.777112][T14100] Buffer I/O error on dev loop4, logical block 2065, async page read [ 262.777201][T14100] Buffer I/O error on dev loop4, logical block 2066, async page read [ 262.909880][T14100] Invalid ELF header magic: != ELF [ 263.631571][ T29] kauditd_printk_skb: 587 callbacks suppressed [ 263.631604][ T29] audit: type=1400 audit(251.590:16505): avc: denied { recv } for pid=14072 comm="syz.3.2839" saddr=10.128.0.163 src=30036 daddr=10.128.1.10 dest=40460 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 263.721813][T14109] hub 9-0:1.0: USB hub found [ 263.725627][ T29] audit: type=1400 audit(251.637:16506): avc: denied { read write } for pid=9689 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.726664][T14109] hub 9-0:1.0: 8 ports detected [ 263.750266][ T29] audit: type=1400 audit(251.637:16507): avc: denied { open } for pid=9689 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.778748][ T29] audit: type=1400 audit(251.637:16508): avc: denied { ioctl } for pid=9689 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.803898][ T29] audit: type=1400 audit(251.656:16509): avc: denied { map_create } for pid=14108 comm="syz.9.2851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 263.822731][ T29] audit: type=1400 audit(251.656:16510): avc: denied { map_read map_write } for pid=14108 comm="syz.9.2851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 263.842205][ T29] audit: type=1400 audit(251.656:16511): avc: denied { read } for pid=14110 comm="syz.8.2850" dev="nsfs" ino=4026532370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 263.863313][ T29] audit: type=1400 audit(251.656:16512): avc: denied { open } for pid=14110 comm="syz.8.2850" path="net:[4026532370]" dev="nsfs" ino=4026532370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 263.886256][ T29] audit: type=1400 audit(251.656:16513): avc: denied { create } for pid=14110 comm="syz.8.2850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 263.905932][ T29] audit: type=1400 audit(251.665:16514): avc: denied { unmount } for pid=9563 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 264.249816][T14123] siw: device registration error -23 [ 264.565278][T14128] netlink: 'syz.9.2856': attribute type 10 has an invalid length. [ 264.615757][T14128] ipvlan0: entered allmulticast mode [ 264.621145][T14128] veth0_vlan: entered allmulticast mode [ 264.658983][T14128] team0: Device ipvlan0 failed to register rx_handler [ 264.980823][T14139] siw: device registration error -23 [ 265.156349][T14146] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2864'. [ 265.165602][T14146] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2864'. [ 265.327482][T14148] hub 9-0:1.0: USB hub found [ 265.358614][T14148] hub 9-0:1.0: 8 ports detected [ 265.596755][T14161] lo speed is unknown, defaulting to 1000 [ 265.765847][T14165] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2870'. [ 265.812658][T14166] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2871'. [ 265.869466][T14170] lo speed is unknown, defaulting to 1000 [ 265.985591][T14179] hub 9-0:1.0: USB hub found [ 265.997851][T14179] hub 9-0:1.0: 8 ports detected [ 266.038519][T14189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.058851][T14189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.139267][T14193] netlink: 92 bytes leftover after parsing attributes in process `syz.9.2884'. [ 266.172071][T14195] loop4: detected capacity change from 0 to 512 [ 266.189530][T14195] EXT4-fs: Ignoring removed nobh option [ 266.214204][T14195] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 266.225866][T14195] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 266.236078][T14195] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2885: Corrupt directory, running e2fsck is recommended [ 266.255017][T14195] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 266.271220][T14195] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.2885: corrupted in-inode xattr: invalid ea_ino [ 266.286187][T14195] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2885: couldn't read orphan inode 15 (err -117) [ 266.301614][T14195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.317393][T14195] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.580870][T14214] siw: device registration error -23 [ 266.872068][T14221] hub 9-0:1.0: USB hub found [ 266.954418][T14221] hub 9-0:1.0: 8 ports detected [ 267.013938][T14231] loop4: detected capacity change from 0 to 1024 [ 267.023180][T14231] EXT4-fs: Invalid want_extra_isize 2700 [ 267.038543][T14231] program syz.4.2899 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.094114][T14231] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 267.108785][T14236] siw: device registration error -23 [ 267.294655][T14241] netlink: 'syz.5.2903': attribute type 10 has an invalid length. [ 267.303236][T14241] ipvlan0: entered allmulticast mode [ 267.308707][T14241] veth0_vlan: entered allmulticast mode [ 267.312259][T14241] team0: Device ipvlan0 failed to register rx_handler [ 267.358805][T14249] loop4: detected capacity change from 0 to 512 [ 267.374010][T14247] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2907'. [ 267.387584][T14249] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 267.396247][T14247] hsr_slave_0: left promiscuous mode [ 267.404775][T14247] hsr_slave_1: left promiscuous mode [ 267.418232][T14249] EXT4-fs (loop4): orphan cleanup on readonly fs [ 267.429385][T14249] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2908: Failed to acquire dquot type 1 [ 267.448539][T14249] EXT4-fs (loop4): 1 truncate cleaned up [ 267.455778][T14249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 267.655618][ T9563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.758053][T14268] lo speed is unknown, defaulting to 1000 [ 267.816049][T14268] siw: device registration error -23 [ 269.030026][T14278] lo speed is unknown, defaulting to 1000 [ 269.302501][T14278] siw: device registration error -23 [ 269.384768][ T29] kauditd_printk_skb: 444 callbacks suppressed [ 269.384789][ T29] audit: type=1326 audit(256.961:16955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.3.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21820aad69 code=0x7ffc0000 [ 269.414018][ T29] audit: type=1326 audit(256.961:16956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.3.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218210eb69 code=0x7ffc0000 [ 269.437122][ T29] audit: type=1326 audit(256.961:16957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.3.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218210eb69 code=0x7ffc0000 [ 269.488505][T14274] lo speed is unknown, defaulting to 1000 [ 269.519175][ T29] audit: type=1326 audit(257.045:16958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.3.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f218210eb69 code=0x7ffc0000 [ 269.542337][ T29] audit: type=1326 audit(257.045:16959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.3.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218210eb69 code=0x7ffc0000 [ 269.565500][ T29] audit: type=1326 audit(257.045:16960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14270 comm="syz.3.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218210eb69 code=0x7ffc0000 [ 269.614509][T14283] 9pnet_fd: Insufficient options for proto=fd [ 269.705721][T14293] loop9: detected capacity change from 0 to 512 [ 269.712803][ T29] audit: type=1400 audit(257.176:16961): avc: denied { create } for pid=14284 comm="syz.4.2922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 269.731949][ T29] audit: type=1400 audit(257.176:16962): avc: denied { write } for pid=14284 comm="syz.4.2922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 269.750937][ T29] audit: type=1400 audit(257.176:16963): avc: denied { create } for pid=14282 comm="syz.9.2921" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 269.771234][ T29] audit: type=1400 audit(257.186:16964): avc: denied { mounton } for pid=14282 comm="syz.9.2921" path="/315/file0" dev="tmpfs" ino=1681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 269.825854][T14293] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 269.875113][T14293] EXT4-fs (loop9): orphan cleanup on readonly fs [ 269.889441][T14306] loop4: detected capacity change from 0 to 512 [ 269.929305][T14293] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.2925: Failed to acquire dquot type 1 [ 269.942354][T14306] EXT4-fs: Ignoring removed nobh option [ 269.993409][T14293] EXT4-fs (loop9): 1 truncate cleaned up [ 270.000260][T14306] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 270.011895][T14306] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 270.022072][T14306] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2931: Corrupt directory, running e2fsck is recommended [ 270.045684][T14293] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 270.064708][T14306] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 270.093916][T14306] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.2931: corrupted in-inode xattr: invalid ea_ino [ 270.108864][ T9689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.122348][T14306] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2931: couldn't read orphan inode 15 (err -117) [ 270.169356][T14306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.227524][T14323] lo speed is unknown, defaulting to 1000 [ 270.234135][T14306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.279596][T14327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.289727][T14327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.307637][T14326] loop9: detected capacity change from 0 to 512 [ 270.367662][T14326] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.2934: casefold flag without casefold feature [ 270.381958][T14326] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.2934: couldn't read orphan inode 15 (err -117) [ 270.411725][T14326] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.435421][T14326] geneve0: entered promiscuous mode [ 270.440759][T14326] geneve0: entered allmulticast mode [ 270.502157][ T9689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.141890][T14389] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2963'. [ 271.180723][T14392] loop9: detected capacity change from 0 to 512 [ 271.233875][T14392] loop9: detected capacity change from 0 to 512 [ 271.246022][T14392] journal_path: Lookup failure for './file0/../file0' [ 271.252967][T14392] EXT4-fs: error: could not find journal device path [ 271.277712][T14401] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2968'. [ 271.307834][T14405] loop4: detected capacity change from 0 to 512 [ 271.315161][T14405] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 271.328362][T14405] EXT4-fs (loop4): orphan cleanup on readonly fs [ 271.335147][T14405] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2966: Failed to acquire dquot type 1 [ 271.350428][T14405] EXT4-fs (loop4): 1 truncate cleaned up [ 271.357038][T14405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 271.490599][T14420] FAULT_INJECTION: forcing a failure. [ 271.490599][T14420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.503827][T14420] CPU: 1 UID: 0 PID: 14420 Comm: syz.8.2975 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 271.503873][T14420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 271.503963][T14420] Call Trace: [ 271.503973][T14420] [ 271.503984][T14420] __dump_stack+0x1d/0x30 [ 271.504010][T14420] dump_stack_lvl+0xe8/0x140 [ 271.504037][T14420] dump_stack+0x15/0x1b [ 271.504105][T14420] should_fail_ex+0x265/0x280 [ 271.504144][T14420] should_fail+0xb/0x20 [ 271.504182][T14420] should_fail_usercopy+0x1a/0x20 [ 271.504208][T14420] _copy_from_iter+0xcf/0xe40 [ 271.504258][T14420] ? __build_skb_around+0x1a0/0x200 [ 271.504287][T14420] ? __alloc_skb+0x223/0x320 [ 271.504322][T14420] netlink_sendmsg+0x471/0x6b0 [ 271.504397][T14420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.504431][T14420] __sock_sendmsg+0x142/0x180 [ 271.504463][T14420] ____sys_sendmsg+0x31e/0x4e0 [ 271.504498][T14420] ___sys_sendmsg+0x17b/0x1d0 [ 271.504627][T14420] __x64_sys_sendmsg+0xd4/0x160 [ 271.504679][T14420] x64_sys_call+0x191e/0x2ff0 [ 271.504701][T14420] do_syscall_64+0xd2/0x200 [ 271.504728][T14420] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 271.504833][T14420] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 271.504864][T14420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.504887][T14420] RIP: 0033:0x7f29529feb69 [ 271.504935][T14420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.504959][T14420] RSP: 002b:00007f2951067038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.505021][T14420] RAX: ffffffffffffffda RBX: 00007f2952c25fa0 RCX: 00007f29529feb69 [ 271.505039][T14420] RDX: 000000000000c004 RSI: 0000200000000040 RDI: 0000000000000005 [ 271.505054][T14420] RBP: 00007f2951067090 R08: 0000000000000000 R09: 0000000000000000 [ 271.505069][T14420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.505083][T14420] R13: 0000000000000000 R14: 00007f2952c25fa0 R15: 00007ffec27d75c8 [ 271.505181][T14420] [ 271.730869][T14422] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2976'. [ 272.146084][ T9563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.785043][T14453] vlan2: entered allmulticast mode [ 272.790236][T14453] dummy0: entered allmulticast mode [ 272.804154][T14456] loop9: detected capacity change from 0 to 512 [ 272.888510][T14461] loop9: detected capacity change from 0 to 128 [ 272.900180][T14463] 9pnet_fd: Insufficient options for proto=fd [ 272.946596][T14461] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 272.954533][T14461] FAT-fs (loop9): Filesystem has been set read-only [ 272.974226][T14461] bio_check_eod: 20585 callbacks suppressed [ 272.974244][T14461] syz.9.2992: attempt to access beyond end of device [ 272.974244][T14461] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 272.999450][T14461] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 273.007565][T14461] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 273.021919][T14461] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 273.039188][T14461] syz.9.2992: attempt to access beyond end of device [ 273.039188][T14461] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 273.059165][T14461] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 273.067218][T14461] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 273.091857][T14472] syz.9.2992: attempt to access beyond end of device [ 273.091857][T14472] loop9: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 273.105160][T14472] buffer_io_error: 20582 callbacks suppressed [ 273.105241][T14472] Buffer I/O error on dev loop9, logical block 2065, async page read [ 273.122461][T14472] syz.9.2992: attempt to access beyond end of device [ 273.122461][T14472] loop9: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 273.136034][T14472] Buffer I/O error on dev loop9, logical block 2066, async page read [ 273.146588][T14472] syz.9.2992: attempt to access beyond end of device [ 273.146588][T14472] loop9: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 273.159996][T14472] Buffer I/O error on dev loop9, logical block 2067, async page read [ 273.168439][T14472] syz.9.2992: attempt to access beyond end of device [ 273.168439][T14472] loop9: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 273.181779][T14472] Buffer I/O error on dev loop9, logical block 2068, async page read [ 273.204606][T14472] syz.9.2992: attempt to access beyond end of device [ 273.204606][T14472] loop9: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 273.217964][T14472] Buffer I/O error on dev loop9, logical block 2069, async page read [ 273.227428][T14472] syz.9.2992: attempt to access beyond end of device [ 273.227428][T14472] loop9: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 273.240764][T14472] Buffer I/O error on dev loop9, logical block 2070, async page read [ 273.250117][T14472] syz.9.2992: attempt to access beyond end of device [ 273.250117][T14472] loop9: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 273.263543][T14472] Buffer I/O error on dev loop9, logical block 2071, async page read [ 273.271861][T14472] syz.9.2992: attempt to access beyond end of device [ 273.271861][T14472] loop9: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 273.285140][T14472] Buffer I/O error on dev loop9, logical block 2072, async page read [ 273.293741][T14460] Buffer I/O error on dev loop9, logical block 2065, async page read [ 273.301952][T14460] Buffer I/O error on dev loop9, logical block 2066, async page read [ 273.324203][T14472] Invalid ELF header magic: != ELF [ 273.971895][T14502] netlink: 256 bytes leftover after parsing attributes in process `syz.9.3009'. [ 274.275609][T14524] hub 9-0:1.0: USB hub found [ 274.288190][T14524] hub 9-0:1.0: 8 ports detected [ 274.298537][T14526] loop4: detected capacity change from 0 to 512 [ 274.306338][T14526] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 274.318179][T14526] EXT4-fs (loop4): orphan cleanup on readonly fs [ 274.326370][T14526] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3018: Failed to acquire dquot type 1 [ 274.338244][T14526] EXT4-fs (loop4): 1 truncate cleaned up [ 274.345196][T14526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 274.784240][ T29] kauditd_printk_skb: 608 callbacks suppressed [ 274.784257][ T29] audit: type=1400 audit(262.022:17567): avc: denied { create } for pid=14541 comm="syz.5.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 274.811555][ T29] audit: type=1400 audit(262.040:17568): avc: denied { getopt } for pid=14541 comm="syz.5.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 274.857502][T14547] 9pnet_fd: Insufficient options for proto=fd [ 274.881446][T14548] lo speed is unknown, defaulting to 1000 [ 274.989300][T14548] siw: device registration error -23 [ 275.145065][ T9563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.170059][ T29] audit: type=1400 audit(262.087:17569): avc: denied { create } for pid=14546 comm="syz.8.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 275.189132][ T29] audit: type=1400 audit(262.087:17570): avc: denied { ioctl } for pid=14546 comm="syz.8.3027" path="socket:[57698]" dev="sockfs" ino=57698 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 275.213405][ T29] audit: type=1400 audit(262.087:17571): avc: denied { bind } for pid=14546 comm="syz.8.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 275.232247][ T29] audit: type=1400 audit(262.087:17572): avc: denied { create } for pid=14546 comm="syz.8.3027" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 275.252612][ T29] audit: type=1400 audit(262.096:17573): avc: denied { mounton } for pid=14546 comm="syz.8.3027" path="/385/file0" dev="tmpfs" ino=2009 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 275.275310][ T29] audit: type=1400 audit(262.218:17574): avc: denied { read write } for pid=14541 comm="syz.5.3025" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 275.298534][ T29] audit: type=1400 audit(262.218:17575): avc: denied { open } for pid=14541 comm="syz.5.3025" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 275.321639][ T29] audit: type=1400 audit(262.218:17576): avc: denied { create } for pid=14541 comm="syz.5.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 275.458066][T14560] loop9: detected capacity change from 0 to 128 [ 275.468128][T14560] FAT-fs (loop9): Directory bread(block 162) failed [ 275.484915][T14560] FAT-fs (loop9): Directory bread(block 163) failed [ 275.539998][T14560] FAT-fs (loop9): Directory bread(block 164) failed [ 275.547049][T14560] FAT-fs (loop9): Directory bread(block 165) failed [ 275.554999][T14560] FAT-fs (loop9): Directory bread(block 166) failed [ 275.593032][T14560] FAT-fs (loop9): Directory bread(block 167) failed [ 275.621369][T14560] FAT-fs (loop9): Directory bread(block 168) failed [ 275.637089][T14560] FAT-fs (loop9): Directory bread(block 169) failed [ 275.646487][T14560] FAT-fs (loop9): Directory bread(block 162) failed [ 275.654735][T14560] FAT-fs (loop9): Directory bread(block 163) failed [ 275.981852][T14594] netlink: 'syz.5.3046': attribute type 10 has an invalid length. [ 275.983434][T14594] team0: Device ipvlan0 failed to register rx_handler [ 276.020618][T14596] loop9: detected capacity change from 0 to 128 [ 276.054284][T14596] FAT-fs (loop9): Directory bread(block 162) failed [ 276.070753][T14596] FAT-fs (loop9): Directory bread(block 163) failed [ 276.079142][T14596] FAT-fs (loop9): Directory bread(block 164) failed [ 276.086422][T14596] FAT-fs (loop9): Directory bread(block 165) failed [ 276.093531][T14596] FAT-fs (loop9): Directory bread(block 166) failed [ 276.101146][T14596] FAT-fs (loop9): Directory bread(block 167) failed [ 276.107843][T14596] FAT-fs (loop9): Directory bread(block 168) failed [ 276.114614][T14596] FAT-fs (loop9): Directory bread(block 169) failed [ 276.127055][T14596] FAT-fs (loop9): Directory bread(block 162) failed [ 276.134144][T14596] FAT-fs (loop9): Directory bread(block 163) failed [ 276.217151][T14602] loop9: detected capacity change from 0 to 512 [ 276.229787][T14602] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 276.260362][T14602] EXT4-fs (loop9): orphan cleanup on readonly fs [ 276.267394][T14602] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.3051: Failed to acquire dquot type 1 [ 276.268088][T14602] EXT4-fs (loop9): 1 truncate cleaned up [ 276.288824][T14602] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 276.327792][T14604] netlink: 'syz.8.3052': attribute type 10 has an invalid length. [ 276.342161][T14604] team0: Device ipvlan0 failed to register rx_handler [ 276.354391][ T9689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.368818][T14612] loop4: detected capacity change from 0 to 512 [ 276.380646][T14614] FAULT_INJECTION: forcing a failure. [ 276.380646][T14614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.384204][T14612] EXT4-fs: Ignoring removed nobh option [ 276.393943][T14614] CPU: 0 UID: 0 PID: 14614 Comm: syz.5.3055 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 276.394011][T14614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.394031][T14614] Call Trace: [ 276.394041][T14614] [ 276.394050][T14614] __dump_stack+0x1d/0x30 [ 276.394078][T14614] dump_stack_lvl+0xe8/0x140 [ 276.394123][T14614] dump_stack+0x15/0x1b [ 276.394230][T14614] should_fail_ex+0x265/0x280 [ 276.394351][T14614] should_fail+0xb/0x20 [ 276.394391][T14614] should_fail_usercopy+0x1a/0x20 [ 276.394436][T14614] _copy_from_user+0x1c/0xb0 [ 276.394471][T14614] eventfd_write+0x73/0x3b0 [ 276.394503][T14614] ? __pfx_eventfd_write+0x10/0x10 [ 276.394533][T14614] vfs_write+0x269/0x8e0 [ 276.394601][T14614] ? __rcu_read_unlock+0x4f/0x70 [ 276.394630][T14614] ? __fget_files+0x184/0x1c0 [ 276.394743][T14614] ksys_write+0xda/0x1a0 [ 276.394774][T14614] __x64_sys_write+0x40/0x50 [ 276.394840][T14614] x64_sys_call+0x27fe/0x2ff0 [ 276.394869][T14614] do_syscall_64+0xd2/0x200 [ 276.394901][T14614] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 276.394935][T14614] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 276.395038][T14614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.395068][T14614] RIP: 0033:0x7f7742d6eb69 [ 276.395088][T14614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.395178][T14614] RSP: 002b:00007f77413d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 276.395203][T14614] RAX: ffffffffffffffda RBX: 00007f7742f95fa0 RCX: 00007f7742d6eb69 [ 276.395221][T14614] RDX: 0000000000000008 RSI: 0000200000000140 RDI: 0000000000000004 [ 276.395238][T14614] RBP: 00007f77413d7090 R08: 0000000000000000 R09: 0000000000000000 [ 276.395256][T14614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.395273][T14614] R13: 0000000000000000 R14: 00007f7742f95fa0 R15: 00007ffee94c2088 [ 276.395297][T14614] [ 276.441824][T14617] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3057'. [ 276.480332][T14612] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 276.491054][T14622] loop9: detected capacity change from 0 to 1024 [ 276.492799][T14612] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 276.511206][T14622] EXT4-fs: Invalid want_extra_isize 2700 [ 276.513941][T14612] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3054: Corrupt directory, running e2fsck is recommended [ 276.521003][T14612] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 276.592749][T14624] lo speed is unknown, defaulting to 1000 [ 276.618998][T14624] siw: device registration error -23 [ 276.684286][T14612] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.3054: corrupted in-inode xattr: invalid ea_ino [ 276.698694][T14612] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3054: couldn't read orphan inode 15 (err -117) [ 276.721204][T14612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.754611][T14612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.797328][T14622] program syz.9.3056 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.806756][T14622] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 276.832003][T14622] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3056'. [ 276.872315][T14622] siw: device registration error -23 [ 276.932420][T14638] lo speed is unknown, defaulting to 1000 [ 276.948744][T14636] lo speed is unknown, defaulting to 1000 [ 276.949672][T14644] syzkaller0: entered promiscuous mode [ 276.960053][T14644] syzkaller0: entered allmulticast mode [ 277.052774][T14654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3071'. [ 277.235785][T14672] loop9: detected capacity change from 0 to 512 [ 277.253447][T14672] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 277.299592][T14672] EXT4-fs (loop9): orphan cleanup on readonly fs [ 277.312512][T14672] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.3079: Failed to acquire dquot type 1 [ 277.326294][T14672] EXT4-fs (loop9): 1 truncate cleaned up [ 277.332513][T14672] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 277.374986][ T9689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.403379][T14680] loop9: detected capacity change from 0 to 512 [ 277.436663][T14680] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.472193][T14680] EXT4-fs (loop9): shut down requested (0) [ 277.479416][T14680] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 277.490037][T14680] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 277.510175][ T9689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.538136][T14690] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14690 comm=syz.5.3085 [ 277.550756][T14690] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14690 comm=syz.5.3085 [ 277.564523][T14688] syzkaller0: entered promiscuous mode [ 277.570055][T14688] syzkaller0: entered allmulticast mode [ 277.630039][T14692] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 277.746374][T14694] netlink: 'syz.9.3086': attribute type 10 has an invalid length. [ 277.755723][T14694] team0: Device ipvlan0 failed to register rx_handler [ 277.855601][T14697] loop9: detected capacity change from 0 to 512 [ 277.862806][T14697] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 277.881485][T14697] EXT4-fs (loop9): orphan cleanup on readonly fs [ 277.888479][T14697] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.3087: Failed to acquire dquot type 1 [ 277.900508][T14697] EXT4-fs (loop9): 1 truncate cleaned up [ 277.906867][T14697] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 278.235069][T14716] FAULT_INJECTION: forcing a failure. [ 278.235069][T14716] name failslab, interval 1, probability 0, space 0, times 0 [ 278.247801][T14716] CPU: 1 UID: 0 PID: 14716 Comm: syz.4.3094 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 278.247838][T14716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.247851][T14716] Call Trace: [ 278.247858][T14716] [ 278.247866][T14716] __dump_stack+0x1d/0x30 [ 278.247926][T14716] dump_stack_lvl+0xe8/0x140 [ 278.248010][T14716] dump_stack+0x15/0x1b [ 278.248031][T14716] should_fail_ex+0x265/0x280 [ 278.248138][T14716] should_failslab+0x8c/0xb0 [ 278.248169][T14716] __kmalloc_noprof+0xa5/0x3e0 [ 278.248203][T14716] ? nla_strdup+0x78/0xc0 [ 278.248302][T14716] nla_strdup+0x78/0xc0 [ 278.248387][T14716] nf_tables_newtable+0x3ba/0xea0 [ 278.248439][T14716] nfnetlink_rcv+0xb99/0x1690 [ 278.248493][T14716] netlink_unicast+0x5c0/0x690 [ 278.248547][T14716] netlink_sendmsg+0x58b/0x6b0 [ 278.248591][T14716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.248628][T14716] __sock_sendmsg+0x142/0x180 [ 278.248729][T14716] ____sys_sendmsg+0x31e/0x4e0 [ 278.248764][T14716] ___sys_sendmsg+0x17b/0x1d0 [ 278.248854][T14716] __x64_sys_sendmsg+0xd4/0x160 [ 278.248895][T14716] x64_sys_call+0x191e/0x2ff0 [ 278.248915][T14716] do_syscall_64+0xd2/0x200 [ 278.248937][T14716] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 278.249007][T14716] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 278.249033][T14716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.249078][T14716] RIP: 0033:0x7f5df63beb69 [ 278.249119][T14716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.249137][T14716] RSP: 002b:00007f5df4a27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.249156][T14716] RAX: ffffffffffffffda RBX: 00007f5df65e5fa0 RCX: 00007f5df63beb69 [ 278.249168][T14716] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 278.249180][T14716] RBP: 00007f5df4a27090 R08: 0000000000000000 R09: 0000000000000000 [ 278.249201][T14716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.249218][T14716] R13: 0000000000000000 R14: 00007f5df65e5fa0 R15: 00007ffd21aaac78 [ 278.249315][T14716] [ 278.513324][T14720] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.582442][T14720] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.642422][T14720] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.693143][ T9689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.705303][T14720] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.807818][ T189] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.818702][ T189] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.830261][ T189] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.841352][ T189] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.906887][T14739] loop4: detected capacity change from 0 to 128 [ 278.936233][T14739] FAT-fs (loop4): Directory bread(block 162) failed [ 278.944294][T14739] FAT-fs (loop4): Directory bread(block 163) failed [ 278.952175][T14739] FAT-fs (loop4): Directory bread(block 164) failed [ 278.959089][T14739] FAT-fs (loop4): Directory bread(block 165) failed [ 278.965882][T14739] FAT-fs (loop4): Directory bread(block 166) failed [ 278.972776][T14739] FAT-fs (loop4): Directory bread(block 167) failed [ 278.979445][T14739] FAT-fs (loop4): Directory bread(block 168) failed [ 278.986648][T14739] FAT-fs (loop4): Directory bread(block 169) failed [ 279.053040][T14746] FAULT_INJECTION: forcing a failure. [ 279.053040][T14746] name failslab, interval 1, probability 0, space 0, times 0 [ 279.065798][T14746] CPU: 1 UID: 0 PID: 14746 Comm: syz.4.3106 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 279.065831][T14746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 279.065845][T14746] Call Trace: [ 279.065853][T14746] [ 279.065871][T14746] __dump_stack+0x1d/0x30 [ 279.065900][T14746] dump_stack_lvl+0xe8/0x140 [ 279.065921][T14746] dump_stack+0x15/0x1b [ 279.065939][T14746] should_fail_ex+0x265/0x280 [ 279.066007][T14746] should_failslab+0x8c/0xb0 [ 279.066034][T14746] kmem_cache_alloc_node_noprof+0x57/0x320 [ 279.066063][T14746] ? __alloc_skb+0x101/0x320 [ 279.066159][T14746] __alloc_skb+0x101/0x320 [ 279.066190][T14746] netlink_ack+0xfd/0x500 [ 279.066299][T14746] ? __pfx_devlink_nl_pre_doit_port_optional+0x10/0x10 [ 279.066340][T14746] ? __pfx_devlink_nl_health_reporter_recover_doit+0x10/0x10 [ 279.066474][T14746] ? __pfx_devlink_nl_post_doit+0x10/0x10 [ 279.066497][T14746] netlink_rcv_skb+0x192/0x220 [ 279.066597][T14746] ? __pfx_genl_rcv_msg+0x10/0x10 [ 279.066725][T14746] genl_rcv+0x28/0x40 [ 279.066747][T14746] netlink_unicast+0x5c0/0x690 [ 279.066781][T14746] netlink_sendmsg+0x58b/0x6b0 [ 279.066817][T14746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.066902][T14746] __sock_sendmsg+0x142/0x180 [ 279.066928][T14746] ____sys_sendmsg+0x31e/0x4e0 [ 279.066965][T14746] ___sys_sendmsg+0x17b/0x1d0 [ 279.067061][T14746] __x64_sys_sendmsg+0xd4/0x160 [ 279.067101][T14746] x64_sys_call+0x191e/0x2ff0 [ 279.067125][T14746] do_syscall_64+0xd2/0x200 [ 279.067150][T14746] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 279.067189][T14746] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 279.067211][T14746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.067234][T14746] RIP: 0033:0x7f5df63beb69 [ 279.067249][T14746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.067311][T14746] RSP: 002b:00007f5df4a27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.067331][T14746] RAX: ffffffffffffffda RBX: 00007f5df65e5fa0 RCX: 00007f5df63beb69 [ 279.067344][T14746] RDX: 0000000020042840 RSI: 0000200000000000 RDI: 0000000000000003 [ 279.067356][T14746] RBP: 00007f5df4a27090 R08: 0000000000000000 R09: 0000000000000000 [ 279.067368][T14746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.067405][T14746] R13: 0000000000000000 R14: 00007f5df65e5fa0 R15: 00007ffd21aaac78 [ 279.067423][T14746] [ 279.531527][T14759] lo speed is unknown, defaulting to 1000 [ 279.658293][T14769] lo speed is unknown, defaulting to 1000 [ 279.665001][T14764] syzkaller0: entered promiscuous mode [ 279.670674][T14764] syzkaller0: entered allmulticast mode [ 279.752940][T14776] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3117'. [ 279.831554][T14778] FAULT_INJECTION: forcing a failure. [ 279.831554][T14778] name failslab, interval 1, probability 0, space 0, times 0 [ 279.844308][T14778] CPU: 0 UID: 0 PID: 14778 Comm: syz.5.3118 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 279.844340][T14778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 279.844426][T14778] Call Trace: [ 279.844434][T14778] [ 279.844442][T14778] __dump_stack+0x1d/0x30 [ 279.844463][T14778] dump_stack_lvl+0xe8/0x140 [ 279.844485][T14778] dump_stack+0x15/0x1b [ 279.844507][T14778] should_fail_ex+0x265/0x280 [ 279.844629][T14778] ? prog_array_map_alloc+0x33/0x120 [ 279.844725][T14778] should_failslab+0x8c/0xb0 [ 279.844758][T14778] __kmalloc_cache_noprof+0x4c/0x320 [ 279.844797][T14778] prog_array_map_alloc+0x33/0x120 [ 279.844817][T14778] map_create+0x843/0xca0 [ 279.844877][T14778] ? security_bpf+0x2b/0x90 [ 279.844917][T14778] __sys_bpf+0x545/0x7b0 [ 279.845023][T14778] __x64_sys_bpf+0x41/0x50 [ 279.845117][T14778] x64_sys_call+0x2aea/0x2ff0 [ 279.845229][T14778] do_syscall_64+0xd2/0x200 [ 279.845257][T14778] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 279.845281][T14778] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 279.845301][T14778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.845329][T14778] RIP: 0033:0x7f7742d6eb69 [ 279.845349][T14778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.845490][T14778] RSP: 002b:00007f77413d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 279.845542][T14778] RAX: ffffffffffffffda RBX: 00007f7742f95fa0 RCX: 00007f7742d6eb69 [ 279.845558][T14778] RDX: 0000000000000050 RSI: 0000200000001380 RDI: 0000000000000000 [ 279.845573][T14778] RBP: 00007f77413d7090 R08: 0000000000000000 R09: 0000000000000000 [ 279.845602][T14778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.845618][T14778] R13: 0000000000000000 R14: 00007f7742f95fa0 R15: 00007ffee94c2088 [ 279.845642][T14778] [ 280.162311][ T29] kauditd_printk_skb: 488 callbacks suppressed [ 280.162326][ T29] audit: type=1400 audit(267.054:18059): avc: denied { tracepoint } for pid=14779 comm="syz.5.3119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 280.220519][T14784] loop9: detected capacity change from 0 to 512 [ 280.237636][ T29] audit: type=1326 audit(267.091:18060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.9.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708b4eeb69 code=0x7ffc0000 [ 280.260722][ T29] audit: type=1326 audit(267.091:18061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.9.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f708b4eeb69 code=0x7ffc0000 [ 280.265274][T14784] EXT4-fs: Ignoring removed nobh option [ 280.283962][ T29] audit: type=1326 audit(267.091:18062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.9.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f708b4eeb69 code=0x7ffc0000 [ 280.312345][ T29] audit: type=1326 audit(267.101:18063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.9.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f708b4eeb69 code=0x7ffc0000 [ 280.335378][ T29] audit: type=1326 audit(267.101:18064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.9.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f708b4eeba3 code=0x7ffc0000 [ 280.358280][ T29] audit: type=1326 audit(267.101:18065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.9.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f708b4ed61f code=0x7ffc0000 [ 280.381195][ T29] audit: type=1326 audit(267.101:18066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.9.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f708b4eebf7 code=0x7ffc0000 [ 280.404206][ T29] audit: type=1326 audit(267.101:18067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.9.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f708b4ed4d0 code=0x7ffc0000 [ 280.427222][ T29] audit: type=1326 audit(267.101:18068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14783 comm="syz.9.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f708b4ee76b code=0x7ffc0000 [ 280.500510][T14784] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 280.512157][T14784] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 280.522298][T14784] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.3121: Corrupt directory, running e2fsck is recommended [ 280.551801][T14784] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 280.572830][T14784] EXT4-fs error (device loop9): ext4_iget_extra_inode:5104: inode #15: comm syz.9.3121: corrupted in-inode xattr: invalid ea_ino [ 280.605535][T14784] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.3121: couldn't read orphan inode 15 (err -117) [ 280.646222][T14800] FAULT_INJECTION: forcing a failure. [ 280.646222][T14800] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 280.659689][T14800] CPU: 1 UID: 0 PID: 14800 Comm: syz.3.3126 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 280.659741][T14800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 280.659754][T14800] Call Trace: [ 280.659760][T14800] [ 280.659822][T14800] __dump_stack+0x1d/0x30 [ 280.659849][T14800] dump_stack_lvl+0xe8/0x140 [ 280.659907][T14800] dump_stack+0x15/0x1b [ 280.659960][T14800] should_fail_ex+0x265/0x280 [ 280.659992][T14800] should_fail_alloc_page+0xf2/0x100 [ 280.660024][T14800] __alloc_frozen_pages_noprof+0xff/0x360 [ 280.660132][T14800] alloc_pages_mpol+0xb3/0x250 [ 280.660172][T14800] vma_alloc_folio_noprof+0x1aa/0x300 [ 280.660228][T14800] handle_mm_fault+0xec2/0x2c20 [ 280.660269][T14800] do_user_addr_fault+0x636/0x1090 [ 280.660309][T14800] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 280.660369][T14800] exc_page_fault+0x62/0xa0 [ 280.660392][T14800] asm_exc_page_fault+0x26/0x30 [ 280.660490][T14800] RIP: 0033:0x7f2181fd0ce3 [ 280.660509][T14800] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 280.660528][T14800] RSP: 002b:00007f21807764a0 EFLAGS: 00010206 [ 280.660543][T14800] RAX: 0000000000002000 RBX: 00007f2180776540 RCX: 00007f2178357000 [ 280.660555][T14800] RDX: 00007f21807766e0 RSI: 000000000000001f RDI: 00007f21807765e0 [ 280.660647][T14800] RBP: 0000000000000009 R08: 0000000000000009 R09: 00000000000001a2 [ 280.660662][T14800] R10: 00000000000001ae R11: 00007f2180776540 R12: 0000000000000001 [ 280.660696][T14800] R13: 00007f21821ad940 R14: 00000000000000ed R15: 00007f21807765e0 [ 280.660715][T14800] [ 280.826612][T14800] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 280.837894][T14784] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.851228][T14784] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.975398][T14808] raw_sendmsg: syz.3.3130 forgot to set AF_INET. Fix it! [ 280.982770][T14808] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 281.060144][T14806] netlink: 'syz.9.3129': attribute type 10 has an invalid length. [ 281.088714][T14813] syzkaller0: entered promiscuous mode [ 281.094294][T14813] syzkaller0: entered allmulticast mode [ 281.112906][T14806] team0: Device ipvlan0 failed to register rx_handler [ 281.209260][T14823] loop9: detected capacity change from 0 to 128 [ 281.218795][T14821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3136'. [ 281.264515][T14823] FAT-fs (loop9): Directory bread(block 162) failed [ 281.291878][T14823] FAT-fs (loop9): Directory bread(block 163) failed [ 281.299922][T14823] FAT-fs (loop9): Directory bread(block 164) failed [ 281.320834][T14823] FAT-fs (loop9): Directory bread(block 165) failed [ 281.331454][T14823] FAT-fs (loop9): Directory bread(block 166) failed [ 281.346751][T14823] FAT-fs (loop9): Directory bread(block 167) failed [ 281.364215][T14823] FAT-fs (loop9): Directory bread(block 168) failed [ 281.375068][T14823] FAT-fs (loop9): Directory bread(block 169) failed [ 281.405104][T14831] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3141'. [ 281.415005][T14823] FAT-fs (loop9): Directory bread(block 162) failed [ 281.441192][T14823] FAT-fs (loop9): Directory bread(block 163) failed [ 281.448331][T14823] bio_check_eod: 33780 callbacks suppressed [ 281.448346][T14823] syz.9.3137: attempt to access beyond end of device [ 281.448346][T14823] loop9: rw=3, sector=226, nr_sectors = 6 limit=128 [ 281.501120][T14823] syz.9.3137: attempt to access beyond end of device [ 281.501120][T14823] loop9: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 281.738680][T14838] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3143'. [ 281.739603][T14856] netlink: 'syz.9.3148': attribute type 10 has an invalid length. [ 281.847374][T14856] team0: Device ipvlan0 failed to register rx_handler [ 281.882393][T14864] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3152'. [ 281.959719][T14867] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3155'. [ 282.104534][T14874] lo speed is unknown, defaulting to 1000 [ 282.534688][T14890] loop9: detected capacity change from 0 to 512 [ 282.544051][T14890] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 282.569719][T14890] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 282.583924][T14890] System zones: 0-2, 18-18, 34-34 [ 282.600572][T14890] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.683134][ T9689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.738966][T14898] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3166'. [ 283.269233][T14914] lo speed is unknown, defaulting to 1000 [ 283.299111][T14914] siw: device registration error -23 [ 283.659282][T14928] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.715348][T14930] loop9: detected capacity change from 0 to 512 [ 283.741498][T14930] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 283.772600][T14928] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.784255][T14932] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3178'. [ 283.803919][T14930] EXT4-fs (loop9): invalid journal inode [ 283.826597][T14930] EXT4-fs (loop9): can't get journal size [ 283.836248][T14933] tipc: MTU too low for tipc bearer [ 283.845772][T14930] EXT4-fs (loop9): 1 truncate cleaned up [ 283.877120][T14928] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.952001][T14928] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.030327][T14930] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.086495][T14930] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.184830][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.225188][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.226904][T14930] loop9: detected capacity change from 0 to 1764 [ 284.239006][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.248957][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.267776][T14930] iso9660: Bad value for 'session' [ 284.458771][T14951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3187'. [ 284.467760][T14951] netlink: 'syz.5.3187': attribute type 2 has an invalid length. [ 284.475966][T14951] tmpfs: Unknown parameter '' [ 284.552798][T14952] lo speed is unknown, defaulting to 1000 [ 284.647257][T14952] siw: device registration error -23 [ 284.906865][T14956] SELinux: Context : is not valid (left unmapped). [ 285.115258][T14964] lo speed is unknown, defaulting to 1000 [ 285.250836][ T9689] ================================================================== [ 285.258986][ T9689] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 285.266495][ T9689] [ 285.268842][ T9689] read-write to 0xffff8881015e5a38 of 8 bytes by task 14960 on cpu 0: [ 285.277015][ T9689] shmem_recalc_inode+0x3b/0x200 [ 285.281981][ T9689] shmem_get_folio_gfp+0x7a3/0xd60 [ 285.287118][ T9689] shmem_write_begin+0xa8/0x190 [ 285.291977][ T9689] generic_perform_write+0x181/0x490 [ 285.297282][ T9689] shmem_file_write_iter+0xc5/0xf0 [ 285.302405][ T9689] __kernel_write_iter+0x256/0x4c0 [ 285.307530][ T9689] dump_user_range+0x61e/0x8f0 [ 285.312310][ T9689] elf_core_dump+0x1e00/0x1f90 [ 285.317089][ T9689] coredump_write+0xb0a/0xe30 [ 285.321781][ T9689] vfs_coredump+0x142f/0x20c0 [ 285.326467][ T9689] get_signal+0xd85/0xf70 [ 285.330820][ T9689] arch_do_signal_or_restart+0x96/0x480 [ 285.336373][ T9689] irqentry_exit_to_user_mode+0x5e/0xa0 [ 285.341932][ T9689] irqentry_exit+0x12/0x50 [ 285.346362][ T9689] asm_exc_page_fault+0x26/0x30 [ 285.351241][ T9689] [ 285.353582][ T9689] read to 0xffff8881015e5a38 of 8 bytes by task 9689 on cpu 1: [ 285.361136][ T9689] shmem_getattr+0x41/0x200 [ 285.365665][ T9689] vfs_getattr_nosec+0x143/0x1e0 [ 285.370633][ T9689] vfs_statx+0x113/0x390 [ 285.374895][ T9689] vfs_fstatat+0x115/0x170 [ 285.379330][ T9689] __se_sys_newfstatat+0x55/0x260 [ 285.384381][ T9689] __x64_sys_newfstatat+0x55/0x70 [ 285.389427][ T9689] x64_sys_call+0x135a/0x2ff0 [ 285.394116][ T9689] do_syscall_64+0xd2/0x200 [ 285.398631][ T9689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.404539][ T9689] [ 285.406863][ T9689] value changed: 0x00000000000007b9 -> 0x00000000000007be [ 285.413973][ T9689] [ 285.416301][ T9689] Reported by Kernel Concurrency Sanitizer on: [ 285.422466][ T9689] CPU: 1 UID: 0 PID: 9689 Comm: syz-executor Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 285.434715][ T9689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 285.444779][ T9689] ================================================================== [ 285.529101][ T29] kauditd_printk_skb: 586 callbacks suppressed [ 285.529120][ T29] audit: type=1400 audit(272.070:18655): avc: denied { map_create } for pid=14968 comm="syz.8.3194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 285.554091][ T29] audit: type=1400 audit(272.070:18656): avc: denied { bpf } for pid=14968 comm="syz.8.3194" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 285.574318][ T29] audit: type=1400 audit(272.070:18657): avc: denied { map_read map_write } for pid=14968 comm="syz.8.3194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 285.593749][ T29] audit: type=1400 audit(272.070:18658): avc: denied { prog_load } for pid=14968 comm="syz.8.3194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 285.612508][ T29] audit: type=1326 audit(272.070:18659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14968 comm="syz.8.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29529feb69 code=0x7ffc0000 [ 285.635510][ T29] audit: type=1326 audit(272.070:18660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14968 comm="syz.8.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f29529feb69 code=0x7ffc0000 [ 285.658513][ T29] audit: type=1326 audit(272.070:18661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14968 comm="syz.8.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29529feb69 code=0x7ffc0000 [ 285.681749][ T29] audit: type=1326 audit(272.070:18662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14968 comm="syz.8.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29529feb69 code=0x7ffc0000 [ 285.704776][ T29] audit: type=1326 audit(272.070:18663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14968 comm="syz.8.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f29529feb69 code=0x7ffc0000 [ 285.728015][ T29] audit: type=1326 audit(272.083:18664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14968 comm="syz.8.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29529feb69 code=0x7ffc0000 [ 285.792596][T14969] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3194'. [ 294.121651][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 294.121670][ T29] audit: type=1400 audit(280.118:18712): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 294.150821][ T29] audit: type=1400 audit(280.118:18713): avc: denied { sendto } for pid=14 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1