last executing test programs: 3m31.385165752s ago: executing program 32 (id=33): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 3m30.203436553s ago: executing program 33 (id=44): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f000000a400)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x10120, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000200"/16, @ANYRESDEC=r2], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r2, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES32=r2, @ANYRESOCT, @ANYRES16=r3], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703200000000000850000001b000000b7000000d6458abdbfb7c47c1ebf64f500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) readv(r5, &(0x7f0000000580)=[{&(0x7f0000001300)=""/229, 0xe5}, {&(0x7f00000007c0)=""/198, 0xc6}], 0x2) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r6, 0xa, 0x13) 3m29.877679229s ago: executing program 34 (id=49): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x7a71, &(0x7f0000000040)={0x0, 0x0, 0x400}, &(0x7f00000001c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0x2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) 3m24.043904236s ago: executing program 35 (id=83): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x8000000000004}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000008000400000000000000000000000000000000000000000003a1"], 0x50) 3m9.168920618s ago: executing program 36 (id=231): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="07000000040000000800"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 3m3.58067159s ago: executing program 37 (id=273): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$igmp6(0xa, 0x3, 0x2) syz_io_uring_setup(0x88d, &(0x7f0000000400)={0x0, 0xaee2, 0x800, 0x2, 0x2002ab}, &(0x7f0000000000), &(0x7f0000000280)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet(0x2, 0x801, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendto$inet(r3, &(0x7f00000001c0), 0xfffffffffffffe58, 0x2000c094, 0x0, 0xffffffe6) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000064006bcd9e3fe3dc4e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) unshare(0x480) socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) 2m44.666494137s ago: executing program 38 (id=438): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) chroot(&(0x7f00000000c0)='./file1\x00') r0 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0xa0028000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x32d7, 0x0, 0x46, 0x0, 0x0) 2m35.988633736s ago: executing program 39 (id=501): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0xffffffffffffffff, @ANYRESHEX], 0x0, 0x3, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) waitid(0x0, r2, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x1a, 0x0, @tid=r2}, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x500, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffa2b6}], 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r6}, 0x10) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1400) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000500)={@broadcast, @private=0xa010100, 0xffffffffffffffff, "689f619903284d5b2aa5878da4b47c6bd7b908f7b508def0f524e9b2e6bfc901", 0x0, 0x0, 0x100, 0x400}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f000062b000/0x3000)=nil, 0x3000, 0x2000005, 0x1010, r0, 0x80000) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r8 = fsopen(&(0x7f0000000180)='f2fs\x00', 0x0) fsmount(r8, 0x1, 0x8a) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x8000) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000000040)=0x8) 2m35.941929536s ago: executing program 40 (id=503): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) sendfile(r1, r0, 0x0, 0x578410eb) 2m24.587551464s ago: executing program 41 (id=590): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 2m12.509325305s ago: executing program 42 (id=677): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2m11.125909921s ago: executing program 43 (id=692): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd05, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x19}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 2m9.130627927s ago: executing program 44 (id=712): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x3e, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x2, 0x5}, 0x1bf5c, 0x7fffffffffffffff, 0x1, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0}, 0x0) 2m7.453007598s ago: executing program 45 (id=723): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a310000df000800010073797a300000000014000380"], 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) dup(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r2]) 2m5.445011024s ago: executing program 46 (id=733): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) creat(&(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90) mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) 2m2.145026425s ago: executing program 47 (id=759): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0}, 0x0) 2m2.110188345s ago: executing program 48 (id=761): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x48000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r1, 0x2a, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x10, 0x7}, {0x2, 0x6}, {0x0, 0x2}, {0x1}, {0x7, 0x7}, {0x3}, {0x7}, {0x0, 0x1}, {0xff, 0x5}, {0x3, 0x3}, {0x8}, {0x7, 0x6}, {0x6, 0x1}, {0xe, 0x4}], "11e006e052db6fe8"}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)='\\', 0x1}], 0x1}, 0x4000000) recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/35, 0x23}], 0x1, &(0x7f00000001c0)=""/174, 0xa}, 0x0) close(r5) write$cgroup_subtree(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_ext_load_extent\x00', r4, 0x0, 0x1}, 0x18) mkdir(&(0x7f00000002c0)='./file0\x00', 0x2) r7 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r7, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f1, &(0x7f0000000340)={'macvlan0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x5, 0x0, 0x4, 0x7, 0x0, 0x43, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x7, 0x45, [0x0, 0x1]}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r9}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) 2m1.036821895s ago: executing program 49 (id=768): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd05, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x19}, 0x94) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 2m0.552850564s ago: executing program 50 (id=773): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x8b7c, 0x800, 0x7, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(r1, 0x32ed, 0x0, 0x0, 0x0, 0x0) 1m57.076058988s ago: executing program 51 (id=791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r3, 0x5608) 1m55.638242814s ago: executing program 52 (id=808): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000010008500000022000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)="0000000000000002", &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m54.440969185s ago: executing program 53 (id=818): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x20}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040050}, 0x10) 1m53.424661324s ago: executing program 54 (id=823): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) read(r2, &(0x7f0000002340)=""/4096, 0x1002) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) (async) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}]}}) 1m46.596246319s ago: executing program 55 (id=888): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000004c0)={r1, &(0x7f0000000400)="c5a731b59c665a5f5de96e78d10bf31a0e9a545912cf475a72a507e9237fcf0cfb645eb66116325c44d08fab060f5131d96323dc767abc8ad3d59e1ee2b884a8508b81f7a613da48c3096c5e06910eafe0eed8c37607b38762459f1f37cd4141f6a5a8aab4decddd79a1d86bff2958ef3860a549b3c4d08ae396b29ae7b3f2bef770deeb4d0e09ce198794cefd939591c473f7105f45dc57e73cfc0bd56371c1e254bc003c74c0c840bfa7adc5d2c0637ef4"}, 0x20) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x5, 0xfa, 0x83, 0x10, 0x8, 0xbb, 0x1, 0xf7, 0xc, 0x7, 0xa8, 0xd, 0x9, 0xc}, 0xe) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000180)={&(0x7f0000000040)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000340)="8c84acebd6076e2b3feae48fc2d9da8a05c9353e8ecef665bfa59bcaa341baa7f648932eb0b56342af1f10d70b3c259a7022a65a4fe735a2d0ce591b3a34a31f76543389dad3d197c42af4e57715d96fbd4e72841513fccc934025ab154e32711f7b1553ed", 0xfffffffffffffe47}], 0x1331, &(0x7f00000002c0)=[{0x70, 0x6, 0x2, "920ea8c5e4a225564bf7900dfdf6ff4464171e30efd508fa0dc69f0568d89e515830dd7713dc60194a0b59f8d8d072cf8404a3925b462f0eb54f2dc9658c066247f9846522ccd869ca6f78a279e2249a39696a90433cd843c6e6463d677c"}], 0x70}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) ioprio_get$uid(0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f00000003c0)={0x6, &(0x7f0000000240)=[{0x101, 0x7, 0x4, 0x5}, {0x0, 0x40, 0xff, 0x7}, {0x1, 0x5, 0x3, 0x6}, {0x2, 0xac, 0xc}, {0x8, 0x30, 0x8, 0x80000}, {0x10, 0xf, 0x8, 0x3}]}) 1m45.649621886s ago: executing program 56 (id=903): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1m44.409878539s ago: executing program 57 (id=917): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18) keyctl$set_reqkey_keyring(0xe, 0x6) (fail_nth: 1) 1m44.36688723s ago: executing program 58 (id=919): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18) keyctl$set_reqkey_keyring(0xe, 0x6) 1m43.692408642s ago: executing program 59 (id=921): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) (async) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000900000044000380080001"], 0x58}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) (async) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) (async, rerun: 32) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r7, 0x0, 0x200000000000006}, 0x18) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x124}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x96) (async) socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) (async) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r11, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r11, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) (async) socket$netlink(0x10, 0x3, 0x0) 1m33.525158598s ago: executing program 60 (id=993): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r3, 0x5608) 1m32.061185525s ago: executing program 61 (id=1014): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={0x0}}, 0x48040) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 1m26.638175774s ago: executing program 62 (id=1061): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0xb}}}, 0x24}}, 0x800) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x0, &(0x7f0000000300), &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2469, r3, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r7, 0x0, 0x1, 0x4}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000880)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da02", 0x2}, {&(0x7f00000002c0)='@', 0x1}], 0x4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xf84228f62936f601, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r11, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r9, 0x541b, 0x0) write(r8, 0x0, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 1m26.223039212s ago: executing program 63 (id=1067): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) link(0x0, &(0x7f0000000300)='./bus\x00') 1m25.314527549s ago: executing program 64 (id=1072): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') syz_read_part_table(0x1048, &(0x7f0000001080)="$eJzsz8EJwkAQBdC/kKhHS7AUG/BoPQatRhuwBMsaMTGSBkSE9w6z+/+yhwk/tUqyO6QyTPlyf81+fu7bdjxrnN1cb9oyLT3O1/a+Vp2S7DPldeuSoT6/xvZ4+8pSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBnngEAAP//A6oLmA==") 1m24.981270595s ago: executing program 65 (id=1074): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x11, &(0x7f0000000700)=[{&(0x7f0000000280)="11aa21b257", 0x5}], 0x1}, 0x4000001) 1m24.396538535s ago: executing program 66 (id=1076): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYBLOB="3191cd082241b26091dcdd9ae626fdde22eca96df155fabb965df56fd72d3bf0cd8764b1476097429b7037d3a07d946676af3272f08494a3306ca3acc1e7666c548a875ec069bcac99cd1be8e294cff02178888e640cb1fb04deb9836fd2136dfc290555abe6f69332c9a3261d2e78e45f731105bbce999cb8a3e16d89c3dc1969c3283c50b8d883e4adbd80ae7b58ce2c1bbf8739307a15d5b2", @ANYRESDEC=r1, @ANYRES32=r1, @ANYRES8=r0, @ANYRES8=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES16=r0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xe, 0x110, 0xffffffffffffffff, 0xffffc000) unshare(0x22020600) r4 = socket$kcm(0x2d, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x2000000000000133, 0x0, &(0x7f0000000240)='GPL\x00', 0x790c, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, 0xfffffffffffffffd, 0xa4) syz_emit_ethernet(0x80, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) mmap(&(0x7f0000476000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x20010, r5, 0x20464000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) 1m20.717184112s ago: executing program 67 (id=1084): r0 = socket(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffff001}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x20010}}]}, 0x64, 0x517, &(0x7f0000001b40)="$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") close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) sendto$inet6(r0, &(0x7f00000000c0)="00d8", 0x2, 0x4044005, &(0x7f0000000040)={0xa, 0x4e24, 0xb, @loopback, 0x9}, 0x1c) 1m18.535674002s ago: executing program 68 (id=1099): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) link(&(0x7f0000000200)='./file1\x00', 0x0) 1m9.732164163s ago: executing program 69 (id=1210): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r1, r2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000008500000083000000bf09000000000000550901000000000095000000000000005f1f000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', r6}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0xd0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xa0, 0x2, {{0x4, 0x10000, 0x0, 0xffffffff, 0xfffffffd}, [@TCA_NETEM_LOSS={0x84, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x1, 0x8, 0x38c}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x2, 0x2, 0x8, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0xd, 0x5, 0x4476}}, @NETEM_LOSS_GI={0x18, 0x1, {0x88b4, 0x1, 0xee2, 0x5, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x2, 0x8, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7ff, 0x1, 0x10, 0x4}}]}]}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 1m7.296348338s ago: executing program 70 (id=1234): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x3, 0x0, 0x0, 0xa, 0x0, 0x64}}) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000040)=""/4, 0x4}, {&(0x7f00000001c0)=""/30, 0x1e}], 0x2, 0x1, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x7, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x4, 0xf8, 0x8, 0x7}, {0x7, 0x6, 0x2, 0x7f}]}) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) listxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000b, 0x13, r6, 0x53be1000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESDEC=r5], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x100000e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x401}, 0x18) 56.916974468s ago: executing program 71 (id=1402): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) sendmsg$nl_route(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="c00000001a0008002bbd7000fcdbdf251c141404fe040008000500008400130000000000000000000000010000000f000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000030000000000000f0f00000000000000020000000000000000000000000000000f0000000a", @ANYRES32=r3, @ANYBLOB="08000100000000"], 0xc0}, 0x1, 0x0, 0x0, 0x60008005}, 0x20040011) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$inet6(0xa, 0x5, 0x0) r8 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9}, &(0x7f00000000c0), &(0x7f0000000100)=r8}, 0x20) 55.909239527s ago: executing program 5 (id=1417): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}) 55.908743947s ago: executing program 5 (id=1419): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@mcast1, 0x1c, r3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getresuid(&(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0)) 55.862940497s ago: executing program 5 (id=1420): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b7030000000000008500000073000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 55.862626817s ago: executing program 5 (id=1421): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x88000, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f200000002000000000900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x401}, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) sched_setscheduler(r4, 0x3, &(0x7f00000001c0)=0x7) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 55.626990352s ago: executing program 5 (id=1423): socket$inet(0x2, 0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x182) fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x9}, 0x18) perf_event_open(&(0x7f0000000200)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0xb00, 0xf584, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xc04, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0xfffc, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 55.317373467s ago: executing program 5 (id=1424): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 55.317211597s ago: executing program 72 (id=1424): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 52.648735426s ago: executing program 3 (id=1473): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@lazytime}, {@inlinecrypt}, {@noblock_validity}, {@abort}, {@dioread_nolock}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeec4}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7ff}}, {@noblock_validity}, {@bsdgroups}]}, 0x1, 0x453, &(0x7f0000000c40)="$eJzs281vFOUfAPDvzLbw+/HWivgColbR2PjS0oLKwYtGEw+amOgBj7UtBFmooTUR0mg1Bo+GxLvxaOJf4EkvRj2ZeNW7ISHaC+hpzczOlO2yu7R06xb280kGnmfm2T7Pt888O8/MMw2gb41k/yQRuyLit4gYqmdXFxip/3dteXH67+XF6SRqtTf/TPJyV5cXp8ui5ed2FpnRNCL9NCkqWW3+/IXTU9Xq7LkiP75w5r3x+fMXnjl1Zurk7MnZs5PHjh09MvH8c5PPrj2YJGl7aHfW1gMfzh3c/+rbl16fPn7pnZ++yUrvKo43xrERaUN6JAv8r1quudzj3ahsC9ndkE4Gbl6GraESEVl3Debjfygqcb3zhuKVT3raOGBTZdem7e0PL9VaqbTcC9x2kuh1C4DeKC/02f1vuf1HU48t4cqL9Rugq8ni9LXl+lY/MrByLz+4ifeuIxFxfOmfL7MtuvgcAgCgne+y+c/TreZ/adzbUG5PsTY0HBF3RcTeiLg7IvZFxD0Redn7IuL+G2pIO9bfvDR04/wnvXzLwa1BNv97oVjbWj3/W2n3cKXI7c7jH0xOnKrOHi5+J6MxuD3LT3So4/uXf/283bHG+V+2ZfWXc8GiHZcHmh7QzUwtTOWT0i648nHEgYFW8ScrKwFJROyPiAPr+9F7ysSpJ78+2K7QzePvoM0603rUvop4Iuv/WrIUTfGXks7rk+P/i+rs4fHyrLjRz79cfKNd/RuKvwuy/t+x+vxvLjKcNK7Xzq+/jou/f9b2nuZWz/9tyVt5v2wr9n0wtbBwbiJiW/Janl+1f/L6Z8t8WT6Lf/RQ6/G/t/hMVs8DEZGdxA9GxEMR8XDR9kci4tGIONQh/h9feuzdW49/c2Xxz7T8/ls5/5v6f/2Jyukfvm1X/9r6/2ieGi325N9/N7HWBm7kdwcAAAC3izR/Bz5Jx1bSaTo2Vn+Hf1/sSKtz8wtPnZh7/+xM/V354RhMyyddQw3PQyeSpeIn1vOTxbPi8viR4rnxF5X/5/mx6bnqTI9jh363s834z/xR6XXrgE3XhXU04DbVPP47v7IB3Elc/6F/Gf/Qv4x/6F+txv9HTXlrAXBncv2H/mX8Q/8y/qF/Gf/Qlzbyd/0S/ZyIdEs0Y5MSQ1ujGT1M9PqbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDv+DQAA//82merZ") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x414282, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x5, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000006080)=@newtfilter={0x2bd8, 0x2c, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0x6}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x2bac, 0x2, [@TCA_FW_ACT={0x2588, 0x4, [@m_gact={0x1078, 0xd, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2598, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1847}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0xffff, 0x0, 0x9, 0xfffffff7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x15ef, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2493, 0x2}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x128, 0xf, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x270, 0x10001, 0x0, 0x0, 0xfffffffd}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x21f7, 0x3}}]}, {0xd8, 0x6, "206e521e34a3a7a45b1e0e263903a152c553b8521ce6ed78153719b7b90575a5d06c7acef826e39cb504623ca93ec5a77c9e7c60676f1a3189b61811d20525e1635786b5df2a48b157b113df342bc306ef2736121adee4c5fb93352fcc8a43a3189e443685dd6876c54169a1ce5bc0ca2743c6a6a77bd6b1c60d1b474bac0a88d6d1205d334519646a83fa6b885e64e3020ad4ec50b08b7e15ac81c80cbe08cfdab3ac0579a791fc4377072e972bf4a24a42a6632d4d10e85ef7632a7fa185d37b6728c9c42018c9dbc62ca25380d1ee98932b7b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0x1044, 0x1d, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x13, 0x3, 'max_dir_size_kb'}]}, {0x1004, 0x6, "f86b8711f762348bd926c13676d6a8f5e4b41beee8e787d0f3689720d71c4ffe73a31df2d16b8e9d0c44f94ecd3b799530b9d458674c79e60f63acf147e85e55c86a4af5528ee1d9ddabd6cdb17a7938a39305951f91febcf2fe83348b6463b8da4907abf2a048e19af9ddfbc0da5517882b06209dcf0ec3748a307dc93ebfee97d1c75d3bfe6738de135dcb8eb04abecc67039278eaed7ffebe016c9f2aab52f4285bc5c1c367475fc2197eb609633994f5a5be924a6ac31caf8f45c5caeda4a125be5edf3b4f880bddd4297d5de10c2a1134b266c272b84de7c4559c2529eda5164e5835237fbbf6781a2817dcbf87c78733a56507cc266ee46dcdcd2e2112b34469695764d7b34072e98d8c73963296e0958c91c7eba1eb9c04f8a4f9a89dfe16db9f7b6fc7cd20e2c5683fb033888470160ce3b8bb60ea16ce2b01e0e78d3fed16f5eafbf8cc4205983bb6d5576629e8d99d138632887d39cae4f4ea7e1a8b69e7bee73c77ec3408369ceb456ad85daab58279ebc62b7d50fe40376a181bbe05c98281053f29f5fd41488e9b44e4cffa294d121a29b0e935c571aac2db0ec5bb8e3aa592c8d145f951379b6cb5eef60dc7a0fc47a1cfbd2403831f85652404bc386b643ac54175e3bdab8d1077f72d77f6debb128069ed7560cf9506bc46ef2d1c099fb672fe366394451da8e331bd80cafb5eaeca11b73af02257ae08b32a11cad9099254dc0ecddbd0f84dd0a6e62eac91321b84f07c1c38162fe0f368202e73c0086a59f2f4476bf198df3e036ab7279b4e6b37a978d85b848a123164880b8a52a0792bc4f17e775e966f182fb9abd9315c2b58e60c1c5845ecabbf4fd1b0fad1ff48110caf3f6f41ba9de062cea657cfa66e0c6b55cb290db93b44dd7c7b9d87ed0788d370779fcb7bb1ff49d4935e31cefaec4e8ca2ef8831ecf00c4f1aef7bdbf3f3075cc00377eb23fb7fa1cb50aecba44fbbd0c82edd9bff248f38fdb8ba4044283cc99b20c45d759ced500adcd63b73fe39cba56086e94cff0ec9f4d431dd234a5f7d4a41ef80dfc488adf3bf94f38d3670bc38d0336fc8fad75a18458bbec6f52ad3d1b8a62bbbe89ca9d0d05d237456718c9e12a09be5f271cba48c8bcc82a390cd5146b67311ec1e7a55e1d9837b22a7dab89c0716c1cce419b90f5cbfcd272e2293007360499af9ebbbb1f0596c9f9aa95f4b458db782cc742215309634de9959f6a9e5b883dd5530663d8b98eae9fda8b337143a633adf78a945d23e6d3b2d4d1a3469bdedc4c94e9388813fa96873e93ea3a0ab633e3e37ea88492dc7c72e5424dda65e88521af528b703020e7c704126a5f8626a3e86e8888937ea439083c307651a2306d7823aed8032a5076fa68cc7db582e76905bf31a8c5edb7a9cf4370ceeee222e31cf08f242e74c06d3349442bbecb15ced8a433b2e6527bc5f7b6a0e6f6c9f25b7f1e521b841d36096b34fd654d72c90dfec58e13c3597e9b5cc544949a0b113dc1fe8c283489e4dec91062e21dbbc2f57dc4b965e808ff579590b6efeb9aff9f28a64e3b46e0b89dfdf6812b5582169fcc50bb595ba83ae48ae67852f43925d5e69fb21b3484b1a255ab6910cd9c5acebfe84a32746f6f2ddde4413a4d0f37966a596a045943e7617b305a99ebe7bef514cd4d9e528fa6b6e59f2619d390fc492f8ea111ce57485aed34aac6aca511dd824caf0f9b64b141a2bb0b068609543cc0c2d3f582fa6f7aee64fed151e5567e354fed7746d3a2edbdf1e2b9257092dc065ee514b5b58c8c9289626951fdb133a80e9f86e1eda3f0e30f498baa710addb8f5594eafa097677304498eb0b6bc4b5efee9ddcf985fc9c5f4e6f9bb24dc87e2ff635b877a896238072b4d033edb021a514bdf4606be9ac69db471da1bb81b705d00a2b520ec6663691dba26e82aad04da3aa6f733401b3b2b120b9e0130a05a595db12b82fda20d54c7a26cb2884ce2a0e88ad7fcbefabf2acfc487feab1ca6653657daac11899b796e01aba91c05d805ea5fc046165a43947061cff0716e93c0885c93f949a0517b83da62af09291071a0041b21a521e07c9f491224e2f73088b087c92a13511c2dee8c5a2c3cf2245b67211979de125fc008456d30b1a3131e78658b417a2a1c51ec1cb3eba486cf850769a78221ff61e4d74ccf3a82e2d30a8a0fc702c56b04f579a901c114e33c318dfcbd43d9afa3b37aab20e114247efdd6fd08101f5a3282729c7c929de237149829394f2458a5a8d60a3f3611e7f2a9856a440673f1d40ac9733cefea90cfb41fe6f530e6d41d04401474293399bb66f5bec43d3cab4028906f8e571f2f65e87d111aaa1e4a6751e951ad7de05a4b7ed91d04bccb780b120ced805af428e15fcb2e60da03b72a425959acab3844ac1641214088d41450d4cfc5e3e6804dbf4f29d404ceedd486c9ce88138884ffb8c28cd488dcd3fadd499d6cd57cf3a2df7acb34e72847e1355d583b8b81b2a75b8e5fb06500db4952aa69f43d2c35c66050acdaf531f85fb9326bbfadb034c4056096c5c0efed1f340cab73f1e108152f820a257478446826000bffa255fde5b6003700f72cbec804a284dc80876f59745c752dd0aafdcd5c154b981d0f7e94311c395deec5cbc6e218122807f069c9e692206747f80756f12d8663f437bd939628f2bf879ca869d86692f0cb20748298a534b55723f702a037224b846adf022ec943f48b941c465182aeec8088800abb874e2f23c3479205cf83d6f938767475e1f2805f5d30772047fc8031d7484d1ed6bd486480941f3f62d05dd71486eaa70cf05556f270eb294e7c2b4aabd567a0915d54d147d783259d1e155b70899a0815d295d108a1e36aa36f03e497979abd35ee20068b6b2eedc31c29e4ae8ac996e8bd40c44ed249db4d1cce6eb6d94545a564b1f77611cd8bd355cda8d4d8489de019c34f97c96096149c562bef4822411d31507ad53f0e981cf7f20d423a7277ecc2006f4ac51a1f3821ff83b1964e293885e0e010c52dabb954e1629ad34cc47091e77a1d530c4c7ac68835192af9d51415b003613c5c1d5301c3e1ef54e3806f923cc5767e299512d39eee224d1626c6f27d43bffcc1ff379cde22a26082a440f1923597c52b9cdf42c0c6e3d9362885d8f7c136215d7b605c60b9756103a404957175a13be447dfc26eb4e643ecc3142e0b0f753cd84d12a029a92b0620e679ae5211acbfe2a5328a9e605fa97ae9d344436fe4cfdc35c3fd1baf1cdc33a0fe672ea8ea9fbbf3ad89000074fc4a08c0bcb21fb213591399c53056e3b68217c289fd9ecb70ef1719302b3a9c77b7b36914f0eb97890ebdee4017e7ee86a3a090dda651561e91b8f201252e43189ad314b7b732579a8e5c8af7cfafc8859baeb00e56d0cd2ff93a573d46d27aaff2dede96166fbe75891c486a68ee330ed10a1c151cdcb239410ea22f925b4138c94ff58d62e7c333da3ed0bae0ae6cb68e225014e1430f76deda116fa4ce8c6c4714d4a8398a3cfeb6492333370884776f5f1b45509469a009b41e6127912e0809a8e8b9fc957ca3dc1b6a1b56c983f872b60718a9af2bcb9e6aec0f30a22935b1a824a8c225593ec5b2390973d6d6c41f5cec539390905be01432443ee2f769fb1a6e46cbbf3d09df2ed40b6024875f9347092613b4809d4ca79fc50fec3c5b571365276b35665e968c253e9babc4367fdd95fef6099d8ae3a21cf224bf7f7933d98ec0e431bc750c64d52bf5d3b90cbf8380658bf604a165cb79495686791dcb411371f5cce29abbcc9014e62bbab34de2e891e5be391f0b9da89e964836554ffe4b6c9fe21bc0d15df6a43cd485c3b0a601f5ecbdbcdd531260d04e9234aadfb6b83104f2083d12983f02c23fa1d930b7b6cc1246ed493b310fbb7850238e5c7374cb48c1c0c5bd5cb5d24316e60188794b257f63139648feef090979069a1f39a8845c69abedcac607ca21d302bbe9f299b6de69ea74db94f4f9d067a01ceca535e424d9c1edd75060a2fda453fb1dffbfefbc7ceb2141aef132b046687422a775143598f168ea5f47b97e3ae25d31d0c1c73907f55903c906c3aeeb453f205311e96edad979b0a7af2891419bb32a3240bd69cec17878b9edd52c6acff305703042753e196dc50f90a9a03a3d0b259ddb0100c13dd1b1d4fcbb5f82937276a6f7e98d8d3747dcf9ddc07674ded9f5e0cbe1cde600ad89d36f1bc27fed2096c56dc93844583b29de0a30800717d0599fb50f11d221f17769d575d53cdfa4a80f5dcd3bd0cc6665839b7899ab5ef488689891980afb11c46f8c483d944faf518df6ae0d42a6edd529a9dfb7763f94cc7f5e89c76bd07ab7ec25ac98be4f59c0ceaad3410b58a0ce0ed83c0254df1f6bf7fa86788e79cba1e5b198342bac5d93f6b9ac852910c73cbbca580c444edb2a29c01ec351648fc3c65e885ba770a405667983fc8246cb0b3cd28a9a85af649c0ca6b57a0f26b98de2fbde1b98bb86cd98791c6ca6c8a0974cb54df9b3ca534a1ea653f6f5db660554d4a085dc85841e9ab54646772fd46dd703986713b913400ca5fdf32b082ae9f9ec027ff5fe02a384a1a0138a6b1d025eff64ff8b7c9ca4273af9cf3cf5be06932750b70914e3216d01bacbf46cddce078ebb918ff01d8790a1437b74ffd7f41e2221c0d0009ee2d3d53873a3dbdc7fcb03b92cb35800555383e35bba1ff9f045f9e871fc111f4b74a0538bcfa8f312f6eef7dc3a878001779acd2a2e5493d1ddca408c25d33b82d0b333584954371867c804af1a3d24c6df2c390fa8cf69b62bc4d3c112ee5e14d2ae2c886f3f2f55db90806b5e535a969f2d57fdd70712500026b2e23a928c09c1e0cb8f3bfd0e09fe85f9726f83c9867d88358957c81a5f888f75946237ed0abf22dbece85eb5b55d0e42eb7829b764d061ee5e4bc023ad649aa273ac52d96661e604c8cc94c8d299228d541ba92844f4321b7ee4f2d3c6f0342bdfbf8e821ce469a027e8aabacda74cc79ae4044a710c7e128c09c61ea2cac2de4e34f276c48f8a3ec0b2bcccc1c1dea8a69faa068fbeb5932e845155afeee6d62909d3fec5c32cbc37a3f549d80a7689ff99dc7abf0083b235adc1206cf86cc434abdf3f9f6f44c69de684ba177d4663fbeb2a6b942b625b4e435b189694aff598fec98eb2cd8d297ba696a483600b7c4a00a7bacd636c759858e9f70b7b78293eaaa8141941726e635687c521383c2917c159fe840458695a09079ee3cb86ba151ebd17b0302a1d6eaa1f04d619d08bb9d34d5216daddf62d4178228c13d559ea5c1c2f1dee646e709506db508fff35281300fee61d176003ff7612abde673e160f9266b0be00aec237859a208c4e3ddf9a12d890b33860a5f34ea01fa247d294107822e52642c489abee33f5b65329f2075842736a7d7d59d8dda6b6bdd45e9e94a24d8b216ed91d89a163b49f43d651a596781600bcfbf92d620becff6b2d83047cfde7b0cb5fb6927b9f37ebb40e5424c956c040a2b03b8dce78c8499f1733fc8a0d3f6953e60f1a1fdad3aa5ddcb8f0ff2ee236a0e8e38ba096ea8d587d686b2ff32f7dc6e835415c0cedfa735453b63ab99ba40e9c8cb7ea5992eb88c85eeafcecdf4737a0a2ae401ff6bbc025d4424383f6ec6929c62e03d5309afda1aea8315234c4f756555c70ce0e1c9440b84da6b2ce3b36623587b766db8732e17fcaaf1ac0d6e8a6abf0fd801131c7e99da9c928e448f389f69a41e522aff1e29017871d87c38"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x1a4, 0xb, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x83c, 0x0, 0x0, 0x3}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7f, 0x4, 0x9, 0x8}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x6, 0x8, 0x100, 0x80000000}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x8, 0x200, 0xfffffffb}, 0x2, r4}}]}, {0xf8, 0x6, "f538c497635c2eb6061cff4409999b8cd4cd8af07b04aa2c9b9231f193042bfa38fe14b97fbed085ab189590e565224159f180f033bbbc5dd699df865b9ac76b1273517e277df7f66ecf5cb67b585361735200b97c590e9e743c6ebcbd97335b0014d7ea71761280cae7da5426c0f1543aa9de4b2269abda8b8c86694e046d81333f7d1eb0c5b1689ba24145d2a6cf337b0a6e4bd24bbf9ab991ef853c7d94c409f114e1ef570da592b9e3b3ace1a0c1bc4345f0d90d22c7d0505c59efaec160ee4b277fc7e8a4c7432bd9fcf02e69f0195a994a96902dcc999b61adb90b62a417a3a4b65f073712d8695fa6c27919013d8aa810"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_nat={0x1fc, 0x10, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xf, 0x20000000, 0x7, 0x6}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x4302, 0x6, 0xd, 0x6028}, @dev={0xac, 0x14, 0x14, 0xc}, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6e, 0x9, 0x8, 0x9, 0x6}, @private=0xa010101, @private=0xa010101, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x10001, 0x8, 0x7, 0x36}, @remote, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x81, 0x5, 0x8, 0x9}, @multicast1, @multicast1, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x10000, 0xffffffffffffffff, 0x6, 0xd}, @rand_addr=0x64010101, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x8001, 0x5, 0x1, 0x902}, @broadcast, @broadcast, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xbaee, 0x8, 0x5f8, 0xfb8}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1}}]}, {0x91, 0x6, "a53b4eecf6b1c970675bd5be2b3f61072e88a0909cbbf868a3dcff99423f714acd91a9547f2874fc3c8638b543da62fe3d6ae85f06d12527d5910facdb634329ff5d3a5c70c5f9e4dbcfbe0f8c6f871719c963214e72630fc388338110bec58eaf54821a456250b1e6e94c9b191fdf053c9771d90ff223b1b01ae6cd1b952579aa0a8df062ab38f02997517995"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'netdevsim0\x00'}, @TCA_FW_ACT={0x608, 0x4, [@m_mirred={0x210, 0x3, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x3, 0x4, 0x200, 0xb3}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x7, 0x3, 0x0, 0xa605}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x800, 0x0, 0x5, 0x8}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x2, 0x0, 0xffffffff}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8000, 0x7, 0x55ae, 0x10000}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x5, 0x3, 0xae06, 0x5}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10000, 0xdd, 0x5, 0x4, 0x2}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x3a, 0x6, 0x5, 0x174}, 0x1, r4}}]}, {0xe1, 0x6, "02f8a5979d8eb7487fdc4e66f5228cdb2c13a47df88b361accf1b3529cb1a6924e13f631cdd74a70cc7cd26d00ab880b7bdb7b94e0d9b9bd430f307c814522b7d957c65fc33a2a1f021f5450b9e58c35512348cc9c2b3c91a6d81e8bf06adb37d3ab4b7f72dc2f1f98fdf863c98fb1a6b106b5dc11985f119b1c5694b20c87e217df9005cbda0c5205a89591c923e3c96c9b9234349144fad9c44eede286d0dd22b7b43ff2440106645c9b57b3401cf59efb6722acdb9bf16295c869f193d524080b0336947f07e1b433ce2046009d87175b95188dacf9b8418179915b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_vlan={0x124, 0xd, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0xe5, 0x6, "5902c218e0bc9a5fecd3a26c336dd923d8add820a7660398b234ac39a8d57b72608e848146daca41da285355408e6ffe0484ff0cee1d4d87a6746f8b0bec49e1dc7462ca5c3da579ed844062e36830b5f07ff253db1500fa7f7438265c37a70037a4d79babda74cb3bfce5211a1cd316c23d585bde354ffff60dc3d9e08ef146276e5ed04f58cccc4ceefbd5a46b3021605e14959f9964be9fd6c2844a38173211f2e7e100145ef21e23a0089d3dc2d416cb53276269dc57acc2ea38bbb2c2870ce624ce9aef6418562d8a880b4c00838ee78bdea667c6df5f9cf7f3683972cfd4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x188, 0xe, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x3, 0x5, 0x3}, 0x5f0}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x10000000, 0xa7, 0xfffffff8}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xa7, 0x4, 0x8, 0x8a09}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0xec5, 0x20000000, 0x2, 0xfffffff8}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x100, 0x7, 0x4, 0x401}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x3, 0x2, 0x101, 0xcb}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0x0, 0x20000000, 0x80000001, 0x8000}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfff, 0x8, 0xd, 0x8, 0x6}, 0x9}}]}, {0x77, 0x6, "bc252e541b7f3e16a97a14597d610c8ccb0cc057d54ec26cf277a3b96646aae1d5f2bfe02e2d3a2e86cb8ebb3e8445e7c8725f47724daa9ad7f669ceac545ee2998ff18542f430a0e393b17a271db92bda1311004dcb8a1faaf9ac4f0dbeb8b3d0f9b0dc2eefb0d385dee2c3d2d395aff6bc89"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x148, 0x0, 0x0, 0x0, {{0x9}, {0x9c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6003}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88f7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x5, 0x2, 0x0, 0x7f}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88a2}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xded, 0x4, 0x10000000, 0xa54e, 0xf}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_LABEL={0x8, 0x5, 0x5d89f}]}, {0x84, 0x6, "03e9e9cb1368e9189c408cbd98cf43903cd8680969771ebd4c247de94fc61a6625f955e0a61694c96b5ea09ca4caf8de382ce30b8f5252e93a12eac1f20d1cf74d918e45523af363296a11bab90a6c035e157b8eef39afe21d5bb04a6f823b8afc762e2bbcfbec192961b56bdc491a7494d26af1264efd5bec4d55ebbaae0c7b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_FW_ACT={0x4}]}}]}, 0x2bd8}, 0x1, 0x0, 0x0, 0x4088893}, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x58, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0x6}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x893}, 0x2404c084) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x10020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0902000000000000000001"], 0x38}}, 0x0) 52.48324823s ago: executing program 3 (id=1477): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47fa, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kexec_load(0x5, 0x0, 0x0, 0x1000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) setrlimit(0xf, &(0x7f0000000000)={0x0, 0x5}) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_settime(r3, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 52.306443703s ago: executing program 6 (id=1480): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r1}, 0x18) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000108c8acc583394df7569d65f84d"], 0x9) 52.263152563s ago: executing program 6 (id=1481): openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbff, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) (fail_nth: 2) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}}}, &(0x7f0000000040)=0x84) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 52.130542176s ago: executing program 3 (id=1484): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r1}, 0x18) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x0, 0x1, 'M'}, 0x9) (fail_nth: 2) 51.995936518s ago: executing program 3 (id=1487): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x88000, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f200000002000000000900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x401}, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) sched_setscheduler(r4, 0x3, &(0x7f00000001c0)=0x7) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 51.807430742s ago: executing program 6 (id=1489): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000004000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000de00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20570, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x10000, 0x10000, 0x0, 0x0, 0x8, 0x20205, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getgroups(0x0, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x8, 0x0, &(0x7f0000000040)) semop(0x0, &(0x7f0000000180)=[{0x2, 0x6, 0x800}, {0x3, 0xfb97}, {0x2, 0x4}], 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendfile(r8, r7, 0x0, 0x7ffff088) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, r7}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 51.223373683s ago: executing program 3 (id=1493): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47fa, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kexec_load(0x5, 0x0, 0x0, 0x1000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) setrlimit(0xf, &(0x7f0000000000)={0x0, 0x5}) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_settime(r3, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 50.873157949s ago: executing program 3 (id=1495): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000)=0xfffffffffffffffe, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095", @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000010000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x10001, '\x00', 0x0, r2, 0x1, 0x3, 0x2}, 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x4) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x5, '\x00', r10, r11, 0x4, 0x1, 0x5}, 0x50) creat(&(0x7f00000001c0)='./file1\x00', 0x1) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 50.872637139s ago: executing program 73 (id=1495): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000)=0xfffffffffffffffe, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095", @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000010000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x10001, '\x00', 0x0, r2, 0x1, 0x3, 0x2}, 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x4) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x5, '\x00', r10, r11, 0x4, 0x1, 0x5}, 0x50) creat(&(0x7f00000001c0)='./file1\x00', 0x1) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 50.575570754s ago: executing program 6 (id=1499): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x88000, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f200000002000000000900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x401}, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) sched_setscheduler(r4, 0x3, &(0x7f00000001c0)=0x7) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 50.323648229s ago: executing program 6 (id=1503): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_getattr(r0, &(0x7f0000000200)={0x38}, 0x38, 0x0) 49.417294716s ago: executing program 6 (id=1513): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47fa, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kexec_load(0x5, 0x0, 0x0, 0x1000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) setrlimit(0xf, &(0x7f0000000000)={0x0, 0x5}) timer_create(0x3, 0x0, &(0x7f0000000300)) 49.417201725s ago: executing program 74 (id=1513): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47fa, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kexec_load(0x5, 0x0, 0x0, 0x1000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) setrlimit(0xf, &(0x7f0000000000)={0x0, 0x5}) timer_create(0x3, 0x0, &(0x7f0000000300)) 32.333983618s ago: executing program 8 (id=1773): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x11ee, &(0x7f0000003680)="$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") setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040)=0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 32.175559771s ago: executing program 8 (id=1778): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x6, 0x7ffc1ff8}]}) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, 0x0, &(0x7f0000000000)) r4 = pidfd_getfd(r2, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\''], 0x28}, 0x4080) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f0000000380)=ANY=[@ANYRESDEC=r5, @ANYRES32, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r7}, 0x3d) gettid() timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000500)='bdi_dirty_ratelimit\x00', r6, 0x0, 0x8000000008000001}, 0x18) personality(0x5000004) gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640), &(0x7f0000000180)=0xc) timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x23, 0x0, @thr={&(0x7f0000000300)="b1b2701f7af1177cbc969d5263d74d8f1b3a273dd315349382c5e03afbb5565fbc4bd09efd0d18e7c80cb8571bc7c74b83a0274f164bfd13282084bbd933478cf3896d352adae8fdc762ef6383a671d29bdf9cabfb32519d000000000000000093fa4a0bc1e7995af164c551182c", &(0x7f0000000080)="f1586d6e6c3c706836ed2025"}}, &(0x7f0000bbdffc)) 32.122543192s ago: executing program 8 (id=1780): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @remote}, 0x1, 0x0, 0x4}}, 0x26) 32.095157612s ago: executing program 8 (id=1782): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$eJzs3E1sVEUcAPD/e/3i01bEDxC0ikbiR0vLhxy8aDTxoImJHjCealsIUqihNRFCFD3g0ZB4Nx5NvJt40otRD8bEq94NCTFcQE9rZve9sl12S8tuWXB/v+RtZ96bZua/86Y7O7PbAHrWaHrIIrZExB8RMVzLLi8wWvtx7cq56X+unJvOolJ58++sWu7qlXPTZdHy9zbXMpVKxFBKDjWp98I7EVNzc7Oni/z44sn3xxfOnH3u+MmpY7PHZk9NHj58YP/uwUOTB9uKLy9+priu7vxofteOV9+++Pr0kYvv/vxNau+W4np9HLckRdtgtPbsNno0PTzZVmV3lF/Tw9a6E1l/68Jjt6FBrF5fRKTuGqiO/+Hoi41L14bjlU+72jhgXVUqlUqz1+fC+QrwP5ZFt1sAdEf5Qp/e/5bHbZp63BEuv1h7A5TivlYctSv9S2sHAw3vbztpNCKOnP/3y3REJ9YhAABu4vs0/3m22fwvjwfqyt1T7KGMRMS9EbEtIu6LiO0RcX9EteyDEfHQGutv3CG5cf6TX7qlwFYpzf9eKPa2ls//ytlfjPQVua3V+Aeyo8fnZvcVz8neGBhK+YkV6vjh5d8/L9MbGq7Vz//Skeov54JFOy71NyzQzUwtTrUbd+nyJxE7+5vFn0W5jZNFxI6I2HmLdRx/+utdra7dPP4VrLDPtFqVryKeqvX/+VgW//WuylruT048f2jy4PiGmJvdN17eFTf65bcLb7Sqv634OyD1/6am9//SLvBItiFi4czZE9X92oW113Hhz8/qxvSy3eUUf/5txJrv/8HsrWp6sDj34dTi4umJiMHstRvPT17/3TJflk/x793TfPxvq2vxwxGRbuLdEfFIsYmb+u6xiHg8IvasEP9PLz3xXqtrrft/hVX5Dkrxz9ys/6O+/9ee6Dvx43drj7+U+v9ANbW3OLOav3+rbWA7zx0AAADcLfLqZ+CzfGwpnedjY7XP8G+PTfnc/MLiM0fnPzg1U/us/EgM5OVK13DdeuhEsTZc5icb8vuLdeMv+jZW82PT83Mz3Q4eetzmFuM/+auv260D1l0H9tGAu5TxD73L+IfeZfxD7zL+oXc1G/8fd6EdwO3n9R96l/EPvcv4h95l/ENPavnd+Lytr/x3OVH+74Q7pT1dSmxczyoi736APZHoX+/beKjppS7/YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiQ/wIAAP//YKPiyQ==") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x88000, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f200000002000000000900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x401}, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) sched_setscheduler(r4, 0x3, &(0x7f00000001c0)=0x7) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 31.442682144s ago: executing program 8 (id=1792): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c00"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @remote}, 0x1, 0x0, 0x4}}, 0x26) 30.640842399s ago: executing program 8 (id=1806): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x9, 0x4) sendfile(r0, r1, &(0x7f0000000540)=0x9, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@usrquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@grpjquota}, {@noblock_validity}, {@minixdf}, {@nogrpid}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x8}}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 30.550671891s ago: executing program 75 (id=1806): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x9, 0x4) sendfile(r0, r1, &(0x7f0000000540)=0x9, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@usrquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@grpjquota}, {@noblock_validity}, {@minixdf}, {@nogrpid}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x8}}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 26.507387604s ago: executing program 7 (id=1895): unlinkat(0xffffffffffffff9c, 0x0, 0x0) 26.473806655s ago: executing program 7 (id=1898): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r1, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @remote}, 0x1, 0x0, 0x4}}, 0x26) 26.446695686s ago: executing program 7 (id=1899): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r1, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @remote}, 0x1, 0x0, 0x4}}, 0x26) 26.384182286s ago: executing program 7 (id=1904): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x88000, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f200000002000000000900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3, 0x0, 0x401}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) sched_setscheduler(r4, 0x3, &(0x7f00000001c0)=0x7) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 25.830227107s ago: executing program 7 (id=1916): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000062, 0x0) 24.920413414s ago: executing program 7 (id=1923): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) 24.873967565s ago: executing program 76 (id=1923): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) 5.588485777s ago: executing program 0 (id=2424): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x603f) 5.510896359s ago: executing program 0 (id=2429): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r5 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r5, 0x15f1, 0x6184, 0x23, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000180)={0x6, r0, 0x15, {0x6, 0x3}, 0x7f}, 0x1) 5.407112931s ago: executing program 0 (id=2436): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x10000000003}) 5.363846552s ago: executing program 0 (id=2439): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x5a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x101, 0x7, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x3a) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x8000000000000000}, 0x18) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r4, 0x0, 0xfffffeea) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r5 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket$netlink(0x10, 0x3, 0x9) unshare(0x22020400) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000440)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) stat(&(0x7f0000000700)='./file0/file1\x00', &(0x7f0000001c80)) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) r9 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r9) keyctl$read(0xb, r9, 0x0, 0x0) getsockopt$MRT6(r2, 0x29, 0xd0, 0xffffffffffffffff, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000380)='cpu~=0||!') 5.189008625s ago: executing program 0 (id=2445): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) flock(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6934, &(0x7f0000000300)={0x0, 0xd615, 0x10100, 0xffffffff, 0x100000, 0x0, r0}, 0x0, &(0x7f0000000140)) r1 = socket(0x29, 0x5, 0x4000000) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x0, 0x4}, 0x20) connect$inet(r1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket(0x10, 0x80002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) fcntl$setstatus(r3, 0x4, 0x6800) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x3f, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 3.27753463s ago: executing program 0 (id=2490): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 2.353740347s ago: executing program 2 (id=2498): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902000000000000000001"], 0x38}}, 0x0) 2.288097008s ago: executing program 2 (id=2500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESHEX=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0xffffffffffffffc4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r5, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x120, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x804) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000002c00248004000180080001006c6f67001c000280060001400000000005ef044000140000080002402d5c2d000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000008000a"], 0x80}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_tid_address(0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="120100030a242bff800410d0e50c01"], 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) mknodat$loop(0xffffffffffffffff, 0x0, 0x4, 0x0) io_uring_enter(r6, 0x27e2, 0x0, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 2.16906473s ago: executing program 9 (id=2501): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x3f, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 1.781356657s ago: executing program 1 (id=2505): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000004c0), &(0x7f0000000040)}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='xprt_retransmit\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="60000000000b010800000000000000000a00000508000240000000000d0001005b2e2a2a2a2e5c2c000000000800024000000005080003"], 0x60}, 0x1, 0x0, 0x0, 0x8850}, 0x42000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x7}, 0x18) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='\xaa\x00', &(0x7f0000000080)="fd", 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='syzkaller\x1b', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) close(0xffffffffffffffff) 1.774461017s ago: executing program 9 (id=2506): r0 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_submit(0x0, 0x2, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2, r0}]) 1.740471228s ago: executing program 9 (id=2507): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 1.721953888s ago: executing program 1 (id=2508): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x40, 0x80462, 0x9, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00'}, 0x18) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtfilter={0x12c, 0x2c, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xfc, 0x2, [@TCA_CGROUP_EMATCHES={0xf8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xf0, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xa}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0xb1, 0x5, "1f170f3e54612f4c88308388d96a06b0465fab0aaf1c81d99b5bf0d97c3ab2c1587f5cca86104e881ab801d1e762a7413c19c77896cc5489f00f2fac4ac569c48dd1e0eb9143bfcce7c427b4ac7ccf1fc91127c99b87b6e0af5933c008215b868b8df9daea71614fe3f252b29287cbfe1531f05726c5bb28c7bc538fdb6cdef72c14c41cfb74e3d762e880f088cca1ff8bdf9a35c55a03504759868cd78b6b270fb7df8f7acc13ad9b194fe2a0"}]}}]}]}]}}]}, 0x12c}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xff}, 'port1\x00', 0x60, 0x1b1878, 0x4, 0x1, 0x3e4, 0x0, 0x100004, 0x0, 0x6, 0x20}) close(r0) 1.699231749s ago: executing program 9 (id=2509): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x6, 0x7ffc1ff8}]}) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\''], 0x28}, 0x4080) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f00000190c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000180)=0xc) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) 1.682509559s ago: executing program 2 (id=2510): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xa8}, 0x18) timer_create(0x0, &(0x7f0000000980)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fstat(r2, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, r3, &(0x7f0000000900)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = eventfd2(0x8, 0x0) write$eventfd(r4, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x7, 0x20, 0x0, 0x81, {{0x20, 0x4, 0x0, 0x0, 0x80, 0x67, 0x0, 0x9, 0x29, 0x0, @private=0xa010102, @private=0xa010102, {[@lsrr={0x83, 0x27, 0x4a, [@broadcast, @loopback, @broadcast, @multicast1, @remote, @private=0xa010101, @multicast1, @multicast1, @rand_addr=0x64010101]}, @generic={0x44, 0xb, "0adaba70f03ecb7c60"}, @timestamp_prespec={0x44, 0x14, 0x92, 0x3, 0x6, [{@local, 0x6}, {@local, 0x85}]}, @ssrr={0x89, 0x23, 0x6a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast1, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @rand_addr=0x64010100, @loopback]}]}}}}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) semctl$IPC_INFO(0xffffffffffffffff, 0x0, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@bridge_getneigh={0x5c, 0x1e, 0x400, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, r5, 0x40080, 0x21000}, [@IFLA_OPERSTATE={0x5, 0x10, 0x17}, @IFLA_OPERSTATE={0x5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x78a88}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x7}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xc078}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008850}, 0x91) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) syz_open_dev$evdev(&(0x7f0000000940), 0x6, 0x24000) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x14c, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_FILTER={0x44, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x30}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x414}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x50}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc0}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x104}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc21}]}, @CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @local}}}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x2c80000, 0x5, 0xfff]}, @CTA_NAT_DST={0x3c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xe9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8000}]}]}, 0x14c}}, 0x810) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000500)={'#! ', './file0'}, 0xb) r9 = syz_io_uring_setup(0x27f0, &(0x7f0000000280)={0x0, 0x400000, 0x10300, 0x400001, 0x28f}, &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r9, 0xf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x11, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r10 = socket$unix(0x1, 0x2, 0x0) bind$unix(r10, &(0x7f0000000080)=@file={0x1, './mnt\x00'}, 0x6e) 1.672208809s ago: executing program 9 (id=2511): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc2}, r0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x23, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000600000000000002020000000000000008000000000000000000000018584500000c1000000000000000000000183900", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000f80500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000095a05000e0000001831000003000000000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x94d4, 0xd2, &(0x7f0000000440)=""/210, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x2, 0xf8, 0x5}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000240)=[{0x0, 0x3, 0x3, 0xb}, {0x0, 0xb, 0x3}, {0x5, 0x2, 0x10, 0x2}, {0x3, 0x3, 0xa, 0xb}, {0x5, 0x3, 0x3, 0xc}, {0x1, 0x3, 0xe}, {0x0, 0x1, 0x2, 0x2}], 0x10, 0xc32}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='initcall_start\x00', r1, 0x0, 0x1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f91124fc600400037a0a0009000c0282c137153e370e0c1180fc0b10000300", 0x2e}], 0x1}, 0x20040094) sendmsg$nl_route(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@ipv4_getrule={0x1c, 0x22, 0x4, 0x70bd25, 0x25dfdbfe, {0x2, 0x10, 0x10, 0x3, 0x7, 0x0, 0x0, 0x0, 0x3}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 981.649821ms ago: executing program 1 (id=2514): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r2, &(0x7f0000000600)="5f0efc", 0xfffffffffffffe4c, 0x44, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) open(&(0x7f0000000380)='./bus\x00', 0x143c62, 0x48) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') setrlimit(0x7, &(0x7f0000000180)={0x5, 0x5}) 966.070642ms ago: executing program 9 (id=2515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f00000000c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$caif_stream(0x25, 0x1, 0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') preadv(r3, &(0x7f0000002540)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x47fff, 0x6) syz_read_part_table(0x406c, &(0x7f0000008100)="$eJzszzFKxGAQBeCXjcEogUXQShAXe4mdVW6xjZXsGaxVzE0sxQN4IkuvEMHF1aSwU1S+r5rhzQv5wx9Rb6YiydPqcS/J8SJ9267Drfd856PUnqXarWdpklwluRh/c/nwM/8OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8QrPRdjNJ6820Okx/3eW8SeqDeXJXpuqOiuwni9P1Sfm5WSbPSYokL0mW8298AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwj1yOtu1p3HxRvT9J31Vv422SYRiG8UGRV3bnmAgAGASC4JcxGJP4wBcKaKh3+5u59NK+5NdhFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBzIAAAAAwvyt82g/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwUAAP//BkAT8g==") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xdabc17803f570a03, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(r2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x2, 0x1, 0x7, 0xfff, 0x1}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000380)={r6}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xffffffff, 0xff}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x1, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, r1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{0x9, 0xed, 0x5}, {0x7fff, 0x3, 0x2, 0x7fffffff}, {0x9, 0xd, 0x7a, 0x9c3}, {0x7ff, 0x5, 0x6, 0x24a}]}) r7 = gettid() write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="55ab8306c587829000c03cbdefa20c8774afbf47449dbfb57a826c4e4576da657ab0286f30c90b8f463a401e672be603e5f606085ed20fc354fb83f1b33bfd919a9608fae1dc465a45aa39dcc39907cb8992e4a3bda95308635354e550a9a8d8306c5e7d8b251a63aba0f234b4799d8a12cb674e4b12682dee6438a29d38cebe177373b24ada5460dee42d10761caaf28818eca8f26d9fc300c9947ad0e37c91f65e7ce5f3fa7ec9d7d1e7d7dc72b3dd5cfaf537e585adad5ab2bb3f1ee5cd966a8033b44e941d905cf74b722c16684ec1abab0cce4c38b7ad90552cfa8334aa813bb1829b04a6ce"], 0xe8) process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) 865.399904ms ago: executing program 2 (id=2517): io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r0, 0x2, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) 865.183254ms ago: executing program 1 (id=2518): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000004c0), &(0x7f0000000040)}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='xprt_retransmit\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="60000000000b010800000000000000000a00000508000240000000000d0001005b2e2a2a2a2e5c2c000000000800024000000005080003"], 0x60}, 0x1, 0x0, 0x0, 0x8850}, 0x42000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x7}, 0x18) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='\xaa\x00', &(0x7f0000000080)="fd", 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='syzkaller\x1b', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) close(0xffffffffffffffff) 855.706714ms ago: executing program 4 (id=2519): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x3f, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 786.733445ms ago: executing program 1 (id=2520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESHEX=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0xffffffffffffffc4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r5, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x120, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x804) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000002c00248004000180080001006c6f67001c000280060001400000000005ef044000140000080002402d5c2d000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000008000a"], 0x80}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_tid_address(0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="120100030a242bff800410d0e50c01"], 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240029c900"/20, @ANYRES16, @ANYBLOB="01002dbd7000ffdbdf2518000000080030800400018008000300", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x40084) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) mknodat$loop(0xffffffffffffffff, 0x0, 0x4, 0x0) io_uring_enter(r6, 0x27e2, 0x0, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 741.347716ms ago: executing program 2 (id=2521): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc2}, r0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x23, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000600000000000002020000000000000008000000000000000000000018584500000c1000000000000000000000183900", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000f80500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000095a05000e0000001831000003000000000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x94d4, 0xd2, &(0x7f0000000440)=""/210, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x2, 0xf8, 0x5}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000240)=[{0x0, 0x3, 0x3, 0xb}, {0x0, 0xb, 0x3}, {0x5, 0x2, 0x10, 0x2}, {0x3, 0x3, 0xa, 0xb}, {0x5, 0x3, 0x3, 0xc}, {0x1, 0x3, 0xe}, {0x0, 0x1, 0x2, 0x2}], 0x10, 0xc32}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='initcall_start\x00', r1, 0x0, 0x1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f91124fc600400037a0a0009000c0282c137153e370e0c1180fc0b10000300", 0x2e}], 0x1}, 0x20040094) sendmsg$nl_route(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@ipv4_getrule={0x1c, 0x22, 0x4, 0x70bd25, 0x25dfdbfe, {0x2, 0x10, 0x10, 0x3, 0x7, 0x0, 0x0, 0x0, 0x3}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 673.163357ms ago: executing program 2 (id=2522): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r0}) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') gettid() rt_sigsuspend(&(0x7f0000000040)={[0x1]}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='bdi_dirty_ratelimit\x00', r2, 0x0, 0x100000000000000}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x110) futimesat(0xffffffffffffffff, 0x0, 0xfffffffffffffffd) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="f1ff0000000000000000000060"], 0x48) syz_read_part_table(0x104d, &(0x7f0000001080)="$eJzszzEKwjAUBuBUY9FJj2BnT1F3x95HPImLi4c0ktcIXkCw8H1DXn5C/pDEP9i22ceaW9p3rzLbRB7W7aCUeV6Pw3265Xp/19WO8ZAe51MUfCrT2H+/VJtWsbvkND1//TEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWIJ3AAAA///ZrQ+k") openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) io_setup(0x6, &(0x7f0000001000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sync() 405.386192ms ago: executing program 4 (id=2523): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @remote}, 0x1, 0x0, 0x4}}, 0x26) 377.906273ms ago: executing program 4 (id=2524): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendfile(r3, r2, 0x0, 0x7ffff088) 327.984263ms ago: executing program 4 (id=2525): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x40, 0x80462, 0x9, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00'}, 0x18) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtfilter={0x12c, 0x2c, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xfc, 0x2, [@TCA_CGROUP_EMATCHES={0xf8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xf0, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xa}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0xb1, 0x5, "1f170f3e54612f4c88308388d96a06b0465fab0aaf1c81d99b5bf0d97c3ab2c1587f5cca86104e881ab801d1e762a7413c19c77896cc5489f00f2fac4ac569c48dd1e0eb9143bfcce7c427b4ac7ccf1fc91127c99b87b6e0af5933c008215b868b8df9daea71614fe3f252b29287cbfe1531f05726c5bb28c7bc538fdb6cdef72c14c41cfb74e3d762e880f088cca1ff8bdf9a35c55a03504759868cd78b6b270fb7df8f7acc13ad9b194fe2a0"}]}}]}]}]}}]}, 0x12c}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xff}, 'port1\x00', 0x60, 0x1b1878, 0x4, 0x1, 0x3e4, 0x0, 0x100004, 0x0, 0x6, 0x20}) close(r0) 115.986808ms ago: executing program 1 (id=2526): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f000000a400)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x10120, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000200"/16, @ANYRESDEC=r2], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r2, @ANYRESDEC=r1, @ANYRES32=r2, @ANYRESOCT, @ANYRES16=r3], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703200000000000850000001b000000b7000000d6458abdbfb7c47c1ebf64f500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) readv(r5, &(0x7f0000000580)=[{&(0x7f0000001300)=""/229, 0xe5}, {&(0x7f00000007c0)=""/198, 0xc6}], 0x2) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r6, 0xa, 0x13) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, &(0x7f00000003c0)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) r10 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4011, &(0x7f0000000000)={[{@nobh}, {@norecovery}, {@nobh}]}, 0x9, 0x66d, &(0x7f00000011c0)="$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") ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000340)={0x7, r10, 'id0\x00'}) io_uring_enter(r11, 0x6141, 0xb76d, 0x4, &(0x7f0000000180)={[0x7]}, 0x8) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) 72.135688ms ago: executing program 4 (id=2527): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x9, 0x4) sendfile(r0, r1, &(0x7f0000000540)=0x9, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@usrquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@grpjquota}, {@noblock_validity}, {@minixdf}, {@nogrpid}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x8}}]}, 0x11, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 0s ago: executing program 4 (id=2528): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x2753, &(0x7f0000000080)={0x0, 0xfffffffc, 0x100, 0xfffffffd, 0x145}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfcd1, 0xfecc) fallocate(r2, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x3a4, &(0x7f0000000bc0)="$eJzs3c9PXNUXAPAz05ah/X5hWBgTNcabutHNBPAfKDFtYiTR0I6pLkxeZdAJU4bMTDBDjMWVW/+OxqU7E+M/wKLu3blj47KLps8wP8oAlaoFno2fTwLvMPee3Pve472cDZy929/dXV/r1tayXpSvpShHRPlhxNwgGiqNjuVBPBWTduLt6u1fX7/58SfvLy0vX19J6cbSrXcWU0qzb/z05VffX/2597+Pfpj9sRK7c5/u/b742+7Lu6/sPb71RbObmt200e6lLN1pt3vZnVYjrTa767WUPmw1sm4jNTe6jc6h8bVWe3Ozn7KN1Zkrm51Gt5uyjX5ab/RTr516nX7KPs+aG6lWq6WZK8G9Z4zX76+sZEvDePqEeddOc1OcuosnjnY6S9n+M1w5NlK/f4abAgD+pQ7X//F36v+d/W9TR+v/m6PRf1T/Xwr1/3marP9HSoVthjOyX/9PjZ7fCRX1PwAAAAAAAAAAAAAAvBge5nk1z/Pq+JhXIqI0+nviPK8WvT/O1rH7f+Sr6P1xtib+ccd0ROvbrfpWfXgcji+tRTNa0Yj5qMaj/VfC2DC+8d7y9fk0UIqZu/cG+VcfRNQvHM5fiGrMTeRPD94vg/yFYX4a5c+O93ZlMn8xqvHS09fPK4fy6xH7x6l4682J/FpU45fPoh2tWB0sfZD/9UJK736wfCS/MpgHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH9DLY29FsO+91v1iMuxNerfXzuYUBqljPrjD3940l9/Pqrx6On9+edTfuF4f/6L8erF4s4bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACZ1+9vrWavV6JxXMO75P/hkahz8eVZpOH3nyNDleNZaD0518+XTugiP8zw/q8s7fb638nmCSxEn3cF89Fvy/Gv9PyJOmFOJiKIuwjdFPYN/KSjibQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADFOmj6XfROAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKFK3v72etVqNTre/XY5R8OST0wmKPkcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAXyR8BAAD//9JOBek=") io_setup(0x202, &(0x7f0000000200)) kernel console output (not intermixed with test programs): ted syzkaller #0 PREEMPT(voluntary) [ 214.886843][T10866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.886859][T10866] Call Trace: [ 214.886868][T10866] [ 214.886921][T10866] __dump_stack+0x1d/0x30 [ 214.886942][T10866] dump_stack_lvl+0xe8/0x140 [ 214.887014][T10866] dump_stack+0x15/0x1b [ 214.887032][T10866] should_fail_ex+0x265/0x280 [ 214.887109][T10866] ? assoc_array_insert+0x75/0x1990 [ 214.887188][T10866] should_failslab+0x8c/0xb0 [ 214.887213][T10866] __kmalloc_cache_noprof+0x4c/0x320 [ 214.887254][T10866] assoc_array_insert+0x75/0x1990 [ 214.887289][T10866] ? assoc_array_delete+0x58/0x950 [ 214.887465][T10866] ? bcmp+0x5e/0x90 [ 214.887491][T10866] ? keyring_compare_object+0xda/0x100 [ 214.887521][T10866] ? assoc_array_delete+0x6e2/0x950 [ 214.887700][T10866] __key_link_begin+0x8a/0x140 [ 214.887724][T10866] key_move+0x160/0x550 [ 214.887745][T10866] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 214.887777][T10866] ? __pfx_keyring_search_iterator+0x10/0x10 [ 214.887876][T10866] keyctl_keyring_move+0xd6/0x110 [ 214.887908][T10866] __se_sys_keyctl+0x5f7/0xb80 [ 214.888021][T10866] ? __rcu_read_unlock+0x4f/0x70 [ 214.888044][T10866] ? bpf_trace_run2+0x124/0x1c0 [ 214.888092][T10866] ? __bpf_trace_sys_enter+0x10/0x30 [ 214.888125][T10866] __x64_sys_keyctl+0x67/0x80 [ 214.888159][T10866] x64_sys_call+0x2f6d/0x2ff0 [ 214.888260][T10866] do_syscall_64+0xd2/0x200 [ 214.888301][T10866] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 214.888343][T10866] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 214.888388][T10866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.888480][T10866] RIP: 0033:0x7f61f727eba9 [ 214.888499][T10866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.888558][T10866] RSP: 002b:00007f61f5cdf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 214.888582][T10866] RAX: ffffffffffffffda RBX: 00007f61f74c5fa0 RCX: 00007f61f727eba9 [ 214.888595][T10866] RDX: ffffffffffffffff RSI: 000000001a8b0a19 RDI: 000000000000001e [ 214.888644][T10866] RBP: 00007f61f5cdf090 R08: 0000000000000000 R09: 0000000000000000 [ 214.888656][T10866] R10: 00000000332b3137 R11: 0000000000000246 R12: 0000000000000001 [ 214.888669][T10866] R13: 00007f61f74c6038 R14: 00007f61f74c5fa0 R15: 00007ffc631097c8 [ 214.888688][T10866] [ 215.152822][T10869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.161365][T10869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.172727][T10861] loop4: detected capacity change from 0 to 8192 [ 215.228155][T10877] loop7: detected capacity change from 0 to 1024 [ 215.237481][T10873] FAULT_INJECTION: forcing a failure. [ 215.237481][T10873] name failslab, interval 1, probability 0, space 0, times 0 [ 215.242375][T10877] EXT4-fs: inline encryption not supported [ 215.250255][T10873] CPU: 1 UID: 0 PID: 10873 Comm: syz.8.1748 Not tainted syzkaller #0 PREEMPT(voluntary) [ 215.250289][T10873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 215.250306][T10873] Call Trace: [ 215.250358][T10873] [ 215.250370][T10873] __dump_stack+0x1d/0x30 [ 215.250403][T10873] dump_stack_lvl+0xe8/0x140 [ 215.250432][T10873] dump_stack+0x15/0x1b [ 215.250457][T10873] should_fail_ex+0x265/0x280 [ 215.250492][T10873] should_failslab+0x8c/0xb0 [ 215.250601][T10873] kmem_cache_alloc_noprof+0x50/0x310 [ 215.250639][T10873] ? audit_log_start+0x365/0x6c0 [ 215.250686][T10873] audit_log_start+0x365/0x6c0 [ 215.250736][T10873] audit_seccomp+0x48/0x100 [ 215.250843][T10873] ? __seccomp_filter+0x68c/0x10d0 [ 215.250886][T10873] __seccomp_filter+0x69d/0x10d0 [ 215.250920][T10873] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 215.250959][T10873] ? vfs_write+0x7e8/0x960 [ 215.250995][T10873] ? __rcu_read_unlock+0x4f/0x70 [ 215.251126][T10873] ? __fget_files+0x184/0x1c0 [ 215.251166][T10873] __secure_computing+0x82/0x150 [ 215.251204][T10873] syscall_trace_enter+0xcf/0x1e0 [ 215.251229][T10873] do_syscall_64+0xac/0x200 [ 215.251271][T10873] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 215.251306][T10873] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 215.251393][T10873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.251423][T10873] RIP: 0033:0x7fe97168eba9 [ 215.251447][T10873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.251473][T10873] RSP: 002b:00007fe9700f6fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 215.251500][T10873] RAX: ffffffffffffffda RBX: 00007fe9718d5fa0 RCX: 00007fe97168eba9 [ 215.251519][T10873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000b44040 [ 215.251563][T10873] RBP: 00007fe9700f7090 R08: 0000000000000000 R09: 0000000000000000 [ 215.251582][T10873] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 215.251599][T10873] R13: 00007fe9718d6038 R14: 00007fe9718d5fa0 R15: 00007ffe581f98d8 [ 215.251627][T10873] [ 215.295981][T10879] loop4: detected capacity change from 0 to 1024 [ 215.303369][T10877] EXT4-fs (loop7): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 215.322705][T10879] EXT4-fs: inline encryption not supported [ 215.497615][T10879] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 215.523070][T10885] loop7: detected capacity change from 0 to 1024 [ 215.545253][T10879] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 215.561393][T10885] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.636784][T10893] loop4: detected capacity change from 0 to 512 [ 215.652232][T10893] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1754: casefold flag without casefold feature [ 215.665507][T10893] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1754: couldn't read orphan inode 15 (err -117) [ 215.818437][T10902] loop4: detected capacity change from 0 to 256 [ 215.826727][T10902] vfat: Unknown parameter 'fs' [ 216.047414][T10904] loop4: detected capacity change from 0 to 512 [ 216.216345][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 216.216367][ T29] audit: type=1400 audit(1757846816.041:4231): avc: denied { unmount } for pid=9707 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 216.308543][T10911] FAULT_INJECTION: forcing a failure. [ 216.308543][T10911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.321878][T10911] CPU: 1 UID: 0 PID: 10911 Comm: syz.0.1760 Not tainted syzkaller #0 PREEMPT(voluntary) [ 216.321909][T10911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.321925][T10911] Call Trace: [ 216.321933][T10911] [ 216.321943][T10911] __dump_stack+0x1d/0x30 [ 216.321969][T10911] dump_stack_lvl+0xe8/0x140 [ 216.322035][T10911] dump_stack+0x15/0x1b [ 216.322053][T10911] should_fail_ex+0x265/0x280 [ 216.322202][T10911] should_fail+0xb/0x20 [ 216.322222][T10911] should_fail_usercopy+0x1a/0x20 [ 216.322247][T10911] _copy_from_user+0x1c/0xb0 [ 216.322283][T10911] memdup_user+0x5e/0xd0 [ 216.322352][T10911] proc_pid_attr_write+0x15e/0x220 [ 216.322409][T10911] vfs_writev+0x406/0x8b0 [ 216.322445][T10911] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 216.322533][T10911] ? mutex_lock+0xd/0x30 [ 216.322567][T10911] do_writev+0xe7/0x210 [ 216.322752][T10911] __x64_sys_writev+0x45/0x50 [ 216.322827][T10911] x64_sys_call+0x1e9a/0x2ff0 [ 216.322856][T10911] do_syscall_64+0xd2/0x200 [ 216.322891][T10911] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 216.322993][T10911] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 216.323032][T10911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.323057][T10911] RIP: 0033:0x7f462848eba9 [ 216.323073][T10911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.323154][T10911] RSP: 002b:00007f4626eef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 216.323173][T10911] RAX: ffffffffffffffda RBX: 00007f46286d5fa0 RCX: 00007f462848eba9 [ 216.323186][T10911] RDX: 0000000000000001 RSI: 0000200000001240 RDI: 0000000000000005 [ 216.323200][T10911] RBP: 00007f4626eef090 R08: 0000000000000000 R09: 0000000000000000 [ 216.323216][T10911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.323232][T10911] R13: 00007f46286d6038 R14: 00007f46286d5fa0 R15: 00007fffc0b27348 [ 216.323256][T10911] [ 216.599859][T10913] loop8: detected capacity change from 0 to 8192 [ 216.662184][T10904] EXT4-fs (loop4): too many log groups per flexible block group [ 216.669962][T10904] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 216.676828][T10904] EXT4-fs (loop4): mount failed [ 216.682464][ T29] audit: type=1326 audit(1757846816.511:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10915 comm="syz.0.1762" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f462848eba9 code=0x0 [ 216.714730][ T29] audit: type=1400 audit(1757846816.541:4233): avc: denied { ioctl } for pid=10901 comm="syz.4.1757" path="socket:[50566]" dev="sockfs" ino=50566 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 216.741162][T10903] __nla_validate_parse: 1 callbacks suppressed [ 216.741181][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1757'. [ 216.756365][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1757'. [ 216.788162][ T29] audit: type=1400 audit(1757846816.591:4234): avc: denied { mount } for pid=10901 comm="syz.4.1757" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 216.829486][T10925] loop8: detected capacity change from 0 to 764 [ 216.832275][ T29] audit: type=1400 audit(1757846816.641:4235): avc: denied { name_bind } for pid=10923 comm="syz.7.1764" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 216.866225][T10925] rock: directory entry would overflow storage [ 216.872564][T10925] rock: sig=0x4f50, size=4, remaining=3 [ 216.878223][T10925] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 216.881945][ T29] audit: type=1326 audit(1757846816.671:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.0.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462848eba9 code=0x7ffc0000 [ 216.909337][ T29] audit: type=1326 audit(1757846816.671:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.0.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462848eba9 code=0x7ffc0000 [ 216.932905][ T29] audit: type=1326 audit(1757846816.671:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.0.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f462848eba9 code=0x7ffc0000 [ 216.956544][ T29] audit: type=1326 audit(1757846816.671:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.0.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f462848eba9 code=0x7ffc0000 [ 216.980077][ T29] audit: type=1326 audit(1757846816.671:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.0.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f462848eba9 code=0x7ffc0000 [ 217.008388][T10925] Symlink component flag not implemented [ 217.040928][T10925] Symlink component flag not implemented (129) [ 217.055014][T10925] rock: directory entry would overflow storage [ 217.061205][T10925] rock: sig=0x4f50, size=4, remaining=3 [ 217.066857][T10925] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 217.083583][T10935] loop7: detected capacity change from 0 to 764 [ 217.098542][T10937] loop4: detected capacity change from 0 to 1024 [ 217.106707][T10935] rock: directory entry would overflow storage [ 217.113006][T10935] rock: sig=0x4f50, size=4, remaining=3 [ 217.118716][T10935] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 217.132396][T10937] EXT4-fs: inline encryption not supported [ 217.140481][T10937] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 217.154295][T10935] Symlink component flag not implemented [ 217.160143][T10935] Symlink component flag not implemented (129) [ 217.193201][T10935] rock: directory entry would overflow storage [ 217.199397][T10935] rock: sig=0x4f50, size=4, remaining=3 [ 217.205123][T10935] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 217.269379][T10950] loop4: detected capacity change from 0 to 512 [ 217.277374][T10950] EXT4-fs: Ignoring removed i_version option [ 217.288019][T10950] EXT4-fs (loop4): 1 truncate cleaned up [ 217.293875][T10946] loop8: detected capacity change from 0 to 8192 [ 217.310302][T10956] loop7: detected capacity change from 0 to 1024 [ 217.317019][T10956] EXT4-fs: inline encryption not supported [ 217.336759][T10956] EXT4-fs (loop7): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 217.387929][T10956] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 217.418957][T10969] loop8: detected capacity change from 0 to 512 [ 217.435302][T10739] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 217.436681][T10969] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 217.459227][T10969] EXT4-fs (loop8): invalid journal inode [ 217.465099][T10969] EXT4-fs (loop8): can't get journal size [ 217.478144][T10969] EXT4-fs (loop8): 1 truncate cleaned up [ 217.487270][T10974] FAULT_INJECTION: forcing a failure. [ 217.487270][T10974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.500407][T10974] CPU: 1 UID: 0 PID: 10974 Comm: syz.7.1783 Not tainted syzkaller #0 PREEMPT(voluntary) [ 217.500490][T10974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.500550][T10974] Call Trace: [ 217.500618][T10974] [ 217.500626][T10974] __dump_stack+0x1d/0x30 [ 217.500653][T10974] dump_stack_lvl+0xe8/0x140 [ 217.500677][T10974] dump_stack+0x15/0x1b [ 217.500699][T10974] should_fail_ex+0x265/0x280 [ 217.500731][T10974] should_fail+0xb/0x20 [ 217.500775][T10974] should_fail_usercopy+0x1a/0x20 [ 217.500863][T10974] _copy_to_user+0x20/0xa0 [ 217.500905][T10974] simple_read_from_buffer+0xb5/0x130 [ 217.500934][T10974] proc_fail_nth_read+0x10e/0x150 [ 217.500970][T10974] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.501066][T10974] vfs_read+0x1a8/0x770 [ 217.501093][T10974] ? __rcu_read_unlock+0x4f/0x70 [ 217.501156][T10974] ? __fget_files+0x184/0x1c0 [ 217.501190][T10974] ksys_read+0xda/0x1a0 [ 217.501219][T10974] __x64_sys_read+0x40/0x50 [ 217.501247][T10974] x64_sys_call+0x27bc/0x2ff0 [ 217.501320][T10974] do_syscall_64+0xd2/0x200 [ 217.501357][T10974] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 217.501453][T10974] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 217.501560][T10974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.501613][T10974] RIP: 0033:0x7f61f727d5bc [ 217.501631][T10974] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 217.501653][T10974] RSP: 002b:00007f61f5cdf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 217.501693][T10974] RAX: ffffffffffffffda RBX: 00007f61f74c5fa0 RCX: 00007f61f727d5bc [ 217.501767][T10974] RDX: 000000000000000f RSI: 00007f61f5cdf0a0 RDI: 0000000000000007 [ 217.501785][T10974] RBP: 00007f61f5cdf090 R08: 0000000000000000 R09: 0000000000000000 [ 217.501800][T10974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.501815][T10974] R13: 00007f61f74c6038 R14: 00007f61f74c5fa0 R15: 00007ffc631097c8 [ 217.501839][T10974] [ 217.506922][T10972] hub 2-0:1.0: USB hub found [ 217.547623][T10977] loop4: detected capacity change from 0 to 1024 [ 217.550360][T10972] hub 2-0:1.0: 8 ports detected [ 217.560608][T10977] EXT4-fs: inline encryption not supported [ 217.600837][T10969] loop8: detected capacity change from 512 to 0 [ 217.610168][ C1] blk_print_req_error: 22 callbacks suppressed [ 217.610189][ C1] I/O error, dev loop8, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 217.616253][T10977] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 217.619681][T10979] EXT4-fs warning (device loop8): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz.8.1782: error -5 reading directory block [ 217.677732][T10977] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, [ 217.698584][T10984] loop7: detected capacity change from 0 to 512 [ 217.699191][T10984] EXT4-fs: Ignoring removed i_version option [ 217.701651][T10977] inode 15: block 225: [ 217.721029][ C1] I/O error, dev loop8, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 217.723430][T10977] freeing already freed block (bit 14); block bitmap corrupt. [ 217.730038][ C1] I/O error, dev loop8, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 217.790081][T10984] EXT4-fs (loop7): 1 truncate cleaned up [ 217.794476][T10979] EXT4-fs error (device loop8): ext4_get_inode_loc:4999: inode #2: block 5: comm syz.8.1782: unable to read itable block [ 217.860275][ C0] I/O error, dev loop8, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 217.869834][ C0] I/O error, dev loop8, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 217.879341][ C0] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 217.887718][T10979] EXT4-fs (loop8): I/O error while writing superblock [ 217.894923][T10979] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: IO failure [ 217.950645][ C0] I/O error, dev loop8, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 217.960199][ C0] I/O error, dev loop8, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 217.969774][ C0] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 217.983089][T10979] EXT4-fs (loop8): I/O error while writing superblock [ 217.989927][T10979] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #2: comm syz.8.1782: mark_inode_dirty error [ 218.002858][ C1] I/O error, dev loop8, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 218.012399][ C1] I/O error, dev loop8, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 218.021883][ C1] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 218.030215][T10979] EXT4-fs (loop8): I/O error while writing superblock [ 218.061417][ C1] I/O error, dev loop8, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 218.075132][T10033] EXT4-fs warning (device loop8): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 218.187898][T11001] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11001 comm=syz.0.1791 [ 218.423791][T11006] SELinux: failed to load policy [ 218.548167][T10502] EXT4-fs error (device loop8): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:19: unable to read itable block [ 218.584674][ C0] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 218.589056][T11012] loop4: detected capacity change from 0 to 764 [ 218.599372][T10502] EXT4-fs (loop8): I/O error while writing superblock [ 218.606463][T11014] loop7: detected capacity change from 0 to 764 [ 218.613629][ C0] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 218.622419][T10033] EXT4-fs (loop8): I/O error while writing superblock [ 218.642381][T11014] rock: directory entry would overflow storage [ 218.648565][T11014] rock: sig=0x4f50, size=4, remaining=3 [ 218.654158][T11014] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 218.664905][T11012] Symlink component flag not implemented [ 218.670626][T11012] Symlink component flag not implemented (129) [ 218.678779][T11012] rock: directory entry would overflow storage [ 218.685059][T11012] rock: sig=0x4f50, size=4, remaining=3 [ 218.690621][T11012] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 218.705522][T11014] Symlink component flag not implemented [ 218.711334][T11014] Symlink component flag not implemented (129) [ 218.719304][T11014] rock: directory entry would overflow storage [ 218.725518][T11014] rock: sig=0x4f50, size=4, remaining=3 [ 218.731137][T11014] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 218.852882][T11019] loop7: detected capacity change from 0 to 8192 [ 218.867377][ T51] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.893805][T11026] ------------[ cut here ]------------ [ 218.899355][T11026] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000)(1) [ 218.919621][T11026] WARNING: CPU: 1 PID: 11026 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 218.930079][T11026] Modules linked in: [ 218.934035][T11026] CPU: 1 UID: 0 PID: 11026 Comm: syz.4.1805 Not tainted syzkaller #0 PREEMPT(voluntary) [ 218.943898][T11026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.954020][T11026] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 218.960318][T11026] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 22 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 218.980068][T11026] RSP: 0018:ffffc9000e29f440 EFLAGS: 00010292 [ 218.986185][T11026] RAX: 345b2c32a7007400 RBX: ffff88811992e840 RCX: 0000000000080000 [ 218.994266][T11026] RDX: ffffc90004029000 RSI: 000000000001a9d7 RDI: 000000000001a9d8 [ 219.002273][T11026] RBP: 0000000000000000 R08: 0001c9000e29f27f R09: 0000000000000000 [ 219.010308][T11026] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811992e800 [ 219.018375][T11026] R13: ffff88811f7e8000 R14: ffff88811f7e8000 R15: ffff88811992e838 [ 219.026455][T11026] FS: 00007fa3c85d76c0(0000) GS:ffff8882aef40000(0000) knlGS:0000000000000000 [ 219.035519][T11026] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.042255][T11026] CR2: 00002000000054c0 CR3: 000000011f1f2000 CR4: 00000000003506f0 [ 219.050256][T11026] Call Trace: [ 219.053638][T11026] [ 219.056601][T11026] reg_set_min_max+0x1eb/0x260 [ 219.061501][T11026] check_cond_jmp_op+0x1080/0x16e0 [ 219.066732][T11026] do_check+0x332a/0x7a10 [ 219.071130][T11026] do_check_common+0xc3a/0x12a0 [ 219.076046][T11026] bpf_check+0x942b/0xd9e0 [ 219.080499][T11026] ? __rcu_read_unlock+0x4f/0x70 [ 219.085575][T11026] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 219.091599][T11026] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 219.097308][T11026] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 219.103275][T11026] ? css_rstat_updated+0xb7/0x240 [ 219.108408][T11026] ? try_charge_memcg+0x200/0x9e0 [ 219.113484][T11026] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 219.119127][T11026] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 219.125311][T11026] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 219.131445][T11026] ? css_rstat_updated+0xb7/0x240 [ 219.136592][T11026] ? __rcu_read_unlock+0x4f/0x70 [ 219.141571][T11026] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 219.147457][T11026] ? should_fail_ex+0x30/0x280 [ 219.152353][T11026] ? selinux_bpf_prog_load+0x36/0xf0 [ 219.157701][T11026] ? should_failslab+0x8c/0xb0 [ 219.162536][T11026] ? __kmalloc_cache_noprof+0x189/0x320 [ 219.168126][T11026] ? selinux_bpf_prog_load+0xbf/0xf0 [ 219.173470][T11026] ? security_bpf_prog_load+0x2c/0xa0 [ 219.178938][T11026] bpf_prog_load+0xedd/0x1070 [ 219.183706][T11026] ? security_bpf+0x2b/0x90 [ 219.188257][T11026] __sys_bpf+0x462/0x7b0 [ 219.192705][T11026] __x64_sys_bpf+0x41/0x50 [ 219.197150][T11026] x64_sys_call+0x2aea/0x2ff0 [ 219.201943][T11026] do_syscall_64+0xd2/0x200 [ 219.206479][T11026] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 219.212765][T11026] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 219.218625][T11026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.224553][T11026] RIP: 0033:0x7fa3c9b6eba9 [ 219.229089][T11026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.248743][T11026] RSP: 002b:00007fa3c85d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 219.257263][T11026] RAX: ffffffffffffffda RBX: 00007fa3c9db5fa0 RCX: 00007fa3c9b6eba9 [ 219.265267][T11026] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 219.273269][T11026] RBP: 00007fa3c9bf1e19 R08: 0000000000000000 R09: 0000000000000000 [ 219.281253][T11026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.289262][T11026] R13: 00007fa3c9db6038 R14: 00007fa3c9db5fa0 R15: 00007fff96f88ac8 [ 219.297414][T11026] [ 219.300451][T11026] ---[ end trace 0000000000000000 ]--- [ 219.335939][ T51] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.394569][T11046] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1811'. [ 219.407340][ T51] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.490922][T11033] lo speed is unknown, defaulting to 1000 [ 219.540529][ T51] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.633895][T11067] tmpfs: Unsupported parameter 'huge' [ 219.717731][T11073] hub 9-0:1.0: USB hub found [ 219.737585][T11073] hub 9-0:1.0: 8 ports detected [ 219.967983][T11082] sd 0:0:1:0: device reset [ 220.126986][T11079] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 220.133297][T11077] pim6reg1: entered promiscuous mode [ 220.135230][T11079] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 220.149277][T11077] pim6reg1: entered allmulticast mode [ 220.185677][ T51] bridge_slave_1: left allmulticast mode [ 220.191384][ T51] bridge_slave_1: left promiscuous mode [ 220.197093][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.206627][ T51] bridge_slave_0: left allmulticast mode [ 220.212444][ T51] bridge_slave_0: left promiscuous mode [ 220.218150][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.280067][T11097] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1828'. [ 220.408127][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.410926][T11103] SELinux: failed to load policy [ 220.424031][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.434389][ T51] bond0 (unregistering): Released all slaves [ 220.462431][T11114] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1834'. [ 220.485492][T11116] loop7: detected capacity change from 0 to 1024 [ 220.492418][T11116] EXT4-fs: inline encryption not supported [ 220.508027][T11116] EXT4-fs (loop7): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 220.537856][ T51] hsr_slave_0: left promiscuous mode [ 220.552065][T11121] loop4: detected capacity change from 0 to 764 [ 220.558507][ T51] hsr_slave_1: left promiscuous mode [ 220.564851][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.572339][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.581818][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.589458][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.597484][T11121] Symlink component flag not implemented [ 220.603446][T11121] Symlink component flag not implemented (129) [ 220.616478][T11121] rock: directory entry would overflow storage [ 220.622740][T11121] rock: sig=0x4f50, size=4, remaining=3 [ 220.628530][T11121] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 220.640277][ T51] veth0_macvtap: left promiscuous mode [ 220.641385][T11116] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 220.646013][ T51] veth1_vlan: left promiscuous mode [ 220.667237][ T51] veth0_vlan: left promiscuous mode [ 220.818406][T11143] loop7: detected capacity change from 0 to 1024 [ 220.832688][T11143] EXT4-fs: inline encryption not supported [ 220.837823][ T51] team0 (unregistering): Port device team_slave_1 removed [ 220.839011][T11143] EXT4-fs (loop7): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 220.858544][ T51] team0 (unregistering): Port device team_slave_0 removed [ 220.935632][T11033] chnl_net:caif_netlink_parms(): no params data found [ 221.147078][T11033] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.154286][T11033] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.163650][T11033] bridge_slave_0: entered allmulticast mode [ 221.187054][T11033] bridge_slave_0: entered promiscuous mode [ 221.215218][T11033] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.222328][T11033] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.245665][T11033] bridge_slave_1: entered allmulticast mode [ 221.252480][T11033] bridge_slave_1: entered promiscuous mode [ 221.260733][T11143] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 221.284145][T11033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.325598][T11162] loop7: detected capacity change from 0 to 1024 [ 221.332709][T11162] EXT4-fs: inline encryption not supported [ 221.339156][T11162] EXT4-fs (loop7): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 221.351432][T11033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.371408][T11163] pim6reg1: entered promiscuous mode [ 221.376948][T11163] pim6reg1: entered allmulticast mode [ 221.391261][T11033] team0: Port device team_slave_0 added [ 221.398175][T11033] team0: Port device team_slave_1 added [ 221.417009][T11033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.421513][T11167] loop7: detected capacity change from 0 to 764 [ 221.424056][T11033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.456242][T11033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.457325][T11033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.473854][T11033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.499839][T11033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.503356][T11167] Symlink component flag not implemented [ 221.517559][T11167] Symlink component flag not implemented (129) [ 221.525759][T11167] rock: directory entry would overflow storage [ 221.532126][T11167] rock: sig=0x4f50, size=4, remaining=3 [ 221.537699][T11167] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 221.576768][T11033] hsr_slave_0: entered promiscuous mode [ 221.583921][T11033] hsr_slave_1: entered promiscuous mode [ 221.654861][ T29] kauditd_printk_skb: 412 callbacks suppressed [ 221.654880][ T29] audit: type=1326 audit(1757846821.481:4653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11175 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486244eba9 code=0x7ffc0000 [ 221.686295][ T29] audit: type=1326 audit(1757846821.481:4654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11175 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486244eba9 code=0x7ffc0000 [ 221.710999][ T29] audit: type=1326 audit(1757846821.511:4655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11175 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f486244eba9 code=0x7ffc0000 [ 221.733347][T11178] loop7: detected capacity change from 0 to 8192 [ 221.734607][ T29] audit: type=1326 audit(1757846821.511:4656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11175 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486244eba9 code=0x7ffc0000 [ 221.764322][ T29] audit: type=1326 audit(1757846821.511:4657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11175 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486244eba9 code=0x7ffc0000 [ 221.789502][ T29] audit: type=1400 audit(1757846821.591:4658): avc: denied { connect } for pid=11179 comm="syz.4.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 221.805078][T11181] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 221.841687][ T29] audit: type=1400 audit(1757846821.661:4659): avc: denied { ioctl } for pid=11179 comm="syz.4.1859" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 221.877019][T11186] serio: Serial port ptm0 [ 221.900879][T11189] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 221.909169][T11189] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 221.927879][T11189] sd 0:0:1:0: device reset [ 221.946379][T11191] loop7: detected capacity change from 0 to 1024 [ 221.955483][T11191] EXT4-fs: Ignoring removed nobh option [ 221.961096][T11191] EXT4-fs: Ignoring removed nobh option [ 221.968184][ T29] audit: type=1326 audit(1757846821.781:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11192 comm="syz.1.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486244eba9 code=0x7ffc0000 [ 221.977160][T11191] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 221.991836][ T29] audit: type=1326 audit(1757846821.781:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11192 comm="syz.1.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486244eba9 code=0x7ffc0000 [ 221.991950][ T29] audit: type=1326 audit(1757846821.781:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11192 comm="syz.1.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f486244eba9 code=0x7ffc0000 [ 222.050880][T11191] EXT4-fs error (device loop7): ext4_get_journal_inode:5800: comm syz.7.1861: inode #4294967295: comm syz.7.1861: iget: illegal inode # [ 222.068208][T11191] EXT4-fs (loop7): no journal found [ 222.073492][T11191] EXT4-fs (loop7): can't get journal size [ 222.083749][T11191] EXT4-fs (loop7): failed to initialize system zone (-22) [ 222.090927][T11191] EXT4-fs (loop7): mount failed [ 222.118568][T11033] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.131303][T11033] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.145163][T11033] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.157789][T11033] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.204942][T11199] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1866'. [ 222.210513][T11033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.217103][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 222.226653][T11033] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.240848][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.247968][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.259687][T10473] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.266779][T10473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.370312][T11033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.451562][T11033] veth0_vlan: entered promiscuous mode [ 222.460065][T11033] veth1_vlan: entered promiscuous mode [ 222.478601][T11033] veth0_macvtap: entered promiscuous mode [ 222.486439][T11033] veth1_macvtap: entered promiscuous mode [ 222.496885][T11033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.508797][T11033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.520578][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.534515][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.558259][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.567213][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.608409][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1874'. [ 222.708815][T11249] loop4: detected capacity change from 0 to 512 [ 222.715857][T11249] EXT4-fs: Ignoring removed i_version option [ 222.725638][T11249] EXT4-fs (loop4): 1 truncate cleaned up [ 222.758209][T11254] loop7: detected capacity change from 0 to 1024 [ 222.770942][T11254] EXT4-fs: inline encryption not supported [ 222.772507][T11256] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 222.783282][T11254] EXT4-fs (loop7): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 222.785037][T11256] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 222.827841][T11256] sd 0:0:1:0: device reset [ 222.850217][T11264] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1885'. [ 222.918977][T11266] loop7: detected capacity change from 0 to 8192 [ 223.040641][T11290] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1897'. [ 223.136027][T11303] loop7: detected capacity change from 0 to 512 [ 223.195162][T11303] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 223.216030][T11303] EXT4-fs (loop7): invalid journal inode [ 223.234104][T11303] EXT4-fs (loop7): can't get journal size [ 223.253781][T11303] EXT4-fs (loop7): 1 truncate cleaned up [ 223.292268][T11303] loop7: detected capacity change from 512 to 0 [ 223.322049][ C1] blk_print_req_error: 6 callbacks suppressed [ 223.322065][ C1] I/O error, dev loop7, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 223.339921][T11303] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz.7.1904: error -5 reading directory block [ 223.358840][T11315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1909'. [ 223.367924][T11315] netlink: 'syz.0.1909': attribute type 11 has an invalid length. [ 223.394082][ C1] I/O error, dev loop7, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 223.403740][ C1] I/O error, dev loop7, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 223.413731][T11303] EXT4-fs error (device loop7): ext4_get_inode_loc:4999: inode #2: block 5: comm syz.7.1904: unable to read itable block [ 223.435892][T11315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1909'. [ 223.445087][T11315] netlink: 'syz.0.1909': attribute type 11 has an invalid length. [ 223.453895][ C0] I/O error, dev loop7, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 223.463454][ C0] I/O error, dev loop7, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 223.472996][ C0] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 223.481450][T11303] EXT4-fs (loop7): I/O error while writing superblock [ 223.488335][T11303] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: IO failure [ 223.508654][ C1] I/O error, dev loop7, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 223.518194][ C1] I/O error, dev loop7, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 223.527702][ C1] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 223.535981][T11303] EXT4-fs (loop7): I/O error while writing superblock [ 223.542822][T11303] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.1904: mark_inode_dirty error [ 223.608970][ C1] I/O error, dev loop7, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 223.618509][ C1] I/O error, dev loop7, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 223.618588][T11328] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1913'. [ 223.628015][ C1] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 223.646798][T11303] EXT4-fs (loop7): I/O error while writing superblock [ 223.671976][ C1] I/O error, dev loop7, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 223.681542][ T9789] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 223.722219][T11334] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 223.730475][T11334] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 223.759202][ T51] EXT4-fs error (device loop7): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:3: unable to read itable block [ 223.777865][T11334] sd 0:0:1:0: device reset [ 223.786926][ C0] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 223.805175][ T51] EXT4-fs (loop7): I/O error while writing superblock [ 223.824312][T11339] serio: Serial port ptm0 [ 223.836531][T11337] FAULT_INJECTION: forcing a failure. [ 223.836531][T11337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.849653][T11337] CPU: 1 UID: 0 PID: 11337 Comm: syz.1.1918 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 223.849686][T11337] Tainted: [W]=WARN [ 223.849693][T11337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.849706][T11337] Call Trace: [ 223.849712][T11337] [ 223.849719][T11337] __dump_stack+0x1d/0x30 [ 223.849825][T11337] dump_stack_lvl+0xe8/0x140 [ 223.849856][T11337] dump_stack+0x15/0x1b [ 223.849879][T11337] should_fail_ex+0x265/0x280 [ 223.849906][T11337] should_fail+0xb/0x20 [ 223.849939][T11337] should_fail_usercopy+0x1a/0x20 [ 223.849966][T11337] strncpy_from_user+0x25/0x230 [ 223.849999][T11337] ? bpf_trace_run2+0x124/0x1c0 [ 223.850093][T11337] __se_sys_add_key+0x86/0x350 [ 223.850126][T11337] __x64_sys_add_key+0x67/0x80 [ 223.850156][T11337] x64_sys_call+0x28c4/0x2ff0 [ 223.850220][T11337] do_syscall_64+0xd2/0x200 [ 223.850263][T11337] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 223.850335][T11337] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 223.850369][T11337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.850396][T11337] RIP: 0033:0x7f486244eba9 [ 223.850411][T11337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.850489][T11337] RSP: 002b:00007f4860eb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 223.850513][T11337] RAX: ffffffffffffffda RBX: 00007f4862695fa0 RCX: 00007f486244eba9 [ 223.850530][T11337] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000200000000000 [ 223.850546][T11337] RBP: 00007f4860eb7090 R08: ffffffffffffffff R09: 0000000000000000 [ 223.850594][T11337] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 223.850606][T11337] R13: 00007f4862696038 R14: 00007f4862695fa0 R15: 00007ffc9a2d4198 [ 223.850627][T11337] [ 223.851253][ C1] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 224.052705][ T9789] EXT4-fs (loop7): I/O error while writing superblock [ 224.067641][T11344] loop4: detected capacity change from 0 to 1024 [ 224.102336][T11344] EXT4-fs: Ignoring removed nobh option [ 224.108009][T11344] EXT4-fs: Ignoring removed nobh option [ 224.162563][T11344] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 224.192507][T11344] EXT4-fs error (device loop4): ext4_get_journal_inode:5800: comm syz.4.1919: inode #4294967295: comm syz.4.1919: iget: illegal inode # [ 224.206733][T11344] EXT4-fs (loop4): no journal found [ 224.211977][T11344] EXT4-fs (loop4): can't get journal size [ 224.268761][T11344] EXT4-fs (loop4): failed to initialize system zone (-22) [ 224.301903][T11344] EXT4-fs (loop4): mount failed [ 224.362551][T11349] pim6reg1: entered promiscuous mode [ 224.368020][T11349] pim6reg1: entered allmulticast mode [ 224.593136][T10473] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.688714][T10473] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.741948][T10473] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.834276][T11363] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1927'. [ 224.859711][T10473] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.919949][T10473] bridge_slave_1: left allmulticast mode [ 224.925717][T10473] bridge_slave_1: left promiscuous mode [ 224.931558][T10473] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.945673][T11370] loop4: detected capacity change from 0 to 8192 [ 224.955387][T10473] bridge_slave_0: left allmulticast mode [ 224.961128][T10473] bridge_slave_0: left promiscuous mode [ 224.967123][T10473] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.085441][T10473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.097722][T10473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.107556][T10473] bond0 (unregistering): Released all slaves [ 225.148336][T11390] FAULT_INJECTION: forcing a failure. [ 225.148336][T11390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.148470][T11356] lo speed is unknown, defaulting to 1000 [ 225.161610][T11390] CPU: 0 UID: 0 PID: 11390 Comm: syz.4.1936 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 225.161657][T11390] Tainted: [W]=WARN [ 225.161730][T11390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 225.161748][T11390] Call Trace: [ 225.161756][T11390] [ 225.161767][T11390] __dump_stack+0x1d/0x30 [ 225.161796][T11390] dump_stack_lvl+0xe8/0x140 [ 225.161826][T11390] dump_stack+0x15/0x1b [ 225.161869][T11390] should_fail_ex+0x265/0x280 [ 225.161904][T11390] should_fail+0xb/0x20 [ 225.161933][T11390] should_fail_usercopy+0x1a/0x20 [ 225.162029][T11390] strncpy_from_user+0x25/0x230 [ 225.162086][T11390] keyctl_restrict_keyring+0x80/0x1b0 [ 225.162128][T11390] __se_sys_keyctl+0x1ed/0xb80 [ 225.162204][T11390] ? __rcu_read_unlock+0x4f/0x70 [ 225.162235][T11390] ? bpf_trace_run2+0x124/0x1c0 [ 225.162276][T11390] ? __bpf_trace_sys_enter+0x10/0x30 [ 225.162384][T11390] __x64_sys_keyctl+0x67/0x80 [ 225.162420][T11390] x64_sys_call+0x2f6d/0x2ff0 [ 225.162451][T11390] do_syscall_64+0xd2/0x200 [ 225.162516][T11390] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 225.162550][T11390] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 225.162657][T11390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.162712][T11390] RIP: 0033:0x7fa3c9b6eba9 [ 225.162733][T11390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.162760][T11390] RSP: 002b:00007fa3c85d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 225.162819][T11390] RAX: ffffffffffffffda RBX: 00007fa3c9db5fa0 RCX: 00007fa3c9b6eba9 [ 225.162838][T11390] RDX: 0000200000000200 RSI: 0000000006bec9c1 RDI: 000000000000001d [ 225.162903][T11390] RBP: 00007fa3c85d7090 R08: 0000000000000000 R09: 0000000000000000 [ 225.162921][T11390] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 225.162939][T11390] R13: 00007fa3c9db6038 R14: 00007fa3c9db5fa0 R15: 00007fff96f88ac8 [ 225.162966][T11390] [ 225.383737][T10473] hsr_slave_0: left promiscuous mode [ 225.389387][T10473] hsr_slave_1: left promiscuous mode [ 225.395293][T10473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.402722][T10473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.413163][T10473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.420563][T10473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.434190][T10473] veth1_macvtap: left promiscuous mode [ 225.439823][T10473] veth0_macvtap: left promiscuous mode [ 225.445756][T10473] veth1_vlan: left promiscuous mode [ 225.451005][T10473] veth0_vlan: left promiscuous mode [ 225.474225][T11401] FAULT_INJECTION: forcing a failure. [ 225.474225][T11401] name failslab, interval 1, probability 0, space 0, times 0 [ 225.487123][T11401] CPU: 0 UID: 0 PID: 11401 Comm: syz.1.1941 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 225.487188][T11401] Tainted: [W]=WARN [ 225.487195][T11401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 225.487207][T11401] Call Trace: [ 225.487223][T11401] [ 225.487233][T11401] __dump_stack+0x1d/0x30 [ 225.487261][T11401] dump_stack_lvl+0xe8/0x140 [ 225.487345][T11401] dump_stack+0x15/0x1b [ 225.487361][T11401] should_fail_ex+0x265/0x280 [ 225.487386][T11401] should_failslab+0x8c/0xb0 [ 225.487431][T11401] kmem_cache_alloc_noprof+0x50/0x310 [ 225.487476][T11401] ? audit_log_start+0x365/0x6c0 [ 225.487644][T11401] audit_log_start+0x365/0x6c0 [ 225.487689][T11401] audit_seccomp+0x48/0x100 [ 225.487747][T11401] ? __seccomp_filter+0x68c/0x10d0 [ 225.487771][T11401] __seccomp_filter+0x69d/0x10d0 [ 225.487796][T11401] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 225.487828][T11401] ? vfs_write+0x7e8/0x960 [ 225.487881][T11401] __secure_computing+0x82/0x150 [ 225.487902][T11401] syscall_trace_enter+0xcf/0x1e0 [ 225.487940][T11401] do_syscall_64+0xac/0x200 [ 225.488060][T11401] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 225.488169][T11401] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 225.488204][T11401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.488306][T11401] RIP: 0033:0x7f486244eba9 [ 225.488321][T11401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.488339][T11401] RSP: 002b:00007f4860eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 225.488402][T11401] RAX: ffffffffffffffda RBX: 00007f4862695fa0 RCX: 00007f486244eba9 [ 225.488417][T11401] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffffffffffff [ 225.488433][T11401] RBP: 00007f4860eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 225.488445][T11401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.488457][T11401] R13: 00007f4862696038 R14: 00007f4862695fa0 R15: 00007ffc9a2d4198 [ 225.488479][T11401] [ 225.744242][T11405] loop2: detected capacity change from 0 to 1024 [ 225.751185][T11405] EXT4-fs: inline encryption not supported [ 225.757189][T10473] team0 (unregistering): Port device team_slave_1 removed [ 225.779760][T11405] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 225.790524][T10473] team0 (unregistering): Port device team_slave_0 removed [ 225.824264][T11405] EXT4-fs mount: 45 callbacks suppressed [ 225.824284][T11405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.845788][T11404] tipc: Enabling of bearer rejected, failed to enable media [ 225.895562][T11405] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 225.928057][T11356] chnl_net:caif_netlink_parms(): no params data found [ 225.937303][T11033] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.991813][T11356] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.999043][T11356] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.006326][T11356] bridge_slave_0: entered allmulticast mode [ 226.010775][T11422] SELinux: failed to load policy [ 226.013391][T11356] bridge_slave_0: entered promiscuous mode [ 226.024282][T11356] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.031356][T11356] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.038943][T11356] bridge_slave_1: entered allmulticast mode [ 226.056038][T11356] bridge_slave_1: entered promiscuous mode [ 226.087148][T11432] loop2: detected capacity change from 0 to 1024 [ 226.094036][T11432] EXT4-fs: inline encryption not supported [ 226.101112][T11432] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 226.123232][T11435] SELinux: failed to load policy [ 226.130824][T11356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.146117][T11356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.156286][T11432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.177679][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1955'. [ 226.186665][T11441] netlink: 'syz.4.1955': attribute type 5 has an invalid length. [ 226.197979][T11356] team0: Port device team_slave_0 added [ 226.209019][T11356] team0: Port device team_slave_1 added [ 226.215859][T11033] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.232625][T11356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.239692][T11356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.266023][T11356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.283141][T11356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.290191][T11356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.302558][T11443] loop2: detected capacity change from 0 to 1024 [ 226.316183][T11356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.348675][T11443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 226.361002][T11443] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.374442][T11443] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 4: comm syz.2.1957: lblock 4 mapped to illegal pblock 4 (length 1) [ 226.388987][T11443] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 226.401454][T11443] EXT4-fs (loop2): This should not happen!! Data will be lost [ 226.401454][T11443] [ 226.416915][T11443] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.1957: lblock 3 mapped to illegal pblock 3 (length 1) [ 226.417775][T11356] hsr_slave_0: entered promiscuous mode [ 226.432193][T11443] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 226.443345][T11356] hsr_slave_1: entered promiscuous mode [ 226.449002][T11443] EXT4-fs (loop2): This should not happen!! Data will be lost [ 226.449002][T11443] [ 226.456507][T11356] debugfs: 'hsr0' already exists in 'hsr' [ 226.469864][T11356] Cannot create hsr debugfs directory [ 226.577205][T11356] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.593124][T10498] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:18: lblock 8 mapped to illegal pblock 8 (length 8) [ 226.608852][T10498] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 226.621278][T10498] EXT4-fs (loop2): This should not happen!! Data will be lost [ 226.621278][T10498] [ 226.634388][T11033] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 226.666068][T11466] loop4: detected capacity change from 0 to 764 [ 226.666445][T11463] loop2: detected capacity change from 0 to 512 [ 226.680942][T11466] Symlink component flag not implemented [ 226.689055][T11356] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.700421][T11466] Symlink component flag not implemented (129) [ 226.707871][T11466] rock: directory entry would overflow storage [ 226.714211][T11466] rock: sig=0x4f50, size=4, remaining=3 [ 226.719785][T11466] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 226.738513][T11463] EXT4-fs (loop2): orphan cleanup on readonly fs [ 226.744935][T11463] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 226.754656][T11463] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 226.770861][T11463] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1964: attempt to clear invalid blocks 2 len 1 [ 226.785708][T11463] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1964: invalid indirect mapped block 1819239214 (level 0) [ 226.786390][T11356] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.800151][T11463] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1964: invalid indirect mapped block 1819239214 (level 1) [ 226.823938][ T29] kauditd_printk_skb: 576 callbacks suppressed [ 226.823990][ T29] audit: type=1326 audit(1757846826.641:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.4.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c9b6eba9 code=0x7ffc0000 [ 226.841415][T11463] EXT4-fs (loop2): 1 truncate cleaned up [ 226.853945][ T29] audit: type=1326 audit(1757846826.641:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.4.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c9b6eba9 code=0x7ffc0000 [ 226.873416][T11463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 226.883106][ T29] audit: type=1326 audit(1757846826.641:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.4.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3c9b6eba9 code=0x7ffc0000 [ 226.919253][ T29] audit: type=1326 audit(1757846826.641:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.4.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c9b6eba9 code=0x7ffc0000 [ 226.942773][ T29] audit: type=1326 audit(1757846826.641:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.4.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c9b6eba9 code=0x7ffc0000 [ 226.966318][ T29] audit: type=1326 audit(1757846826.641:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.4.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa3c9b6eba9 code=0x7ffc0000 [ 226.989761][ T29] audit: type=1326 audit(1757846826.641:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.4.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c9b6eba9 code=0x7ffc0000 [ 227.013281][ T29] audit: type=1326 audit(1757846826.641:5244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.4.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c9b6eba9 code=0x7ffc0000 [ 227.036798][ T29] audit: type=1326 audit(1757846826.641:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.4.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3c9b6eba9 code=0x7ffc0000 [ 227.060325][ T29] audit: type=1326 audit(1757846826.641:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.4.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c9b6eba9 code=0x7ffc0000 [ 227.108769][T11480] FAULT_INJECTION: forcing a failure. [ 227.108769][T11480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.121953][T11480] CPU: 1 UID: 0 PID: 11480 Comm: syz.0.1972 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 227.122035][T11480] Tainted: [W]=WARN [ 227.122042][T11480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 227.122055][T11480] Call Trace: [ 227.122061][T11480] [ 227.122067][T11480] __dump_stack+0x1d/0x30 [ 227.122091][T11480] dump_stack_lvl+0xe8/0x140 [ 227.122147][T11480] dump_stack+0x15/0x1b [ 227.122169][T11480] should_fail_ex+0x265/0x280 [ 227.122201][T11480] should_fail+0xb/0x20 [ 227.122229][T11480] should_fail_usercopy+0x1a/0x20 [ 227.122261][T11480] _copy_from_user+0x1c/0xb0 [ 227.122297][T11480] __x64_sys_mq_getsetattr+0x98/0x170 [ 227.122336][T11480] x64_sys_call+0x1712/0x2ff0 [ 227.122361][T11480] do_syscall_64+0xd2/0x200 [ 227.122427][T11480] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 227.122486][T11480] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 227.122517][T11480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.122545][T11480] RIP: 0033:0x7f462848eba9 [ 227.122564][T11480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.122643][T11480] RSP: 002b:00007f4626eef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f5 [ 227.122667][T11480] RAX: ffffffffffffffda RBX: 00007f46286d5fa0 RCX: 00007f462848eba9 [ 227.122683][T11480] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffffff [ 227.122759][T11480] RBP: 00007f4626eef090 R08: 0000000000000000 R09: 0000000000000000 [ 227.122775][T11480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.122790][T11480] R13: 00007f46286d6038 R14: 00007f46286d5fa0 R15: 00007fffc0b27348 [ 227.122818][T11480] [ 227.310410][T11356] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.362429][T11033] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.387759][T11484] siw: device registration error -23 [ 227.424335][T11356] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 227.433905][T11356] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 227.445211][T11356] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 227.459321][T11493] loop2: detected capacity change from 0 to 1024 [ 227.466202][T11356] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 227.466291][T11493] EXT4-fs: inline encryption not supported [ 227.479694][T11493] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 227.495520][T11493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.515659][T11504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=218 sclass=netlink_route_socket pid=11504 comm=syz.4.1978 [ 227.518640][T11493] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 227.558599][T11033] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.569184][T11356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.583247][T11356] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.593122][T10498] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.600259][T10498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.615411][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.622582][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.669064][T11512] loop2: detected capacity change from 0 to 1024 [ 227.676286][T11512] EXT4-fs: inline encryption not supported [ 227.684512][T11512] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 227.707081][T11512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.731329][T11356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.741294][T11512] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 227.774141][T11524] netlink: 'syz.4.1983': attribute type 10 has an invalid length. [ 227.787800][T11524] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 227.801420][T11033] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.897455][T11542] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 227.905751][T11542] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 227.925266][T11356] veth0_vlan: entered promiscuous mode [ 227.939476][T11542] loop4: detected capacity change from 0 to 512 [ 227.950481][T11356] veth1_vlan: entered promiscuous mode [ 227.966016][T11542] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 228.000848][T11542] sd 0:0:1:0: device reset [ 228.013223][T11542] loop4: detected capacity change from 0 to 1024 [ 228.020411][T11542] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 228.021329][T11356] veth0_macvtap: entered promiscuous mode [ 228.038707][T11542] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e80ce018, mo2=0000] [ 228.048238][T11356] veth1_macvtap: entered promiscuous mode [ 228.051962][T11542] System zones: 0-1, 3-12 [ 228.059002][T11547] veth1_macvtap: left promiscuous mode [ 228.062724][T11542] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.1987: lblock 1 mapped to illegal pblock 1 (length 1) [ 228.064605][T11547] macsec0: entered promiscuous mode [ 228.081290][T11542] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1987: Failed to acquire dquot type 0 [ 228.083704][T11547] macsec0: entered allmulticast mode [ 228.118051][T11356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.136585][T11356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.149015][T10473] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.158908][T10473] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.173077][T11542] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.1987: Freeing blocks not in datazone - block = 0, count = 4096 [ 228.192898][T10473] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.235540][T10473] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.256514][T11542] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1987: Invalid inode bitmap blk 0 in block_group 0 [ 228.283101][T11542] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 228.330668][T11542] EXT4-fs (loop4): 1 orphan inode deleted [ 228.340804][T11542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.389658][T11560] loop9: detected capacity change from 0 to 512 [ 228.405586][T11560] EXT4-fs: Ignoring removed i_version option [ 228.419101][T11560] EXT4-fs (loop9): 1 truncate cleaned up [ 228.425662][T11560] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.502356][T10473] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 228.526447][T10473] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 0 [ 228.549305][T10095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.584390][T11560] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.629336][T11567] loop9: detected capacity change from 0 to 1024 [ 228.637176][T11567] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 228.648830][T11567] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 228.659821][T11567] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 228.766277][T11567] JBD2: no valid journal superblock found [ 228.772091][T11567] EXT4-fs (loop9): Could not load journal inode [ 228.794482][T11567] veth1_macvtap: left promiscuous mode [ 228.800033][T11567] macsec0: entered promiscuous mode [ 228.805341][T11567] macsec0: entered allmulticast mode [ 228.823592][T11567] loop9: detected capacity change from 0 to 1024 [ 228.830190][T11573] lo speed is unknown, defaulting to 1000 [ 228.832538][T11567] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 228.846910][T11567] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 228.876589][T11567] JBD2: no valid journal superblock found [ 228.882433][T11567] EXT4-fs (loop9): Could not load journal inode [ 228.963054][T11587] netlink: 'syz.4.2001': attribute type 10 has an invalid length. [ 228.987304][T11587] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 229.674240][T11616] veth1_macvtap: left promiscuous mode [ 229.679774][T11616] macsec0: entered promiscuous mode [ 229.685035][T11616] macsec0: entered allmulticast mode [ 229.750449][T11619] SELinux: failed to load policy [ 229.844679][T11628] __nla_validate_parse: 3 callbacks suppressed [ 229.844695][T11628] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2020'. [ 229.990413][T11636] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2022'. [ 230.008715][T11637] loop9: detected capacity change from 0 to 1024 [ 230.016766][T11637] EXT4-fs: inline encryption not supported [ 230.024380][T11637] EXT4-fs (loop9): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 230.062050][T11637] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.077405][T11643] netlink: 'syz.4.2026': attribute type 10 has an invalid length. [ 230.112034][T11643] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 230.146794][T11637] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 230.199519][T11644] pim6reg1: entered promiscuous mode [ 230.205050][T11644] pim6reg1: entered allmulticast mode [ 230.213593][T11356] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.345019][T11659] netlink: 'syz.9.2034': attribute type 1 has an invalid length. [ 230.368865][T11661] siw: device registration error -23 [ 230.385605][T11666] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2035'. [ 230.454423][T11672] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 230.461667][T11672] IPv6: NLM_F_CREATE should be set when creating new route [ 230.468965][T11672] IPv6: NLM_F_CREATE should be set when creating new route [ 230.505374][T11671] veth1_macvtap: left promiscuous mode [ 230.510881][T11671] macsec0: entered promiscuous mode [ 230.516200][T11671] macsec0: entered allmulticast mode [ 230.583482][T11678] SELinux: failed to load policy [ 230.673587][T11681] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2042'. [ 230.717376][T11696] siw: device registration error -23 [ 230.755747][T11691] pim6reg1: entered promiscuous mode [ 230.761171][T11691] pim6reg1: entered allmulticast mode [ 230.787977][T11703] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2050'. [ 231.136575][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2063'. [ 231.208486][T11747] SELinux: failed to load policy [ 231.306690][T11750] pim6reg1: entered promiscuous mode [ 231.312101][T11750] pim6reg1: entered allmulticast mode [ 231.330306][T11762] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2074'. [ 231.429210][T11774] SELinux: failed to load policy [ 231.515401][T11782] SELinux: failed to load policy [ 231.532273][T11780] veth1_macvtap: left promiscuous mode [ 231.541085][T11780] macsec0: entered promiscuous mode [ 231.546506][T11780] macsec0: entered allmulticast mode [ 231.558771][T11790] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2088'. [ 231.657523][T11798] netlink: 'syz.0.2092': attribute type 10 has an invalid length. [ 231.674545][T11798] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 231.790927][T11821] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2102'. [ 231.822671][T11826] FAULT_INJECTION: forcing a failure. [ 231.822671][T11826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.835980][T11826] CPU: 0 UID: 0 PID: 11826 Comm: syz.1.2104 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 231.836021][T11826] Tainted: [W]=WARN [ 231.836030][T11826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 231.836043][T11826] Call Trace: [ 231.836048][T11826] [ 231.836055][T11826] __dump_stack+0x1d/0x30 [ 231.836076][T11826] dump_stack_lvl+0xe8/0x140 [ 231.836186][T11826] dump_stack+0x15/0x1b [ 231.836237][T11826] should_fail_ex+0x265/0x280 [ 231.836271][T11826] should_fail+0xb/0x20 [ 231.836295][T11826] should_fail_usercopy+0x1a/0x20 [ 231.836321][T11826] _copy_from_user+0x1c/0xb0 [ 231.836446][T11826] ___sys_sendmsg+0xc1/0x1d0 [ 231.836495][T11826] __x64_sys_sendmsg+0xd4/0x160 [ 231.836540][T11826] x64_sys_call+0x191e/0x2ff0 [ 231.836568][T11826] do_syscall_64+0xd2/0x200 [ 231.836605][T11826] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 231.836668][T11826] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 231.836779][T11826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.836871][T11826] RIP: 0033:0x7f486244eba9 [ 231.836911][T11826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.836952][T11826] RSP: 002b:00007f4860eb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.836973][T11826] RAX: ffffffffffffffda RBX: 00007f4862695fa0 RCX: 00007f486244eba9 [ 231.836985][T11826] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 231.837001][T11826] RBP: 00007f4860eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 231.837017][T11826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.837028][T11826] R13: 00007f4862696038 R14: 00007f4862695fa0 R15: 00007ffc9a2d4198 [ 231.837129][T11826] [ 232.040860][ T29] kauditd_printk_skb: 559 callbacks suppressed [ 232.040878][ T29] audit: type=1400 audit(1757846831.861:5803): avc: denied { mount } for pid=11831 comm="syz.1.2107" name="/" dev="configfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 232.074069][ T29] audit: type=1400 audit(1757846831.901:5804): avc: denied { search } for pid=11831 comm="syz.1.2107" name="/" dev="configfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 232.096594][ T29] audit: type=1400 audit(1757846831.901:5805): avc: denied { setattr } for pid=11831 comm="syz.1.2107" name="/" dev="configfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 232.119556][T11832] netlink: 'syz.1.2107': attribute type 21 has an invalid length. [ 232.127545][T11832] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2107'. [ 232.136768][T11832] netlink: 'syz.1.2107': attribute type 5 has an invalid length. [ 232.144563][T11832] netlink: 'syz.1.2107': attribute type 6 has an invalid length. [ 232.208416][T11839] serio: Serial port ptm0 [ 232.543622][T11850] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 232.580647][T11854] FAULT_INJECTION: forcing a failure. [ 232.580647][T11854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.593932][T11854] CPU: 1 UID: 0 PID: 11854 Comm: syz.0.2117 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 232.594004][T11854] Tainted: [W]=WARN [ 232.594014][T11854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.594031][T11854] Call Trace: [ 232.594039][T11854] [ 232.594061][T11854] __dump_stack+0x1d/0x30 [ 232.594084][T11854] dump_stack_lvl+0xe8/0x140 [ 232.594104][T11854] dump_stack+0x15/0x1b [ 232.594120][T11854] should_fail_ex+0x265/0x280 [ 232.594175][T11854] should_fail+0xb/0x20 [ 232.594201][T11854] should_fail_usercopy+0x1a/0x20 [ 232.594227][T11854] copy_folio_from_iter_atomic+0x278/0x11b0 [ 232.594272][T11854] ? shmem_write_begin+0xa8/0x190 [ 232.594339][T11854] ? shmem_write_begin+0xe1/0x190 [ 232.594363][T11854] generic_perform_write+0x2c2/0x490 [ 232.594401][T11854] shmem_file_write_iter+0xc5/0xf0 [ 232.594506][T11854] do_iter_readv_writev+0x499/0x540 [ 232.594627][T11854] vfs_writev+0x2df/0x8b0 [ 232.594680][T11854] __se_sys_pwritev2+0xfc/0x1c0 [ 232.594717][T11854] __x64_sys_pwritev2+0x67/0x80 [ 232.594765][T11854] x64_sys_call+0x2c55/0x2ff0 [ 232.594809][T11854] do_syscall_64+0xd2/0x200 [ 232.594842][T11854] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 232.594868][T11854] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 232.594946][T11854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.594969][T11854] RIP: 0033:0x7f462848eba9 [ 232.595028][T11854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.595048][T11854] RSP: 002b:00007f4626eef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 232.595073][T11854] RAX: ffffffffffffffda RBX: 00007f46286d5fa0 RCX: 00007f462848eba9 [ 232.595090][T11854] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000006 [ 232.595106][T11854] RBP: 00007f4626eef090 R08: 0000000000000000 R09: 0000000000000001 [ 232.595124][T11854] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000001 [ 232.595140][T11854] R13: 00007f46286d6038 R14: 00007f46286d5fa0 R15: 00007fffc0b27348 [ 232.595223][T11854] [ 232.838284][ T29] audit: type=1400 audit(1757846832.661:5806): avc: denied { sqpoll } for pid=11855 comm="syz.2.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 232.921940][ T29] audit: type=1400 audit(1757846832.731:5807): avc: denied { listen } for pid=11855 comm="syz.2.2118" laddr=fe80::10 lport=35583 faddr=fe80::bb fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 232.946262][ T29] audit: type=1400 audit(1757846832.731:5808): avc: denied { accept } for pid=11855 comm="syz.2.2118" laddr=fe80::10 lport=35583 faddr=fe80::bb fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 232.970610][ T29] audit: type=1400 audit(1757846832.731:5809): avc: denied { read } for pid=11855 comm="syz.2.2118" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 233.057812][T11872] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 233.066110][T11872] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 233.077281][T11874] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 233.093822][ T29] audit: type=1400 audit(1757846832.921:5810): avc: denied { ioctl } for pid=11873 comm="syz.1.2125" path="socket:[53820]" dev="sockfs" ino=53820 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 233.107855][T11872] sd 0:0:1:0: device reset [ 233.132206][ T29] audit: type=1400 audit(1757846832.921:5811): avc: denied { bind } for pid=11873 comm="syz.1.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 233.191880][ T29] audit: type=1326 audit(1757846833.011:5812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11878 comm="syz.9.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c649feba9 code=0x7ffc0000 [ 233.193852][T11879] FAULT_INJECTION: forcing a failure. [ 233.193852][T11879] name failslab, interval 1, probability 0, space 0, times 0 [ 233.228545][T11879] CPU: 0 UID: 0 PID: 11879 Comm: syz.9.2127 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 233.228644][T11879] Tainted: [W]=WARN [ 233.228693][T11879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.228710][T11879] Call Trace: [ 233.228718][T11879] [ 233.228729][T11879] __dump_stack+0x1d/0x30 [ 233.228756][T11879] dump_stack_lvl+0xe8/0x140 [ 233.228847][T11879] dump_stack+0x15/0x1b [ 233.228869][T11879] should_fail_ex+0x265/0x280 [ 233.228903][T11879] should_failslab+0x8c/0xb0 [ 233.228937][T11879] kmem_cache_alloc_node_noprof+0x57/0x320 [ 233.229067][T11879] ? __alloc_skb+0x101/0x320 [ 233.229094][T11879] __alloc_skb+0x101/0x320 [ 233.229121][T11879] ? audit_log_start+0x365/0x6c0 [ 233.229163][T11879] audit_log_start+0x380/0x6c0 [ 233.229273][T11879] audit_seccomp+0x48/0x100 [ 233.229300][T11879] ? __seccomp_filter+0x68c/0x10d0 [ 233.229326][T11879] __seccomp_filter+0x69d/0x10d0 [ 233.229433][T11879] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 233.229471][T11879] ? vfs_write+0x7e8/0x960 [ 233.229500][T11879] ? __rcu_read_unlock+0x4f/0x70 [ 233.229522][T11879] ? __fget_files+0x184/0x1c0 [ 233.229552][T11879] __secure_computing+0x82/0x150 [ 233.229581][T11879] syscall_trace_enter+0xcf/0x1e0 [ 233.229615][T11879] do_syscall_64+0xac/0x200 [ 233.229682][T11879] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 233.229755][T11879] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 233.229787][T11879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.229808][T11879] RIP: 0033:0x7f5c649feba9 [ 233.229823][T11879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.229878][T11879] RSP: 002b:00007f5c6345f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 233.229898][T11879] RAX: ffffffffffffffda RBX: 00007f5c64c45fa0 RCX: 00007f5c649feba9 [ 233.229910][T11879] RDX: 0000000000400000 RSI: 0000000000001000 RDI: 0000200000a96000 [ 233.229996][T11879] RBP: 00007f5c6345f090 R08: 0000200000000000 R09: 0000000000000000 [ 233.230014][T11879] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 233.230030][T11879] R13: 00007f5c64c46038 R14: 00007f5c64c45fa0 R15: 00007fff4fa41598 [ 233.230052][T11879] [ 233.538040][T11881] SELinux: failed to load policy [ 233.611432][T11887] hub 9-0:1.0: USB hub found [ 233.620854][T11887] hub 9-0:1.0: 8 ports detected [ 233.736650][T11903] netlink: 'syz.1.2137': attribute type 10 has an invalid length. [ 233.746877][T11903] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 233.943829][T11918] pim6reg1: entered promiscuous mode [ 233.949169][T11918] pim6reg1: entered allmulticast mode [ 233.964838][T11926] netlink: 'syz.1.2150': attribute type 10 has an invalid length. [ 233.974757][T11926] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 233.976656][T11915] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 234.164960][T11932] netlink: 'syz.2.2153': attribute type 10 has an invalid length. [ 234.182641][T11932] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 234.273965][T11945] lo speed is unknown, defaulting to 1000 [ 234.401466][T11943] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 234.554991][T11943] SELinux: failed to load policy [ 234.732833][T11955] siw: device registration error -23 [ 235.065689][T11991] FAULT_INJECTION: forcing a failure. [ 235.065689][T11991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.078830][T11991] CPU: 1 UID: 0 PID: 11991 Comm: syz.9.2178 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 235.078874][T11991] Tainted: [W]=WARN [ 235.078884][T11991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.078917][T11991] Call Trace: [ 235.078926][T11991] [ 235.078935][T11991] __dump_stack+0x1d/0x30 [ 235.078962][T11991] dump_stack_lvl+0xe8/0x140 [ 235.079064][T11991] dump_stack+0x15/0x1b [ 235.079081][T11991] should_fail_ex+0x265/0x280 [ 235.079113][T11991] should_fail+0xb/0x20 [ 235.079139][T11991] should_fail_usercopy+0x1a/0x20 [ 235.079247][T11991] _copy_from_user+0x1c/0xb0 [ 235.079329][T11991] kstrtouint_from_user+0x69/0xf0 [ 235.079364][T11991] ? 0xffffffff81000000 [ 235.079423][T11991] ? selinux_file_permission+0x1e4/0x320 [ 235.079457][T11991] proc_fail_nth_write+0x50/0x160 [ 235.079538][T11991] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 235.079641][T11991] vfs_write+0x269/0x960 [ 235.079703][T11991] ? __rcu_read_unlock+0x4f/0x70 [ 235.079741][T11991] ? __fget_files+0x184/0x1c0 [ 235.079770][T11991] ksys_write+0xda/0x1a0 [ 235.079795][T11991] __x64_sys_write+0x40/0x50 [ 235.079818][T11991] x64_sys_call+0x27fe/0x2ff0 [ 235.079840][T11991] do_syscall_64+0xd2/0x200 [ 235.079953][T11991] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 235.079990][T11991] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 235.080029][T11991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.080118][T11991] RIP: 0033:0x7f5c649fd65f [ 235.080136][T11991] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 235.080160][T11991] RSP: 002b:00007f5c6345f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 235.080180][T11991] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5c649fd65f [ 235.080193][T11991] RDX: 0000000000000001 RSI: 00007f5c6345f0a0 RDI: 0000000000000005 [ 235.080205][T11991] RBP: 00007f5c6345f090 R08: 0000000000000000 R09: 0000000000000000 [ 235.080256][T11991] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 235.080271][T11991] R13: 00007f5c64c46038 R14: 00007f5c64c45fa0 R15: 00007fff4fa41598 [ 235.080295][T11991] [ 235.326000][T11998] netlink: 'syz.9.2181': attribute type 10 has an invalid length. [ 235.336404][T11998] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 235.383585][T12004] __nla_validate_parse: 3 callbacks suppressed [ 235.383602][T12004] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2184'. [ 235.398717][T12004] netlink: 'syz.9.2184': attribute type 30 has an invalid length. [ 235.414225][T10502] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.428180][T10502] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.438973][T10502] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.450082][T10502] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.477835][T12010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2187'. [ 235.498291][T12010] 8021q: adding VLAN 0 to HW filter on device bond2 [ 235.524219][T12019] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2189'. [ 235.617247][T12017] lo speed is unknown, defaulting to 1000 [ 235.774584][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2194'. [ 235.783597][T12031] netlink: 'syz.1.2194': attribute type 30 has an invalid length. [ 235.796834][T10498] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.806696][T10498] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.828952][T10498] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.864507][T10498] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.979369][T12043] FAULT_INJECTION: forcing a failure. [ 235.979369][T12043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.992562][T12043] CPU: 1 UID: 0 PID: 12043 Comm: syz.2.2199 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 235.992646][T12043] Tainted: [W]=WARN [ 235.992654][T12043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.992669][T12043] Call Trace: [ 235.992677][T12043] [ 235.992733][T12043] __dump_stack+0x1d/0x30 [ 235.992761][T12043] dump_stack_lvl+0xe8/0x140 [ 235.992785][T12043] dump_stack+0x15/0x1b [ 235.992807][T12043] should_fail_ex+0x265/0x280 [ 235.992835][T12043] should_fail+0xb/0x20 [ 235.992912][T12043] should_fail_usercopy+0x1a/0x20 [ 235.992945][T12043] strncpy_from_user+0x25/0x230 [ 235.992988][T12043] ? kmem_cache_alloc_noprof+0x186/0x310 [ 235.993107][T12043] ? getname_flags+0x80/0x3b0 [ 235.993147][T12043] getname_flags+0xae/0x3b0 [ 235.993253][T12043] user_path_at+0x28/0x130 [ 235.993296][T12043] __se_sys_fspick+0xaa/0x240 [ 235.993329][T12043] __x64_sys_fspick+0x43/0x50 [ 235.993354][T12043] x64_sys_call+0x44c/0x2ff0 [ 235.993422][T12043] do_syscall_64+0xd2/0x200 [ 235.993508][T12043] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 235.993538][T12043] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 235.993577][T12043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.993605][T12043] RIP: 0033:0x7fa4ce04eba9 [ 235.993691][T12043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.993714][T12043] RSP: 002b:00007fa4ccaaf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 235.993739][T12043] RAX: ffffffffffffffda RBX: 00007fa4ce295fa0 RCX: 00007fa4ce04eba9 [ 235.993768][T12043] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 235.993785][T12043] RBP: 00007fa4ccaaf090 R08: 0000000000000000 R09: 0000000000000000 [ 235.993802][T12043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.993861][T12043] R13: 00007fa4ce296038 R14: 00007fa4ce295fa0 R15: 00007ffc9fb8bc28 [ 235.993880][T12043] [ 236.232669][T12048] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2201'. [ 236.317684][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2203'. [ 236.409734][T12052] siw: device registration error -23 [ 236.610433][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2211'. [ 236.703050][T12082] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2214'. [ 236.945784][T12091] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2216'. [ 237.030109][T12096] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 237.111447][T12096] SELinux: failed to load policy [ 237.177990][T12099] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12099 comm=syz.1.2219 [ 237.190802][T12099] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12099 comm=syz.1.2219 [ 237.284796][T12102] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2219'. [ 237.323702][T12104] FAULT_INJECTION: forcing a failure. [ 237.323702][T12104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.336979][T12104] CPU: 1 UID: 0 PID: 12104 Comm: syz.1.2221 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 237.337023][T12104] Tainted: [W]=WARN [ 237.337032][T12104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.337045][T12104] Call Trace: [ 237.337052][T12104] [ 237.337059][T12104] __dump_stack+0x1d/0x30 [ 237.337081][T12104] dump_stack_lvl+0xe8/0x140 [ 237.337132][T12104] dump_stack+0x15/0x1b [ 237.337156][T12104] should_fail_ex+0x265/0x280 [ 237.337191][T12104] should_fail+0xb/0x20 [ 237.337220][T12104] should_fail_usercopy+0x1a/0x20 [ 237.337257][T12104] _copy_from_user+0x1c/0xb0 [ 237.337310][T12104] ___bpf_copy_key+0xa5/0x110 [ 237.337350][T12104] map_update_elem+0x165/0x520 [ 237.337393][T12104] __sys_bpf+0x571/0x7b0 [ 237.337467][T12104] __x64_sys_bpf+0x41/0x50 [ 237.337501][T12104] x64_sys_call+0x2aea/0x2ff0 [ 237.337541][T12104] do_syscall_64+0xd2/0x200 [ 237.337653][T12104] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 237.337712][T12104] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 237.337839][T12104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.337899][T12104] RIP: 0033:0x7f486244eba9 [ 237.337920][T12104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.337974][T12104] RSP: 002b:00007f4860eb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 237.337994][T12104] RAX: ffffffffffffffda RBX: 00007f4862695fa0 RCX: 00007f486244eba9 [ 237.338021][T12104] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000002 [ 237.338038][T12104] RBP: 00007f4860eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 237.338055][T12104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.338068][T12104] R13: 00007f4862696038 R14: 00007f4862695fa0 R15: 00007ffc9a2d4198 [ 237.338088][T12104] [ 237.610758][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 237.610774][ T29] audit: type=1326 audit(1757846837.431:6126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.1.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486244eba9 code=0x7ffc0000 [ 237.640567][ T29] audit: type=1326 audit(1757846837.431:6127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.1.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486244eba9 code=0x7ffc0000 [ 237.664559][ T29] audit: type=1326 audit(1757846837.431:6128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.1.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f486244eba9 code=0x7ffc0000 [ 237.688178][ T29] audit: type=1326 audit(1757846837.431:6129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.1.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486244eba9 code=0x7ffc0000 [ 237.690140][T12113] netlink: 'syz.1.2225': attribute type 1 has an invalid length. [ 237.733016][ T29] audit: type=1326 audit(1757846837.431:6130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12107 comm="syz.1.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486244eba9 code=0x7ffc0000 [ 237.756640][ T29] audit: type=1326 audit(1757846837.541:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12109 comm="syz.2.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ce04eba9 code=0x7ffc0000 [ 237.780470][ T29] audit: type=1326 audit(1757846837.541:6132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12109 comm="syz.2.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ce04eba9 code=0x7ffc0000 [ 237.804367][ T29] audit: type=1326 audit(1757846837.541:6133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12109 comm="syz.2.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4ce04eba9 code=0x7ffc0000 [ 237.828058][ T29] audit: type=1326 audit(1757846837.541:6134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12109 comm="syz.2.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ce04eba9 code=0x7ffc0000 [ 237.831628][T12106] siw: device registration error -23 [ 237.851881][ T29] audit: type=1326 audit(1757846837.541:6135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12109 comm="syz.2.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ce04eba9 code=0x7ffc0000 [ 237.887062][T12124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 237.894336][T12124] IPv6: NLM_F_CREATE should be set when creating new route [ 237.901559][T12124] IPv6: NLM_F_CREATE should be set when creating new route [ 237.902344][T12113] bond1: entered promiscuous mode [ 237.922118][T12124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 237.935688][T12113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.954525][T12111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.961700][T12111] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 237.972286][T12111] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 238.014023][T12111] bond1: (slave wireguard0): making interface the new active one [ 238.021868][T12111] wireguard0: entered promiscuous mode [ 238.055135][T12111] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 238.092826][T12127] sg_write: data in/out 95/14 bytes for SCSI command 0x0-- guessing data in; [ 238.092826][T12127] program syz.2.2229 not setting count and/or reply_len properly [ 238.175446][T12134] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 238.189296][T12146] SELinux: failed to load policy [ 238.282342][T12160] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 238.290559][T12160] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 238.305563][T12154] FAULT_INJECTION: forcing a failure. [ 238.305563][T12154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.318744][T12154] CPU: 0 UID: 0 PID: 12154 Comm: syz.4.2240 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 238.318802][T12154] Tainted: [W]=WARN [ 238.318812][T12154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 238.318835][T12154] Call Trace: [ 238.318843][T12154] [ 238.318850][T12154] __dump_stack+0x1d/0x30 [ 238.318878][T12154] dump_stack_lvl+0xe8/0x140 [ 238.318905][T12154] dump_stack+0x15/0x1b [ 238.318939][T12154] should_fail_ex+0x265/0x280 [ 238.318973][T12154] should_fail+0xb/0x20 [ 238.319077][T12154] should_fail_usercopy+0x1a/0x20 [ 238.319112][T12154] _copy_from_iter+0xd2/0xe80 [ 238.319145][T12154] ? __build_skb_around+0x1a0/0x200 [ 238.319215][T12154] ? __alloc_skb+0x223/0x320 [ 238.319241][T12154] netlink_sendmsg+0x471/0x6b0 [ 238.319278][T12154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.319371][T12154] __sock_sendmsg+0x145/0x180 [ 238.319435][T12154] ____sys_sendmsg+0x31e/0x4e0 [ 238.319477][T12154] ___sys_sendmsg+0x17b/0x1d0 [ 238.319583][T12154] __x64_sys_sendmsg+0xd4/0x160 [ 238.319627][T12154] x64_sys_call+0x191e/0x2ff0 [ 238.319655][T12154] do_syscall_64+0xd2/0x200 [ 238.319697][T12154] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 238.319744][T12154] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 238.319860][T12154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.319935][T12154] RIP: 0033:0x7fa3c9b6eba9 [ 238.319957][T12154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.319982][T12154] RSP: 002b:00007fa3c85d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.320006][T12154] RAX: ffffffffffffffda RBX: 00007fa3c9db5fa0 RCX: 00007fa3c9b6eba9 [ 238.320020][T12154] RDX: 0000000000008000 RSI: 0000200000000080 RDI: 0000000000000007 [ 238.320032][T12154] RBP: 00007fa3c85d7090 R08: 0000000000000000 R09: 0000000000000000 [ 238.320044][T12154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.320067][T12154] R13: 00007fa3c9db6038 R14: 00007fa3c9db5fa0 R15: 00007fff96f88ac8 [ 238.320094][T12154] [ 238.606631][T12167] netlink: 'syz.4.2245': attribute type 30 has an invalid length. [ 238.631277][T12160] sd 0:0:1:0: device reset [ 238.652375][T12164] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 238.737083][T12177] SELinux: failed to load policy [ 238.940997][T12191] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 239.004251][T12196] veth3: entered promiscuous mode [ 239.141415][T12200] SELinux: failed to load policy [ 239.295795][T12206] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 239.323494][T12213] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 239.331713][T12213] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 239.350538][T12213] sd 0:0:1:0: device reset [ 239.484735][T12225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.514778][T12225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.536690][T12225] bond0 (unregistering): Released all slaves [ 239.561066][T12228] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 239.569372][T12228] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 239.616106][T12228] sd 0:0:1:0: device reset [ 239.817769][T12243] netlink: 'syz.2.2278': attribute type 1 has an invalid length. [ 239.837177][T12236] SELinux: failed to load policy [ 239.847338][T12243] bond1: entered promiscuous mode [ 239.872296][T12243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.946869][T12243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.971423][T12226] netlink: 'syz.4.2272': attribute type 1 has an invalid length. [ 239.981586][T12243] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 239.992183][T12243] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 240.011223][T12253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.018458][T12253] IPv6: NLM_F_CREATE should be set when creating new route [ 240.025659][T12253] IPv6: NLM_F_CREATE should be set when creating new route [ 240.059558][T12253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.068452][T12243] bond1: (slave wireguard0): making interface the new active one [ 240.076241][T12243] wireguard0: entered promiscuous mode [ 240.084560][T12243] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 240.132551][T12268] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 240.140778][T12268] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 240.150938][T12259] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 240.168893][T12268] sd 0:0:1:0: device reset [ 240.237533][T12273] SELinux: failed to load policy [ 240.277748][T12281] netlink: 'syz.9.2295': attribute type 10 has an invalid length. [ 240.308007][T12281] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 240.354632][T12294] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 240.364462][T12294] SELinux: failed to load policy [ 240.413405][T12302] netlink: 'syz.0.2303': attribute type 1 has an invalid length. [ 240.438601][T12302] bond0: entered promiscuous mode [ 240.445385][T12302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.548723][T12316] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.556094][T12316] IPv6: NLM_F_CREATE should be set when creating new route [ 240.563353][T12316] IPv6: NLM_F_CREATE should be set when creating new route [ 240.573693][T12316] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.633398][T12324] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 240.645127][T12324] SELinux: failed to load policy [ 240.663174][T12326] netlink: 'syz.4.2313': attribute type 10 has an invalid length. [ 240.674287][T12302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.677019][T12328] __nla_validate_parse: 7 callbacks suppressed [ 240.677038][T12328] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2314'. [ 240.681642][T12302] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 240.706658][T12302] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 240.722467][T12302] bond0: (slave wireguard0): making interface the new active one [ 240.730285][T12302] wireguard0: entered promiscuous mode [ 240.759843][T12302] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 240.803190][T12326] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 240.865280][T12342] serio: Serial port ptm0 [ 240.880470][T12344] siw: device registration error -23 [ 240.931262][T12356] netlink: 'syz.9.2325': attribute type 30 has an invalid length. [ 240.994786][T12362] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 241.028457][T12373] netlink: 'syz.4.2333': attribute type 10 has an invalid length. [ 241.043789][T12373] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 241.092131][T12381] netlink: 'syz.4.2336': attribute type 1 has an invalid length. [ 241.127242][T12381] bond1: entered promiscuous mode [ 241.132593][T12381] 8021q: adding VLAN 0 to HW filter on device bond1 [ 241.144328][T12383] SELinux: failed to load policy [ 241.161514][T12389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 241.196503][T12389] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 241.207134][T12389] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 241.209461][T12381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.223807][T12381] IPv6: NLM_F_CREATE should be set when creating new route [ 241.231001][T12381] IPv6: NLM_F_CREATE should be set when creating new route [ 241.239179][T12381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.248372][T12389] bond1: (slave wireguard0): making interface the new active one [ 241.256160][T12389] wireguard0: entered promiscuous mode [ 241.263977][T12389] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 241.325056][T12398] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 241.344616][T12397] pim6reg1: entered promiscuous mode [ 241.350152][T12397] pim6reg1: entered allmulticast mode [ 241.470202][T12407] netlink: 'syz.9.2347': attribute type 10 has an invalid length. [ 241.478324][T12407] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 241.510892][T12413] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 241.519227][T12413] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 241.537616][T12413] sd 0:0:1:0: device reset [ 241.651348][T12421] pim6reg1: entered promiscuous mode [ 241.656810][T12421] pim6reg1: entered allmulticast mode [ 241.713282][T12429] tipc: Started in network mode [ 241.718204][T12429] tipc: Node identity d219f7335907, cluster identity 4711 [ 241.725459][T12429] tipc: Enabled bearer , priority 0 [ 241.734918][T12429] tipc: Disabling bearer [ 241.786515][T12438] netlink: 'syz.9.2361': attribute type 10 has an invalid length. [ 241.826151][T12438] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 241.844113][T12436] pim6reg1: entered promiscuous mode [ 241.849441][T12436] pim6reg1: entered allmulticast mode [ 241.914364][T12454] serio: Serial port ptm0 [ 241.935238][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2368'. [ 241.974518][T12464] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2371'. [ 242.163704][T12486] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2382'. [ 242.337225][T12490] pim6reg1: entered promiscuous mode [ 242.342599][T12490] pim6reg1: entered allmulticast mode [ 242.818183][T12497] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2385'. [ 242.854204][T12503] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 242.892577][ T29] kauditd_printk_skb: 735 callbacks suppressed [ 242.892593][ T29] audit: type=1326 audit(1757846842.721:6871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.2.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ce04eba9 code=0x7ffc0000 [ 242.922452][ T29] audit: type=1326 audit(1757846842.721:6872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.2.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ce04eba9 code=0x7ffc0000 [ 242.930303][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2391'. [ 242.951883][ T29] audit: type=1326 audit(1757846842.751:6873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.2.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa4ce04eba9 code=0x7ffc0000 [ 242.978568][ T29] audit: type=1326 audit(1757846842.751:6874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.2.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ce04eba9 code=0x7ffc0000 [ 243.002083][ T29] audit: type=1326 audit(1757846842.751:6875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.2.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa4ce04eba9 code=0x7ffc0000 [ 243.025565][ T29] audit: type=1326 audit(1757846842.751:6876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.2.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ce04eba9 code=0x7ffc0000 [ 243.049096][ T29] audit: type=1326 audit(1757846842.751:6877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.2.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4ce04eba9 code=0x7ffc0000 [ 243.072749][ T29] audit: type=1326 audit(1757846842.751:6878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.2.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ce04eba9 code=0x7ffc0000 [ 243.096335][ T29] audit: type=1326 audit(1757846842.751:6879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.2.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4ce04eba9 code=0x7ffc0000 [ 243.107349][T12514] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2393'. [ 243.119930][ T29] audit: type=1326 audit(1757846842.751:6880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12511 comm="syz.2.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ce04eba9 code=0x7ffc0000 [ 243.213353][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2394'. [ 243.236441][T12526] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 243.275071][T12528] serio: Serial port ptm0 [ 243.353659][T12541] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 243.388208][T12534] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 243.425286][T12538] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 243.547478][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2399'. [ 243.568975][T12553] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2408'. [ 243.655678][T12557] SELinux: failed to load policy [ 243.687293][T12562] siw: device registration error -23 [ 243.767651][T12571] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 243.775910][T12571] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 243.793828][T12570] siw: device registration error -23 [ 243.819661][T12571] sd 0:0:1:0: device reset [ 243.855963][T12573] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 243.948925][T12593] siw: device registration error -23 [ 243.972425][T12594] SELinux: failed to load policy [ 244.145471][T12618] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 244.150566][T12624] bond2: entered promiscuous mode [ 244.168241][T12624] 8021q: adding VLAN 0 to HW filter on device bond2 [ 244.209694][T12624] 8021q: adding VLAN 0 to HW filter on device bond2 [ 244.218868][T12624] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 244.229568][T12624] bond2: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 244.243499][T12640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.244065][T12624] bond2: (slave wireguard1): making interface the new active one [ 244.250898][T12640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.258607][T12624] wireguard1: entered promiscuous mode [ 244.273945][T12624] bond2: (slave wireguard1): Enslaving as an active interface with an up link [ 244.298366][T12641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.322159][T12641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.336719][T12641] bond0 (unregistering): Released all slaves [ 244.366866][T12645] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.397786][T12651] serio: Serial port ptm0 [ 244.404109][T12647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.414960][T12647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.425219][T12647] bond0 (unregistering): Released all slaves [ 244.434107][T10482] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.444096][T10473] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.452907][T10473] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.640813][T12667] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 244.649154][T12667] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 244.661523][T12661] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 244.678801][T12667] sd 0:0:1:0: device reset [ 245.058234][T12695] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 245.066555][T12695] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 245.084710][T12695] sd 0:0:1:0: device reset [ 245.129877][T12698] SELinux: failed to load policy [ 245.266804][T12708] validate_nla: 3 callbacks suppressed [ 245.266822][T12708] netlink: 'syz.4.2473': attribute type 10 has an invalid length. [ 245.280579][T12708] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 245.336309][T12709] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 245.510441][T12721] SELinux: failed to load policy [ 245.804996][T12735] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 245.834332][T12737] netlink: 'syz.1.2485': attribute type 10 has an invalid length. [ 245.842944][T12737] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 245.868333][T12645] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.878812][T12645] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.948912][T12645] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.959514][T12645] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.045975][T12645] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.056346][T12645] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.056951][T12746] __nla_validate_parse: 9 callbacks suppressed [ 246.056969][T12746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2486'. [ 246.163728][ T1723] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.171998][ T1723] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.184146][T10473] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.192433][T10473] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.255831][T10473] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.264124][T10473] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.290280][T10473] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.298545][T10473] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.330049][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2492'. [ 247.096844][T12761] SELinux: failed to load policy [ 247.160136][T12766] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2498'. [ 247.346719][T12777] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.357134][T12777] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.380468][T12778] siw: device registration error -23 [ 247.425381][T12777] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.435782][T12777] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.556456][T12777] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.566897][T12777] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.626525][T12777] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.636931][T12777] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.657344][T12786] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2504'. [ 247.688805][T12788] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2505'. [ 247.695931][T10473] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.706048][T10473] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.732307][T10473] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.740595][T10473] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.766613][T10473] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.774882][T10473] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.793378][T12795] netlink: 'syz.1.2508': attribute type 1 has an invalid length. [ 247.828643][T12795] bond0: entered promiscuous mode [ 247.891754][T12795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.936463][ T29] kauditd_printk_skb: 608 callbacks suppressed [ 247.936483][ T29] audit: type=1326 audit(1757846847.731:7489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12799 comm="syz.2.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa4ce045b67 code=0x7ffc0000 [ 247.966306][ T29] audit: type=1326 audit(1757846847.731:7490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12799 comm="syz.2.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa4cdfeada9 code=0x7ffc0000 [ 247.983690][T10473] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.989735][ T29] audit: type=1326 audit(1757846847.731:7491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12799 comm="syz.2.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa4ce045b67 code=0x7ffc0000 [ 247.997962][T10473] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.021411][ T29] audit: type=1326 audit(1757846847.731:7492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12799 comm="syz.2.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa4cdfeada9 code=0x7ffc0000 [ 248.021448][ T29] audit: type=1326 audit(1757846847.731:7493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12799 comm="syz.2.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa4ce045b67 code=0x7ffc0000 [ 248.076521][ T29] audit: type=1326 audit(1757846847.731:7494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12799 comm="syz.2.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa4cdfeada9 code=0x7ffc0000 [ 248.100067][ T29] audit: type=1326 audit(1757846847.731:7495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12799 comm="syz.2.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa4ce045b67 code=0x7ffc0000 [ 248.123566][ T29] audit: type=1326 audit(1757846847.731:7496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12799 comm="syz.2.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa4cdfeada9 code=0x7ffc0000 [ 248.147098][ T29] audit: type=1326 audit(1757846847.731:7497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12799 comm="syz.2.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa4ce045b67 code=0x7ffc0000 [ 248.170604][ T29] audit: type=1326 audit(1757846847.731:7498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12799 comm="syz.2.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa4cdfeada9 code=0x7ffc0000 [ 248.305976][T12803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.323718][T12803] bond0: (slave wireguard1): The slave device specified does not support setting the MAC address [ 248.334407][T12803] bond0: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 248.373295][T12803] bond0: (slave wireguard1): making interface the new active one [ 248.381104][T12803] wireguard1: entered promiscuous mode [ 248.427198][T12803] bond0: (slave wireguard1): Enslaving as an active interface with an up link [ 248.446756][T12812] 9pnet_fd: Insufficient options for proto=fd [ 248.628564][T12827] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2518'. [ 248.676636][T12830] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.785052][T12830] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.854958][T12830] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.919494][T12830] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.022474][ T1723] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.033741][T10473] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.049186][T10473] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.094895][T10473] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.183864][T12846] netlink: 'syz.4.2525': attribute type 1 has an invalid length. [ 249.206346][T12846] bond3: entered promiscuous mode [ 249.220635][T12846] 8021q: adding VLAN 0 to HW filter on device bond3 [ 249.258990][T12848] 8021q: adding VLAN 0 to HW filter on device bond3 [ 249.272605][T12848] bond3: (slave wireguard2): The slave device specified does not support setting the MAC address [ 249.283359][T12848] bond3: (slave wireguard2): Setting fail_over_mac to active for active-backup mode [ 249.320067][T12848] bond3: (slave wireguard2): making interface the new active one [ 249.327971][T12848] wireguard2: entered promiscuous mode [ 249.356675][T12848] bond3: (slave wireguard2): Enslaving as an active interface with an up link [ 249.404738][T12851] serio: Serial port ptm0 [ 249.740886][T12825] ================================================================== [ 249.749023][T12825] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 249.755758][T12825] [ 249.758099][T12825] write to 0xffff88811f7b9710 of 8 bytes by task 12814 on cpu 0: [ 249.765834][T12825] call_rcu+0x44/0x3f0 [ 249.769951][T12825] mas_replace_node+0x2e7/0x410 [ 249.774834][T12825] mas_wr_store_entry+0x2406/0x2b50 [ 249.780056][T12825] mas_store_prealloc+0x74d/0x9e0 [ 249.785111][T12825] vma_iter_store_new+0x1c5/0x200 [ 249.790170][T12825] vma_complete+0x125/0x580 [ 249.794693][T12825] __split_vma+0x591/0x650 [ 249.799131][T12825] vms_gather_munmap_vmas+0x17a/0x7b0 [ 249.804521][T12825] mmap_region+0x53f/0x1630 [ 249.809068][T12825] do_mmap+0x9b3/0xbe0 [ 249.813178][T12825] vm_mmap_pgoff+0x17a/0x2e0 [ 249.817803][T12825] ksys_mmap_pgoff+0x268/0x310 [ 249.822597][T12825] x64_sys_call+0x14a3/0x2ff0 [ 249.827317][T12825] do_syscall_64+0xd2/0x200 [ 249.831946][T12825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.837862][T12825] [ 249.840205][T12825] read to 0xffff88811f7b9710 of 8 bytes by task 12825 on cpu 1: [ 249.847938][T12825] mas_state_walk+0x2f5/0x650 [ 249.852646][T12825] mas_walk+0x60/0x150 [ 249.856750][T12825] lock_vma_under_rcu+0x8d/0x160 [ 249.861734][T12825] do_user_addr_fault+0x233/0x1090 [ 249.866889][T12825] exc_page_fault+0x62/0xa0 [ 249.871420][T12825] asm_exc_page_fault+0x26/0x30 [ 249.876310][T12825] [ 249.878646][T12825] Reported by Kernel Concurrency Sanitizer on: [ 249.884815][T12825] CPU: 1 UID: 0 PID: 12825 Comm: syz.9.2515 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 249.896210][T12825] Tainted: [W]=WARN [ 249.900032][T12825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 249.910127][T12825] ==================================================================