last executing test programs: 3m34.225544731s ago: executing program 2 (id=425): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000001000000000003000000180000000300000800000000040000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r4 = memfd_secret(0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9f}, [@call={0x85, 0x0, 0x0, 0xd2}, @generic={0x10, 0x2, 0xf, 0x1, 0xd03}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0xac, 0x4, 0x0, 0xe9, 0x1}, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x80000001}, @alu={0x7, 0x1, 0xb, 0x3, 0x6, 0x50, 0xfffffffffffffff0}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1d, '\x00', r1, 0x17, r4, 0x8, &(0x7f00000006c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0x2, 0x8, 0x68000000}, 0x10, 0x1b1db, r0, 0x1, &(0x7f0000000740), &(0x7f0000000780)=[{0x5, 0x0, 0x5, 0xa}], 0x10, 0xde}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$eJzs3ctvW1kZAPDv3jycyWQmGZgFoAHKMFBQVTtxZ6LRbBhWI4RGQsySRSckThTFiaPYGZrQRbpkj0QlVrDiHwCJBVJX7JFYwI5NWSDxqEANEgsjX19nnIcbq03sNv79pCufe47t75xa9xzrc3NPACPrWkQcRMRkRHwcEbN5fZIf8X77aD3v8aO7y4eP7i4n0Wx+9M8ka2/VRddrWl7O33MqIr7/QcQPkxNB/xhR39vfWKpWKzt5VamxuV2q7+3fXN9cWqusVbbK5cWFxfl3b71TvqCR/vqo9LvffvHhHw6++eNWt2byuu5xXKT20CeO4rSMR8R3LyPYEIzl45l8mhc/1Yu4SGlEfCYi3syu/9kYyz7N445/TN+K/NIGAF5QzeZsNGe7zwGAqy7NcmBJWsxzATORpsViO4f3ekyn1Vq9cWO1tru10s6VzcVEurpercznucK5mEhW18crC1m5c16tlE+c34qI1yLip4WXsvPicq26MswvPgAwwl4+sf7/p9Be/wGAK67r1/zCMPsBAAyO/80HAKPH+g8Ao8f6DwCjx/oPAKPH+g8Ao8f6DwAj5Xsfftg6mof5/a9XPtnb3ah9cnOlUt8obu4uF5drO9vFtVptLbtnz+Z571et1bYX3o7dO6VGpd4o1ff2b2/Wdrcat7P7et+uTAxkVADAk7z25Qd/TiLi4L2XsiO67vd/7lr9xmX3DrhM6bA7AAzN2LA7AAzN6d2+gFEhHw90bdF7r6t66lThpPt9vX2a7xsKPEeuf/4Z8v/AC03+H0bX0+X/fZeHq0D+H0ZXs5nY8x8ARowcP5Cc0979+/98s+ukv9//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EqayY4kLeZ7gc9EmhaLEa9ExFxMJKvr1cp8RLwaEX8qTBRa5wsRYd8gAHiRpX9L8v2/rs++NXOydbLw30L2GBE/+vlHP7uz1GjsLERMJv86qm/cz+vLw+g/AHCezjrdWcc7Hj+6u9w5Btmfv3+7vbloK+5hfrRbxmM8e5zKcg3T/07y87bW95WxC4h/cC8iPnfW+JMsNzKX73x6Mn4r9isDjZ8ei59mbe3H1r/FZy+gLzBqHrTmn/fPuv7SuJY9nn39T2Uz1LPrzH+Hp+a/9Gj+G+sx/13rN8bbv//OqcrmbLvtXsQXxiMOO2/eNf904ic94r/VZ/y/vPGlN3u1NX8RcT3OGn9yLFapsbldqu/t31zfXFqrrFW2yuXFhcX5d2+9Uy5lOepSJ1N92j/eu/Fqr/it8U/3iD91zvi/1uf4f/m/j3/wlSfE/8ZXz/78X39C/Naa+PU+4y9N/2aqV1sr/kqP8Z/3+d/oM/7Dv+6v9PlUAGAA6nv7G0vVamXnsgvp5YfICknEwQCG0y4UfvWTDwYV6xIL8Xx0Q+F5Kgx7ZgIu26cX/bB7AgAAAAAAAAAAAAAA9DKIPyca9hgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//2KH0wQ=") fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0xfffffd9d) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x10) sendfile(r6, r7, 0x0, 0x8000002b) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0xe, 0x0, &(0x7f0000000000)="17724b568c149730350c352f658c", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 3m33.563654634s ago: executing program 2 (id=438): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r8}}, 0x10) close(r7) tkill(0x0, 0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x10000000000000) syz_io_uring_setup(0x7d4c, &(0x7f0000000000)={0x0, 0x927e, 0x20, 0x3, 0xf9}, &(0x7f0000000080), &(0x7f0000000200)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x34, r10, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r11}, 0x10) setitimer(0x0, 0x0, 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000140)={@remote, @local, @void, {@ipv4={0x4305, @generic={{0x29, 0x4, 0x3, 0x3, 0xa4, 0x65, 0x0, 0x8, 0x0, 0x0, @private=0xa010101, @rand_addr=0x64010102, {[@cipso={0x86, 0x4b, 0x3, [{0x0, 0x8, "094ac467ec3f"}, {0x0, 0x12, "4c985e594ee96c2b09f6e55ec84c916e"}, {0x5, 0x5, "2450b2"}, {0x7, 0xc, "e17393606d00a7ab3c13"}, {0x1, 0xd, "cee8f17fabc8f286afabb2"}, {0x7, 0xd, "65497ceb27170000960c99"}]}, @timestamp_prespec={0x44, 0x44, 0xaa, 0x3, 0x5, [{@broadcast, 0xfffffff9}, {@multicast1, 0x3}, {@empty, 0x5}, {@broadcast, 0xc2f6}, {@multicast2, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x6}, {@local, 0x1ad00000}, {@broadcast, 0x1}]}]}}}}}}, 0x0) 3m33.459694476s ago: executing program 2 (id=440): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) ptrace$pokeuser(0x6, r0, 0x358, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000140)={@multicast1, @remote, @empty}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x4000001) inotify_add_watch(r4, &(0x7f0000000100)='./file0/bus\x00', 0xc4000100) r5 = getpid() syz_pidfd_open(r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r7}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r8, 0x7003) ioctl$RTC_SET_TIME(r8, 0x4024700a, &(0x7f0000000380)={0x0, 0x10, 0x0, 0xc, 0x1, 0x20a9, 0x3, 0x2, 0x1}) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) r9 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r9, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 3m33.389220137s ago: executing program 2 (id=444): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r2, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 3m33.24763056s ago: executing program 2 (id=448): syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x68f}, 0x18) r3 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) read$ptp(r3, &(0x7f0000000280)=""/176, 0xb0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) fstat(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000440)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}], [{@uid_lt={'uid<', r4}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@measure}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}, 0x1, 0x610, &(0x7f0000000a40)="$eJzs3c9rFGcfAPDvTH6avO+bKC+8rz3UQCkKrYmJWqQUau5F7I9/IDVRxGgkSaFRwQjtsfTSQ6GnHmr/i1borfTQaw+9F0FK8VCL1C2zOxs3m93Nz/3h7ucDa+aZmczznTXfPM88eWY2gJ41kf2TRhyNiJtJxFjFtv7IN06U9nv8x51L2SuJQuH935O4czdZrzxWkn8dzb/577FIfk4jjvRtrXdl7da1ucXFheW8PLV6/ebUytqtk1evz11ZuLJwY+aNmXNnz5w9N31qX+c3UGPdN189Taa//fVCEufjWR5bdl7V+w3tq+bsPZuIQsmTyvXZ+3pun8fuFH+OlX9OnkuqV9CxLud5m+XJ/2Is+ir+N8fi03fbGhzQVIUkym0U0HOSOvn/42yj3wzDTYsHaJVyP6B8bV/rOnirtMm9EqAVHs2WBqRKuT8QEeX87y+NDcZwcWxg5HGyaZwniYj9jcyVZHX89MOFT7JX1BmHA5pj/V55lLu6/U+KuTkew8XSyON0c/6vFwpp3hPI1r+3x/onqsryH1pn/V5E/D9v/wdjx/mf5rlbzv8P91i//AcAAAAAAICD82A2Il6vNf8v3Zj/M1hj/s9oRJw/gPq3//tf+jBfSKp2HTyA6qGnPZqNeKvm/N+NOb7jfXnp38X5ALeTy1cXF05FxH8i4kQMDGXl6arjVs4QPvnZkS/r1V85/y97ZfWX5wLmR3rYX3Uj7vzc6tx+zxuIeHQv4qXi/N9j+ZrN83+y9j+p0f5n+X1zh3UcefX+xXrbts9/oFkKX0ccr9n+P+9uJ42fzzFV7A9MlXsFW718+/Pv6tVfnf9NOEWgjqz9H2mc/0NJ5fN6VnZ3/Owi/fRaf6He9r32/weTD/qiYhDg47nV1eXpiMHkna3rZ3YXM3SrPB+ORZ4vWf6feKXx+N9G/78iDw9FxPoO6hveZrv+P7RPlv/zjdv/8c3t/+4XZu6Pf1+v/os7av/PFNv0E/ka439QaevzOHaaoG0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecGlE/CuSdHJjOU0nJyNGI+K/MZIuLq2svnZ56aMb89m2iPEYSMuf9DtWKiflz/8fryjPVJVPR8ThiPii71CxPHlpaXG+3ScPAAAAAAAAAAAAAAAAAAAAHWK0eM9/Yaj6/v/Mb33tjg5ouv78q3yH3tO/5+8sDB1oIEDL7T3/gRdYds2/i/wfaGYsQBvUz/8nTwtFLQ0HaCH9f+hde8x/fy6ALqD9h161wzG94WbHAbSD9h8AAAAAALrK4WMPfkkiYv3NQ8VXZjDfZrI/dLe03QEAbWMOL/Su/qV2RwC0i2t8INlY+qvmzf71Z/8nzQkIAAAAAAAAAAAAANji+FH3/0Ovanz/v7n90M0a3P9fK/k9LgC6SP2P/tD2Q7dzjQ9s19q7/x8AAAAAAAAAAAAAOsDwrWtzi4sLyytrL97C250Rxu4W1uc6IoxdLBTuRjTe51lzah+IiE55E5ZXsmhaVVf5ERxtPOU2/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BMAAP//cdEbCg==") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) 3m33.164816852s ago: executing program 2 (id=450): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f0000000280)) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x100002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x8, 0x12, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000540), 0x84) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x0, 0x0, 0x82, 0x200000600, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x18204, 0x0, 0x20e, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x8, 0x0, 0x20000002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r10}, 0x10) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r14}, 0x10) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[{@version_u}]}}) 3m18.144084904s ago: executing program 32 (id=450): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f0000000280)) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x100002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x8, 0x12, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000540), 0x84) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x0, 0x0, 0x82, 0x200000600, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x18204, 0x0, 0x20e, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x8, 0x0, 0x20000002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r10}, 0x10) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r14}, 0x10) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[{@version_u}]}}) 2m11.411940219s ago: executing program 3 (id=2429): io_setup(0x490, &(0x7f0000000000)=0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') lseek(r3, 0x6, 0x1) getdents64(r3, 0xffffffffffffffff, 0x43) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e000000200"/43], 0xb8}}, 0x4000) r6 = io_uring_setup(0x6001, &(0x7f00000003c0)={0x0, 0xa1d5, 0x800, 0x2, 0x249}) close_range(r6, r6, 0x0) io_pgetevents(r0, 0x1, 0x1, &(0x7f0000000180)=[{}], 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={[&(0x7f0000000100)='($.*^%}\x00']}, &(0x7f0000000600)={[&(0x7f0000000280)='{&:\x00', &(0x7f00000002c0)='\xff\xff', &(0x7f0000000440)='team0\x00', &(0x7f0000000480)='team0\x00', &(0x7f00000004c0)='\xff\xff', &(0x7f0000000500)='-\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='team0\x00', &(0x7f00000005c0)='team0\x00']}) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x7, r6, 0x0, 0x0, 0x2, 0x0, 0x1}]) 2m10.486117927s ago: executing program 3 (id=2474): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) 2m10.448552888s ago: executing program 3 (id=2477): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180), &(0x7f0000000480)=0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb851}, 0x1c) r2 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000040)=0x100) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000c00)={'syztnl1\x00', 0x0, 0x8, 0x8, 0x4235e673, 0x5c1, {{0x1c, 0x4, 0x2, 0x2, 0x70, 0x64, 0x0, 0x10, 0x2f, 0x0, @remote, @broadcast, {[@rr={0x7, 0x1f, 0xd0, [@remote, @dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x25}, @loopback, @private=0xa010102, @local]}, @noop, @timestamp_prespec={0x44, 0x24, 0x2a, 0x3, 0x7, [{@broadcast, 0x9}, {@private=0xa010102, 0x3}, {@local, 0xb}, {@broadcast, 0xd516}]}, @ssrr={0x89, 0x17, 0x6e, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @rand_addr=0x64010101, @loopback]}]}}}}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x5, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") perf_event_open(&(0x7f0000001300)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x20000814}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a3000000000"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r4, 0x0, 0x401}, 0x11) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x44, &(0x7f0000000340)="b157aeb347ccb42caaf8ae95ffc28ea36b5fcdc50d4324aa2cbb716cdca523aa4013d1d3a3eb2daef7789f688caface9a07a79f0dd4823baec56c1fd8f8b19f9b5765adaa7882bcab0b497", 0x4b) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) 2m10.3123008s ago: executing program 3 (id=2483): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2cc, &(0x7f00000003c0)="$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") socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000580), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffb, r2, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) 2m10.277424501s ago: executing program 3 (id=2485): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000110000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2m9.907187108s ago: executing program 3 (id=2500): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) ptrace$pokeuser(0x6, r0, 0x358, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000140)={@multicast1, @remote, @empty}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x4000001) inotify_add_watch(r5, &(0x7f0000000100)='./file0/bus\x00', 0xc4000100) r6 = getpid() syz_pidfd_open(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r8}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r9, 0x7003) ioctl$RTC_SET_TIME(r9, 0x4024700a, &(0x7f0000000380)={0x0, 0x10, 0x0, 0xc, 0x1, 0x20a9, 0x3, 0x2, 0x1}) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) r10 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r10, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 2m9.906926618s ago: executing program 33 (id=2500): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) ptrace$pokeuser(0x6, r0, 0x358, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000140)={@multicast1, @remote, @empty}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x4000001) inotify_add_watch(r5, &(0x7f0000000100)='./file0/bus\x00', 0xc4000100) r6 = getpid() syz_pidfd_open(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r8}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r9, 0x7003) ioctl$RTC_SET_TIME(r9, 0x4024700a, &(0x7f0000000380)={0x0, 0x10, 0x0, 0xc, 0x1, 0x20a9, 0x3, 0x2, 0x1}) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) r10 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r10, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 27.865543859s ago: executing program 1 (id=4768): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioprio_set$uid(0x3, 0x0, 0x2004) 26.826670289s ago: executing program 1 (id=4782): r0 = syz_io_uring_setup(0x14d9, &(0x7f0000000480)={0x0, 0x5121, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000020010000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffff5}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 26.618360173s ago: executing program 1 (id=4786): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c0001"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 26.490833976s ago: executing program 1 (id=4789): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095", @ANYBLOB="83d7fa8627687e33a97da73beae85d8f08ea2b652066795358dd6ba37413be7bef632af9bdc1e355ead0467857bab01565f284987adb6d27148dd4453c71fc39c19a3b0d28a49a01ba10dda4"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) io_uring_enter(r0, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a95004, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f48500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x18) r7 = signalfd(r5, &(0x7f0000000300)={[0x23]}, 0x8) faccessat2(r7, &(0x7f0000000000)='\x00', 0x2, 0x1100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x7fff}, 0x18) r9 = io_uring_setup(0x1e02, &(0x7f0000000240)={0x0, 0x2a4, 0x800, 0x1, 0x4000159, 0x0, r7}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x2) readv(r10, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) close_range(r9, 0xffffffffffffffff, 0x0) 26.443000636s ago: executing program 1 (id=4790): inotify_init() epoll_create(0x200008) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf250f00000005002f000100000005002ae800000000050029000100000008000300", @ANYRES32=r5, @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x24004040}, 0x24008824) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0xfffffffd, 0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r9 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r8, 0x0, 0x0}) io_uring_enter(r9, 0x3498, 0x1569, 0x0, 0x0, 0x0) dup3(r9, 0xffffffffffffffff, 0x80000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e65760005004e200000041006000000000000000000"], 0x40}}, 0x40800) 26.340625329s ago: executing program 1 (id=4791): inotify_init() epoll_create(0x200008) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf250f00000005002f000100000005002ae800000000050029000100000008000300", @ANYRES32=r5, @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x24004040}, 0x24008824) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0xfffffffd, 0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r9 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r8, 0x0, 0x0}) io_uring_enter(r9, 0x3498, 0x1569, 0x0, 0x0, 0x0) dup3(r9, 0xffffffffffffffff, 0x80000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e65760005004e200000041006000000000000000000"], 0x40}}, 0x40800) 26.331989158s ago: executing program 34 (id=4791): inotify_init() epoll_create(0x200008) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf250f00000005002f000100000005002ae800000000050029000100000008000300", @ANYRES32=r5, @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x24004040}, 0x24008824) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0xfffffffd, 0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r9 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r8, 0x0, 0x0}) io_uring_enter(r9, 0x3498, 0x1569, 0x0, 0x0, 0x0) dup3(r9, 0xffffffffffffffff, 0x80000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e65760005004e200000041006000000000000000000"], 0x40}}, 0x40800) 21.334836915s ago: executing program 5 (id=4857): unshare(0xc000280) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, 0x0, 0x20000004) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, 0x0, 0x4c001) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000021}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 21.245022398s ago: executing program 5 (id=4860): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a00000200000000"], 0x10}}, 0x0) 21.244548628s ago: executing program 5 (id=4861): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x34, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x20040844) 21.207223598s ago: executing program 5 (id=4863): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) munlockall() 21.178718968s ago: executing program 5 (id=4864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 21.10235068s ago: executing program 5 (id=4866): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x9, 0xf, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff7}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x3}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x8}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}}]}, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x36, '\x00', 0x0, @cgroup_sock=0xc, r4, 0x8, &(0x7f00000003c0)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000500)=[{0x3, 0x3, 0x0, 0x9}], 0x10, 0xffffff81}, 0x94) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000b80)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 7.624354291s ago: executing program 6 (id=5114): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='net/packet\x00') lseek(r1, 0x10001, 0x0) 7.585378982s ago: executing program 6 (id=5115): chmod(&(0x7f0000000040)='./file0\x00', 0x2) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4, 0x5}}]}, 0x34}}, 0x80) r3 = socket(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES16=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000014c0)={&(0x7f0000000040)='mm_page_alloc\x00', r4, 0x0, 0x5}, 0x18) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) 7.584841923s ago: executing program 6 (id=5116): inotify_init() epoll_create(0x200008) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf250f00000005002f000100000005002ae800000000050029000100000008000300", @ANYRES32=r5, @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x24004040}, 0x24008824) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0xfffffffd, 0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r9 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r10 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r9, 0x0, 0x0}) io_uring_enter(r10, 0x3498, 0x1569, 0x0, 0x0, 0x0) dup3(r10, r8, 0x80000) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e65760005004e200000041006000000000000000000"], 0x40}}, 0x40800) 7.447047635s ago: executing program 6 (id=5117): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="efaceeaa2bf6db2aad75f5e79d00d606772f7b278a15b79212f4d216a27f761e853a67317c2ca7d4515ae1d0370e27c3936d29c784c7645dfb16392f3c0a847a2522bca2054368da32acf5f9217186d9868b75b0505533b7b02e51324e9db752f503b7e6a4ea7ff69bba22b5f35827ddcd385b1bb1e1d88eb9584220ed598f64c9cf83f71f169f2c5e885fb10757fd9142ddf3ce23fb1ebf95c5909c94c1934630c1ce4174e77fdcd856fc58df0b117a2e704f4e640bb3b064ef37486b615fb969940f0147f3eb848cf63413ca1ddcca2f32fbed14ea6818a52c871428988feda396eb47231ee9bd22", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x12, 0x0, 0x0) statfs(0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pipe(0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff1}}}, 0xfffffffffffffdb2}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) 7.375964196s ago: executing program 6 (id=5118): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x66, 0x0, 0x0, 0x89, 0x0, @rand_addr, @private=0xa010101}}}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, &(0x7f0000000f80)={0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7.368603677s ago: executing program 6 (id=5119): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setresgid(0x0, 0x0, 0x0) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, 0xee00, 0x0) (fail_nth: 7) 7.343995547s ago: executing program 35 (id=5119): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setresgid(0x0, 0x0, 0x0) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, 0xee00, 0x0) (fail_nth: 7) 6.069125272s ago: executing program 36 (id=4866): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x9, 0xf, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff7}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x3}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x8}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}}]}, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x36, '\x00', 0x0, @cgroup_sock=0xc, r4, 0x8, &(0x7f00000003c0)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000500)=[{0x3, 0x3, 0x0, 0x9}], 0x10, 0xffffff81}, 0x94) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000b80)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 2.264412216s ago: executing program 4 (id=5175): mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 2.228981277s ago: executing program 4 (id=5178): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8605, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0xb}, 0x800, 0x10000, 0xfffffffd, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0xb0043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x5, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x16}}}}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r3, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f00000000c0)='./file1\x00', 0x400, &(0x7f0000000500), 0x2, 0x260, &(0x7f0000000980)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x17e) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x189042, 0x0) 1.323202694s ago: executing program 8 (id=5190): socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getxattr(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000000680)=""/163, 0xa3) 1.256979445s ago: executing program 8 (id=5192): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x38, 0x12, 0x105, 0x70bd2b, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@remote, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xa, 0x6, 0x9}}]}, 0xffc6}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) 1.217660986s ago: executing program 8 (id=5193): inotify_init() epoll_create(0x200008) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf250f00000005002f000100000005002ae800000000050029000100000008000300", @ANYRES32=r5, @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x24004040}, 0x24008824) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0xfffffffd, 0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r9 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r10 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r9, 0x0, 0x0}) io_uring_enter(r10, 0x3498, 0x1569, 0x0, 0x0, 0x0) dup3(r10, r8, 0x80000) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e65760005004e200000041006000000000000000000"], 0x40}}, 0x40800) 1.206182006s ago: executing program 4 (id=5194): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x1010, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e00000007000000070000007d03000087740200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003000000f27b417fb34939a78bf467de6fe85700000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[], 0x0) syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0xb050, 0x100, 0x2, 0x5cc}, &(0x7f0000000040), &(0x7f0000000000)) (async) r6 = syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0xb050, 0x100, 0x2, 0x5cc}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_lsm={0x1d, 0x19, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x83ef}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}, @alu={0x7, 0x1, 0x0, 0x6, 0x7, 0x20, 0x19}, @map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4477d168, 0x0, 0x0, 0x0, 0x7}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x6, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) socket$packet(0x11, 0x3, 0x300) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000140), 0x0) (async) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000140), 0x0) sendto$inet(r9, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08002900002c000000000006904404b0b000004e22000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000090780000"], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) (async) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r6}) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r6}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1000000001, 0x12) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1000000001, 0x12) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)=ANY=[@ANYBLOB="50001bf2a4328ab083cb7000ffdbcf25000000005dfe2516ba00c9f1d79947204a2b6a695d56fc04c2ad1704777807f246e1dbdb5e00dd", @ANYRES32=0x0, @ANYBLOB="0200040000000100300012800800010067747000240002800800030000000080080004000200000008000100", @ANYRES32, @ANYBLOB="0500050000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x1) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r8, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r10}}) (async) syz_io_uring_submit(r0, r8, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r10}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94) 1.073762899s ago: executing program 8 (id=5197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="00810100004000000010e8b5295b576680976ce2", 0x14}], 0x1}, 0x48045) readv(r2, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/20, 0x14}, {0x0}], 0x2) 1.03741037s ago: executing program 4 (id=5198): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES64=r0, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x40c0080) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x125500) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x40000000, 0x0, 0x3}, 0x8}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000179b2267538098e1b75d642aa33d59777738290aa39666d8e0780fc015ba7599ace001e3f775", @ANYRES64=r0, @ANYBLOB="00000000e0ff0000000000040000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x18) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r10) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000fa", @ANYRES16=r11, @ANYBLOB="01022dbd7000ffdbdf252100000009001f00706879310000000005002000000000000c0005000102aaaaaaaaaaaa"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 999.282871ms ago: executing program 4 (id=5202): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x2, 0x0, 0x0, 0x7ffc9ffa}]}) setreuid(0x0, 0xee00) 933.775842ms ago: executing program 4 (id=5204): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8605, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0xb}, 0x800, 0x10000, 0xfffffffd, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0xb0043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x5, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x16}}}}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r3, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f00000000c0)='./file1\x00', 0x400, &(0x7f0000000500), 0x2, 0x260, &(0x7f0000000980)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x17e) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x189042, 0x0) 925.943842ms ago: executing program 7 (id=5205): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x66, 0x0, 0x0, 0x89, 0x0, @rand_addr, @private=0xa010101}}}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000f80)={0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 711.217756ms ago: executing program 7 (id=5207): inotify_init() epoll_create(0x200008) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf250f00000005002f000100000005002ae800000000050029000100000008000300", @ANYRES32=r5, @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x24004040}, 0x24008824) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0xfffffffd, 0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r9 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r10 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r9, 0x0, 0x0}) io_uring_enter(r10, 0x3498, 0x1569, 0x0, 0x0, 0x0) dup3(r10, r8, 0x80000) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e65760005004e200000041006000000000000000000"], 0x40}}, 0x40800) 710.902876ms ago: executing program 0 (id=5208): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vcan0\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="00810100004000000010e8b5295b576680976ce2", 0x14}], 0x1}, 0x48045) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/20, 0x14}, {0x0}], 0x2) 688.895477ms ago: executing program 0 (id=5209): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/notes', 0x0, 0x120) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000800)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_readahead}, {@fscache}, {@fscache}, {@version_L}, {@msize={'msize', 0x3d, 0x100}}]}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@bridge_delneigh={0x30, 0x1c, 0xcafe28741a3524c9, 0x70bd29, 0x20000, {0x7, 0x0, 0x0, r2, 0x80, 0x8e, 0x8}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x21, 0x81, 0x4, 0x3, 0x2029c, r0, 0x6, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="64000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000001c0007800c00028008000140000000000c000180080001c0ac1414bb05000500020000000500010006"], 0x64}}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000140)={'wg0\x00', {0x2, 0x4e21, @broadcast}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x2}, 0x18) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x0, 0x80}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r7, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r10, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) bind$xdp(r10, &(0x7f0000000000)={0x2c, 0x2, r12, 0x17, r10}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0xe, 0x2, 0x4, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x795, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4271, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x0, 0x0, 0x3, 0x10000, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x8, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r14) sendmsg$IEEE802154_LLSEC_SETPARAMS(r14, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r15, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) sendmsg$nl_netfilter(r13, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000001a40)={0x10ac, 0x7, 0x5, 0x101, 0x70bd29, 0x25dfdbfe, {0x2, 0x0, 0x9}, [@typed={0x8, 0x7c, 0x0, 0x0, @fd=r8}, @generic="08db557fb3a12474b62b", @generic="c6abf0ac1a297aab0c55747fcec5d4384ee8bd6606445cd2d362a9ff8fe1f690d7d5af49853c56986ec1bdc217a24cdb60296a2023640e6d2fb7e6427e55f643c22f01468be0efbba9e7131c85050bd898a01bd61d87150cdd6e92d7fbacf1a9921c48b6dfe59ec9735171b11f31d9fd630bb60051eeb1b9e6b1c39b727509ede1e3708f7f14", @generic="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"]}, 0x10ac}, 0x1, 0x0, 0x0, 0x4083}, 0x4000) 607.892798ms ago: executing program 0 (id=5210): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 597.501648ms ago: executing program 0 (id=5211): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x66, 0x0, 0x0, 0x89, 0x0, @rand_addr, @private=0xa010101}}}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, &(0x7f0000000f80)={0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 586.534998ms ago: executing program 7 (id=5212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x2000c010) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004006, &(0x7f0000001380)={[{@jqfmt_vfsold}, {@errors_remount}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@init_itable_val}, {@grpjquota, 0x22}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00\x00\xd8Y8\x983\xc3\x93N\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x0, 0x66, 0x31, 0x31, 0x63, 0x64, 0x65], 0x2d, [0x66, 0x32, 0x61, 0x39], 0x2d, [0x61, 0x35, 0x64, 0x65], 0x2d, [0x30, 0x1ee6baa214271bc7, 0x32, 0x30], 0x2d, [0x65, 0x64, 0x62, 0x63, 0x36, 0x0, 0x33, 0x38]}}}], 0x2}, 0xc4, 0x472, &(0x7f0000000440)="$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") sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 427.694871ms ago: executing program 7 (id=5213): r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x3}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r4 = socket$rxrpc(0x21, 0x2, 0xa) listen(r4, 0x4) close_range(r3, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r1}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r6, @ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0xffffdffffffffffe}, 0x18) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000100)={0x18, 0x0, {0xfffe, @empty, 'veth1_to_bond\x00'}}, 0x1e) close(r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r10}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, &(0x7f00000002c0)={0x2c, 0x7, 0x0, 0x21, r11}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0xf, 0xc340) 417.054321ms ago: executing program 9 (id=5214): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x20040844) 335.957743ms ago: executing program 9 (id=5215): arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) r0 = socket$key(0xf, 0x3, 0x2) r1 = getpgrp(0x0) r2 = gettid() r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, 0x0, 0x0, 0x300, 0xf5, 0x0, 0x0}) syz_clone3(&(0x7f0000000280)={0x80000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), {0x22}, &(0x7f0000000100)=""/85, 0x55, &(0x7f0000000180)=""/150, &(0x7f0000000240)=[r1, r2], 0x2, {r4}}, 0x58) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[], 0x70}, 0x1, 0x7}, 0x0) 327.965873ms ago: executing program 7 (id=5216): inotify_init() epoll_create(0x200008) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf250f00000005002f000100000005002ae800000000050029000100000008000300", @ANYRES32=r5, @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x24004040}, 0x24008824) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0xfffffffd, 0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r9 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r10 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r9, 0x0, 0x0}) io_uring_enter(r10, 0x3498, 0x1569, 0x0, 0x0, 0x0) dup3(r10, r8, 0x80000) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e65760005004e200000041006000000000000000000"], 0x40}}, 0x40800) 298.002944ms ago: executing program 9 (id=5217): r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x101, 0x20200) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp], 0x1) sendto$inet6(r0, &(0x7f00000003c0)="4988f9279d6017edf1cb662c9d5a5976f5445546d25d108c2b934490798b955a45eaccec1c701ab20e6bc131764d36720850c318697c0b49670e2f537612e33b5d2f2a649172", 0x46, 0x4040, &(0x7f0000000300)={0xa, 0x4e22, 0x8, @local, 0x800}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x20, &(0x7f0000000280)={&(0x7f0000000b00)=""/4096, 0x1000, 0x0, &(0x7f0000000200)=""/52, 0x34}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 206.469696ms ago: executing program 0 (id=5218): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8979) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r1, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c0000000200000030000400000000800b0001006e756d67656e00001c0002800800024000000008000140000000150900010073797a30000000000900020073d8a6be9675cc797a3200000000140000001100010000000000000000000000000a00"/129], 0x84}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) (async) ftruncate(r1, 0x8979) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r1, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c0000000200000030000400000000800b0001006e756d67656e00001c0002800800024000000008000140000000150900010073797a30000000000900020073d8a6be9675cc797a3200000000140000001100010000000000000000000000000a00"/129], 0x84}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) (async) 182.825086ms ago: executing program 8 (id=5219): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0x50, r0, 0xfc968000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, "000088beffff0000"}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) cachestat(r2, &(0x7f0000000500)={0xfffffffffffffffe, 0x6}, &(0x7f0000000540), 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x58, &(0x7f0000000300)}, 0x10) mq_notify(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000006c0)={0x3ff, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@fallback=r0, 0xffffffffffffffff, 0xe, 0x24, 0x0, @void, @void, @void, @value=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r7 = epoll_create1(0x80000) epoll_pwait(r7, &(0x7f0000000100)=[{}], 0x1, 0xffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x2fb4f3c603899fe3}) 150.346727ms ago: executing program 9 (id=5220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 59.136789ms ago: executing program 9 (id=5221): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17.66245ms ago: executing program 0 (id=5222): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) ioprio_set$uid(0x3, 0x0, 0x2004) 17.191609ms ago: executing program 7 (id=5223): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x11ee, &(0x7f0000003680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$eJzs3c1rHOUfAPDvbJK+/35NoRQVkUAPVmo3TeJLBQ/1KFos6L0uyTSUbLoluylNLNge7MWLFEHEgnjXu8fiP+BfUdBCkRL04CUym9k0L7vJNt2ajfP5wITn2Znd5/nuzPfJMzuzbACFNZL9KUW8GBFfJRFHIyLJ1w1GvnJkZbulxzcnsyWJ5eWP/0ia22X11mu1nnc4r7wQEb98EXG6tLnd+sLiTKVaTefy+mhj9tpofWHxzJXZynQ6nV4dn5g49+bE+Dtvv9WzWF+7+Ne3H91//9yXJ5e++enhsbtJnI8j+bq1cTyDW2srIzGSvydDcX7DhmM9aKyfJLvdAXZkIM/zocjGgKMxkGc98N/3eUQsAwWVyH8oqNY8oHVu36Pz4D3j0XsrJ0Cb4x9c+WwkDjTPjQ4tJevOjLLz3eEetJ+18fPv9+5mS2z4HOJAD14foJNbtyPi7ODg5vEvyce/nTvbxTYb2yja/x/YTfez+c/r7eY/pdX5T7SZ/xxuk7s7sX3+lx72oJmOsvnfu23nv6sXrYYH8tr/mnO+oeTylWqajW3/j4hTMbQ/q291Pefc0oPlTuvWzv+yJWu/NRfM+/FwcP/650xVGpVniXmtR7cjXmo7/01W93/SZv9n78fFLts4kd57pdO67eN/vpZ/iHi17f5/ckUr2fr65GjzeBhtHRWb/XnnxK+d2t/t+LP9f2jr+IeTtddr60/fxvcH/k47rVsXf3R//O9LPmmW9+WP3ag0GnNjEfuSDzc/Pv7kua16a/ss/lMntx7/2h3/ByPi0y7jv3P8x5e7in+X9v/UU+3/py88+OCz7zq1393490azdCp/pJvxr9sOPst7BwAAAAAAAP2mFBFHIimVV8ulUrm8cn/H8ThUqtbqjdOXa/NXp6L5XdnhGCq1rnQfXXM/xFh+P2yrPr6hPhERxyLi64GDzXp5slad2u3gAQAAAAAAAAAAAAAAAAAAoE8c7vD9/8xvA7vdO+C585PfUFzb5n8vfukJ6Ev+/0NxyX8oLvkPxSX/objkPxSX/Ifikv9QXPIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeurihQvZsrz0+OZkVp+6vjA/U7t+Ziqtz5Rn5yfLk7W5a+XpWm26mpYna7PbvV61Vrs2Nh7zN0Ybab0xWl9YvDRbm7/auHRltjKdXkqH/pWoAAAAAAAAAAAAAAAAAAAAYG+pLyzOVKrVdE5BYUeFwf7oxp4vZNnYB91Y1x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6A//BAAA//8iuzYD") bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000001000)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="73554965ac9b50725913ff98", @ANYBLOB="4aa5ad9669e77edf494a81b2104d7ea5da7394891ddf591874add8f4a34d368c60a6385721628ba197360c12438f8a71cd7f4e0dbe5b259dcbd09649d83a7d77aa3b186ad18d0179bf08ef909fc6f9cffa049045ae6d64db59b92dda2f3ffa352043b5997d9a51b5755caba37cfb27f969f8bc1b9701b62721f4ae4d06d7dbac8ae98405f851f5b05fb4eb72f3a645d61aedd737fde7c7fbbf9448cf6d67ddfb74b467fe146db7476936dc2b44365959a013c6ce511ccbf2e5aa9110af5050e5c3c33a8f2226125aa95039863fdd83ff939aabe0e6c5e489b690a3ef8e07bbedfa704a32e5f27c72ffc9656e9c45976ea8d05ae556", @ANYBLOB="46dd7caee0d955648cf904f6a66b890574fe0d99b47b2f5196f8304bcc774d54d05681f01ca2bf4d417b062059ad704c668d46fee1321ceca9a4f4796d6c6349eeecb04c511bfb048baa81662bd267d4b314dea0b7837c64e5ec1f86b1bfaf233cc1d58b6a36a15550e86b508e1bb16631025c880e1a38da89420c59d9ff0711956cfa62aeef45d4dc86f80541a4ca00784d3fde87341e8771351506266e926065f90b42522d8f5097a220047bb605f9", @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 10.42075ms ago: executing program 8 (id=5224): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0x0, 0x0, 0x8}, 0xc) syz_clone3(&(0x7f0000000cc0)={0x10102000, &(0x7f0000000b00), 0x0, &(0x7f0000000b80), {0x22}, &(0x7f0000000bc0)=""/58, 0x3a, 0x0, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000d40), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0x40}}, 0x0) mq_open(&(0x7f0000000d80)='(\\w\x1e%\x00', 0x40, 0xa4, &(0x7f0000000dc0)={0x1, 0xe, 0xa, 0xf}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f00000003c0)='./file0\x00') getpgid(0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c7b093a197cddd4b33a1400", @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x0) getgroups(0x4, &(0x7f0000000e00)=[0xee00, 0x0, 0xee01, 0xffffffffffffffff]) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000e40)) socket$inet_udp(0x2, 0x2, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000e80), 0x4e0000, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5, 0x0, 0x4}, 0x18) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) ptrace(0x10, r4) r6 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r6, &(0x7f0000000140)={0x0, ""/140}, 0x94, 0x2, 0x1000) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000680)={{0x3, 0x0, r7, 0x0, 0x0, 0xa2, 0x8000}, 0x0, 0x0, 0x0, 0x1, 0x5, 0x200000002bde, 0xffffffffffffff27, 0x9, 0x5, 0x9}) 0s ago: executing program 9 (id=5225): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getxattr(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000000680)=""/163, 0xa3) kernel console output (not intermixed with test programs): problem. [ 226.460569][T14497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.481737][T14497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.488968][T14497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.516822][T14497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.561634][T14652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4162'. [ 226.580246][T14497] hsr_slave_0: entered promiscuous mode [ 226.588626][T14497] hsr_slave_1: entered promiscuous mode [ 226.626600][T14655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4163'. [ 226.750796][T14674] loop0: detected capacity change from 0 to 512 [ 226.785237][T14674] EXT4-fs error (device loop0): ext4_quota_enable:7128: inode #4: comm syz.0.4169: iget: bogus i_mode (4200) [ 226.797791][T14674] EXT4-fs error (device loop0): ext4_quota_enable:7131: comm syz.0.4169: Bad quota inode: 4, type: 1 [ 226.812213][T14674] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 226.828284][T14674] EXT4-fs (loop0): mount failed [ 226.843379][T14674] loop0: detected capacity change from 0 to 1024 [ 226.850422][T14674] EXT4-fs: Ignoring removed bh option [ 226.855938][T12875] vlan2: left promiscuous mode [ 226.861257][T14674] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 226.872498][T14674] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 226.881181][T14674] System zones: 0-1, 3-12 [ 226.887264][T14674] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.4169: lblock 1 mapped to illegal pblock 1 (length 1) [ 226.901718][T14674] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.4169: Failed to acquire dquot type 0 [ 226.913767][T14674] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.4169: Freeing blocks not in datazone - block = 0, count = 4096 [ 226.927543][T14674] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.4169: Invalid inode bitmap blk 0 in block_group 0 [ 226.940813][T12875] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:64: lblock 1 mapped to illegal pblock 1 (length 1) [ 226.941022][T14674] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 226.964538][T14674] EXT4-fs (loop0): 1 orphan inode deleted [ 226.970660][T14674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.973379][T12875] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:64: Failed to release dquot type 0 [ 227.011750][T14497] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 227.032680][T14497] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 227.056906][T14497] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 227.069366][T14497] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 227.105806][T14693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4174'. [ 227.115000][T14696] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 227.195556][T14497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.203959][T14674] netlink: 'syz.0.4169': attribute type 21 has an invalid length. [ 227.226712][T14674] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4169'. [ 227.236042][T14674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4169'. [ 227.240892][T14710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4180'. [ 227.248223][T14497] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.267089][T14712] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 227.305491][ T7489] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.312702][ T7489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.326764][ T7489] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.333982][ T7489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.470131][T14497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.571736][T14742] loop6: detected capacity change from 0 to 512 [ 227.582619][T14742] EXT4-fs: Ignoring removed nobh option [ 227.592457][T14742] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 227.602891][T14742] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #13: comm syz.6.4186: casefold flag without casefold feature [ 227.616936][T14742] EXT4-fs (loop6): Remounting filesystem read-only [ 227.624847][T14742] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.664973][T14751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4187'. [ 227.696234][T14497] veth0_vlan: entered promiscuous mode [ 227.710576][T14497] veth1_vlan: entered promiscuous mode [ 227.744453][T14497] veth0_macvtap: entered promiscuous mode [ 227.755650][T14497] veth1_macvtap: entered promiscuous mode [ 227.767219][T14762] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4191'. [ 227.780647][T14497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.796330][T14497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.815103][T12866] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.848282][T12866] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.877684][T12866] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.906018][T12866] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.186623][T14791] lo speed is unknown, defaulting to 1000 [ 228.213989][T14807] loop0: detected capacity change from 0 to 512 [ 228.238614][T14809] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 228.243571][T14807] EXT4-fs: Ignoring removed nobh option [ 228.275706][T14807] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 228.304448][T14807] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #13: comm syz.0.4209: casefold flag without casefold feature [ 228.332509][T14807] EXT4-fs (loop0): Remounting filesystem read-only [ 228.603434][T14840] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 228.773374][T14852] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.829929][T14859] netlink: 'syz.6.4227': attribute type 13 has an invalid length. [ 228.848145][T14852] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.969883][T14859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.991953][T14852] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.035971][T14852] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.133720][T12811] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.152644][T14874] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 229.165296][ T7489] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.179154][ T7489] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.195980][ T7489] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.237500][T14876] IPv6: NLM_F_CREATE should be specified when creating new route [ 229.283682][T14888] FAULT_INJECTION: forcing a failure. [ 229.283682][T14888] name failslab, interval 1, probability 0, space 0, times 0 [ 229.296622][T14888] CPU: 1 UID: 0 PID: 14888 Comm: syz.5.4242 Not tainted syzkaller #0 PREEMPT(voluntary) [ 229.296653][T14888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 229.296668][T14888] Call Trace: [ 229.296677][T14888] [ 229.296687][T14888] __dump_stack+0x1d/0x30 [ 229.296775][T14888] dump_stack_lvl+0xe8/0x140 [ 229.296793][T14888] dump_stack+0x15/0x1b [ 229.296814][T14888] should_fail_ex+0x265/0x280 [ 229.296836][T14888] should_failslab+0x8c/0xb0 [ 229.296867][T14888] kmem_cache_alloc_noprof+0x50/0x310 [ 229.296928][T14888] ? ep_insert+0x13c/0xdb0 [ 229.296957][T14888] ep_insert+0x13c/0xdb0 [ 229.296989][T14888] ? security_capable+0x83/0x90 [ 229.297014][T14888] do_epoll_ctl+0x686/0x8a0 [ 229.297103][T14888] __x64_sys_epoll_ctl+0xcb/0x100 [ 229.297131][T14888] x64_sys_call+0x706/0x2ff0 [ 229.297152][T14888] do_syscall_64+0xd2/0x200 [ 229.297187][T14888] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 229.297241][T14888] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 229.297267][T14888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.297289][T14888] RIP: 0033:0x7ff67c41ebe9 [ 229.297304][T14888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.297328][T14888] RSP: 002b:00007ff67ae87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 229.297355][T14888] RAX: ffffffffffffffda RBX: 00007ff67c655fa0 RCX: 00007ff67c41ebe9 [ 229.297426][T14888] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 229.297439][T14888] RBP: 00007ff67ae87090 R08: 0000000000000000 R09: 0000000000000000 [ 229.297516][T14888] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000001 [ 229.297532][T14888] R13: 00007ff67c656038 R14: 00007ff67c655fa0 R15: 00007ffd06364988 [ 229.297629][T14888] [ 229.565951][T14900] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 229.811338][T14933] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 230.088744][T14961] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 230.183559][T14971] loop6: detected capacity change from 0 to 512 [ 230.200448][T14971] EXT4-fs: Ignoring removed nobh option [ 230.210958][T14971] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 230.223593][T14971] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #13: comm syz.6.4276: casefold flag without casefold feature [ 230.242313][T14971] EXT4-fs (loop6): Remounting filesystem read-only [ 230.385211][T14979] lo speed is unknown, defaulting to 1000 [ 230.542327][T14999] lo speed is unknown, defaulting to 1000 [ 230.840943][T15028] FAULT_INJECTION: forcing a failure. [ 230.840943][T15028] name failslab, interval 1, probability 0, space 0, times 0 [ 230.854409][T15028] CPU: 0 UID: 0 PID: 15028 Comm: syz.1.4297 Not tainted syzkaller #0 PREEMPT(voluntary) [ 230.854470][T15028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.854555][T15028] Call Trace: [ 230.854563][T15028] [ 230.854571][T15028] __dump_stack+0x1d/0x30 [ 230.854594][T15028] dump_stack_lvl+0xe8/0x140 [ 230.854619][T15028] dump_stack+0x15/0x1b [ 230.854663][T15028] should_fail_ex+0x265/0x280 [ 230.854824][T15028] should_failslab+0x8c/0xb0 [ 230.854853][T15028] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 230.854881][T15028] ? __d_alloc+0x3d/0x340 [ 230.854951][T15028] __d_alloc+0x3d/0x340 [ 230.855039][T15028] ? from_vfsgid+0x70/0xa0 [ 230.855069][T15028] d_alloc_pseudo+0x1e/0x80 [ 230.855096][T15028] alloc_file_pseudo+0x71/0x160 [ 230.855276][T15028] hugetlb_file_setup+0x2a6/0x3d0 [ 230.855305][T15028] ksys_mmap_pgoff+0x157/0x310 [ 230.855324][T15028] x64_sys_call+0x14a3/0x2ff0 [ 230.855417][T15028] do_syscall_64+0xd2/0x200 [ 230.855445][T15028] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 230.855468][T15028] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 230.855539][T15028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.855586][T15028] RIP: 0033:0x7f1e0096ebe9 [ 230.855606][T15028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.855692][T15028] RSP: 002b:00007f1dff3cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 230.855711][T15028] RAX: ffffffffffffffda RBX: 00007f1e00ba5fa0 RCX: 00007f1e0096ebe9 [ 230.855756][T15028] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 230.855768][T15028] RBP: 00007f1dff3cf090 R08: ffffffffffffffff R09: 0000000000000000 [ 230.855860][T15028] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 230.855871][T15028] R13: 00007f1e00ba6038 R14: 00007f1e00ba5fa0 R15: 00007ffe75381b18 [ 230.855891][T15028] [ 231.223139][T15043] 9pnet_fd: Insufficient options for proto=fd [ 231.351615][ T29] kauditd_printk_skb: 426 callbacks suppressed [ 231.351630][ T29] audit: type=1326 audit(231.311:16379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15050 comm="syz.5.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c41ebe9 code=0x7ffc0000 [ 231.394328][ T29] audit: type=1326 audit(231.341:16380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15050 comm="syz.5.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff67c41ebe9 code=0x7ffc0000 [ 231.417528][ T29] audit: type=1326 audit(231.351:16381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15050 comm="syz.5.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c41ebe9 code=0x7ffc0000 [ 231.440744][ T29] audit: type=1326 audit(231.351:16382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15050 comm="syz.5.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c41ebe9 code=0x7ffc0000 [ 231.464103][ T29] audit: type=1326 audit(231.351:16383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15050 comm="syz.5.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff67c41ebe9 code=0x7ffc0000 [ 231.487458][ T29] audit: type=1326 audit(231.351:16384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15050 comm="syz.5.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c41ebe9 code=0x7ffc0000 [ 231.510742][ T29] audit: type=1326 audit(231.351:16385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15050 comm="syz.5.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c41ebe9 code=0x7ffc0000 [ 231.534724][ T29] audit: type=1326 audit(231.351:16386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15050 comm="syz.5.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff67c41ebe9 code=0x7ffc0000 [ 231.558197][ T29] audit: type=1326 audit(231.351:16387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15050 comm="syz.5.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c41ebe9 code=0x7ffc0000 [ 231.581963][ T29] audit: type=1326 audit(231.351:16388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15050 comm="syz.5.4304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67c41ebe9 code=0x7ffc0000 [ 231.680079][T15064] __nla_validate_parse: 13 callbacks suppressed [ 231.680111][T15064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4310'. [ 231.719637][T15068] loop6: detected capacity change from 0 to 512 [ 231.741825][T15068] EXT4-fs: Ignoring removed nobh option [ 231.782171][T15068] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 231.815930][T15068] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #13: comm syz.6.4313: casefold flag without casefold feature [ 231.848569][T15068] EXT4-fs (loop6): Remounting filesystem read-only [ 231.866958][T15068] EXT4-fs mount: 6 callbacks suppressed [ 231.866978][T15068] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.944544][T15068] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.998949][T15079] loop6: detected capacity change from 0 to 1024 [ 232.015606][T15079] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 232.026076][T15079] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 232.087155][T15079] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 232.131361][T15079] EXT4-fs error (device loop6): ext4_get_journal_inode:5800: inode #5: comm syz.6.4315: unexpected bad inode w/o EXT4_IGET_BAD [ 232.157799][T15079] EXT4-fs (loop6): no journal found [ 232.163205][T15079] EXT4-fs (loop6): can't get journal size [ 232.195924][T15079] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 232.254258][T10118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.603586][T15103] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 232.825433][T15110] loop6: detected capacity change from 0 to 128 [ 232.963172][T15122] vxcan1 speed is unknown, defaulting to 1000 [ 232.970105][T15122] vxcan1 speed is unknown, defaulting to 1000 [ 232.977000][T15122] vxcan1 speed is unknown, defaulting to 1000 [ 232.983916][T15123] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4329'. [ 233.014958][T15122] infiniband syz2: set active [ 233.019848][T15122] infiniband syz2: added vxcan1 [ 233.024974][ T7387] vxcan1 speed is unknown, defaulting to 1000 [ 233.036685][T15122] RDS/IB: syz2: added [ 233.040802][T15122] smc: adding ib device syz2 with port count 1 [ 233.047093][T15122] smc: ib device syz2 port 1 has pnetid [ 233.053303][ T7387] vxcan1 speed is unknown, defaulting to 1000 [ 233.059968][T15122] vxcan1 speed is unknown, defaulting to 1000 [ 233.096080][T15122] vxcan1 speed is unknown, defaulting to 1000 [ 233.131051][T15122] vxcan1 speed is unknown, defaulting to 1000 [ 233.166992][T15122] vxcan1 speed is unknown, defaulting to 1000 [ 233.203729][T15122] vxcan1 speed is unknown, defaulting to 1000 [ 233.241513][T15122] vxcan1 speed is unknown, defaulting to 1000 [ 233.327883][T15131] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4332'. [ 233.674802][ T51] bio_check_eod: 13216 callbacks suppressed [ 233.674818][ T51] kworker/u8:3: attempt to access beyond end of device [ 233.674818][ T51] loop6: rw=1, sector=145, nr_sectors = 16 limit=128 [ 233.725288][ T51] kworker/u8:3: attempt to access beyond end of device [ 233.725288][ T51] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 233.756203][ T51] kworker/u8:3: attempt to access beyond end of device [ 233.756203][ T51] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 233.803011][ T51] kworker/u8:3: attempt to access beyond end of device [ 233.803011][ T51] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 233.833479][ T51] kworker/u8:3: attempt to access beyond end of device [ 233.833479][ T51] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 233.863087][ T51] kworker/u8:3: attempt to access beyond end of device [ 233.863087][ T51] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 233.893269][ T51] kworker/u8:3: attempt to access beyond end of device [ 233.893269][ T51] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 233.908857][T15156] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4343'. [ 233.916847][ T51] kworker/u8:3: attempt to access beyond end of device [ 233.916847][ T51] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 233.932171][ T51] kworker/u8:3: attempt to access beyond end of device [ 233.932171][ T51] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 233.960014][ T51] kworker/u8:3: attempt to access beyond end of device [ 233.960014][ T51] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 234.037210][T15169] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 234.093988][T15175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4351'. [ 234.201128][T15182] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4354'. [ 234.258625][T15189] program syz.1.4357 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.336242][T15203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4364'. [ 234.424125][T15208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4366'. [ 234.454512][T15212] loop5: detected capacity change from 0 to 128 [ 234.491701][T15214] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4369'. [ 234.551910][T15224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4372'. [ 234.677919][T15239] loop4: detected capacity change from 0 to 512 [ 234.697624][T15239] EXT4-fs: Ignoring removed nobh option [ 234.722872][T15239] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 234.756617][T15239] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #13: comm syz.4.4379: casefold flag without casefold feature [ 234.814705][T15236] lo speed is unknown, defaulting to 1000 [ 234.831416][T15236] vxcan1 speed is unknown, defaulting to 1000 [ 234.868881][T15239] EXT4-fs (loop4): Remounting filesystem read-only [ 234.918444][T15239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.977644][T15239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.502413][T15271] lo speed is unknown, defaulting to 1000 [ 235.514477][T15271] vxcan1 speed is unknown, defaulting to 1000 [ 236.353187][ T29] kauditd_printk_skb: 4514 callbacks suppressed [ 236.353211][ T29] audit: type=1326 audit(236.311:20903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.6.4374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1b69b3adb9 code=0x7ffc0000 [ 236.382775][ T29] audit: type=1326 audit(236.311:20904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.6.4374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1b69b95ba7 code=0x7ffc0000 [ 236.405997][ T29] audit: type=1326 audit(236.311:20905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.6.4374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1b69b3adb9 code=0x7ffc0000 [ 236.429535][ T29] audit: type=1326 audit(236.311:20906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.6.4374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1b69b95ba7 code=0x7ffc0000 [ 236.452674][ T29] audit: type=1326 audit(236.311:20907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.6.4374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1b69b3adb9 code=0x7ffc0000 [ 236.481452][ T29] audit: type=1326 audit(236.311:20908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.6.4374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1b69b95ba7 code=0x7ffc0000 [ 236.504620][ T29] audit: type=1326 audit(236.321:20909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.6.4374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1b69b3adb9 code=0x7ffc0000 [ 236.512169][T15315] lo speed is unknown, defaulting to 1000 [ 236.527906][ T29] audit: type=1326 audit(236.321:20910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.6.4374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1b69b95ba7 code=0x7ffc0000 [ 236.557217][ T29] audit: type=1326 audit(236.321:20911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.6.4374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1b69b3adb9 code=0x7ffc0000 [ 236.576052][T15315] vxcan1 speed is unknown, defaulting to 1000 [ 236.580983][ T29] audit: type=1326 audit(236.321:20912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.6.4374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1b69b95ba7 code=0x7ffc0000 [ 236.740320][T15341] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 236.775357][T15345] __nla_validate_parse: 5 callbacks suppressed [ 236.775379][T15345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4419'. [ 236.799502][T15347] loop5: detected capacity change from 0 to 512 [ 236.832517][T15347] EXT4-fs: Ignoring removed nobh option [ 236.863906][T15347] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 236.875624][T15347] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #13: comm syz.5.4420: casefold flag without casefold feature [ 236.888762][T15347] EXT4-fs (loop5): Remounting filesystem read-only [ 236.897549][T15347] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.924415][T15347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.984848][T15362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4426'. [ 237.337169][T15389] lo speed is unknown, defaulting to 1000 [ 237.347425][T15389] vxcan1 speed is unknown, defaulting to 1000 [ 237.905227][T15438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4457'. [ 238.098411][T15449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4462'. [ 238.127155][T15460] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4468'. [ 238.144223][T15464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.151707][T15464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.162841][T15464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.170556][T15464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.229601][T15474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4472'. [ 238.245948][T15472] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 238.368813][T15492] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma? [ 238.425981][T15500] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4484'. [ 238.443427][T15478] lo speed is unknown, defaulting to 1000 [ 238.453261][T15478] vxcan1 speed is unknown, defaulting to 1000 [ 238.540691][T15503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4485'. [ 238.559071][T15510] siw: device registration error -23 [ 238.703274][T15527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4492'. [ 238.787981][T15537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4496'. [ 239.379401][T15571] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 239.428029][T15576] loop6: detected capacity change from 0 to 512 [ 239.444153][T15576] EXT4-fs: Ignoring removed nobh option [ 239.456075][T15576] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 239.486375][T15576] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #13: comm syz.6.4512: casefold flag without casefold feature [ 239.512349][T15576] EXT4-fs (loop6): Remounting filesystem read-only [ 239.533604][T15595] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 239.540265][T15595] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 239.544753][T15576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.592202][T15576] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.604549][T15603] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 239.617781][T15602] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma? [ 239.642886][T15602] loop0: detected capacity change from 0 to 1024 [ 239.675452][T15602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.856913][T10781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.005074][T15663] loop5: detected capacity change from 0 to 512 [ 240.012516][T15663] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 240.044446][T15664] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 240.075458][T15671] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma? [ 240.162407][T15671] siw: device registration error -23 [ 240.188441][T15687] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 240.195247][T15687] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 240.681388][T15722] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma? [ 240.771843][T15730] loop5: detected capacity change from 0 to 128 [ 240.787665][T15736] siw: device registration error -23 [ 240.806527][T15730] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 240.814678][T15730] FAT-fs (loop5): Filesystem has been set read-only [ 240.830363][T15730] bio_check_eod: 101 callbacks suppressed [ 240.830385][T15730] syz.5.4575: attempt to access beyond end of device [ 240.830385][T15730] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 240.871737][T15730] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 240.880025][T15730] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 240.891192][T15744] syz.5.4575: attempt to access beyond end of device [ 240.891192][T15744] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 240.914380][T15730] syz.5.4575: attempt to access beyond end of device [ 240.914380][T15730] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 240.938128][T15744] syz.5.4575: attempt to access beyond end of device [ 240.938128][T15744] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 240.959910][T15730] syz.5.4575: attempt to access beyond end of device [ 240.959910][T15730] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 240.981129][T15730] syz.5.4575: attempt to access beyond end of device [ 240.981129][T15730] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 241.013420][T15730] syz.5.4575: attempt to access beyond end of device [ 241.013420][T15730] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 241.065161][T15730] syz.5.4575: attempt to access beyond end of device [ 241.065161][T15730] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 241.087234][T15730] syz.5.4575: attempt to access beyond end of device [ 241.087234][T15730] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 241.113381][T15730] syz.5.4575: attempt to access beyond end of device [ 241.113381][T15730] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 241.426091][T15771] RDS: rds_bind could not find a transport for fe88::107, load rds_tcp or rds_rdma? [ 241.441407][T15771] loop6: detected capacity change from 0 to 1024 [ 241.451460][ T29] kauditd_printk_skb: 2997 callbacks suppressed [ 241.451500][ T29] audit: type=1326 audit(241.411:23910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15772 comm="syz.4.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 241.489310][T15771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.526931][ T29] audit: type=1326 audit(241.411:23911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15772 comm="syz.4.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 241.550181][ T29] audit: type=1326 audit(241.411:23912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15772 comm="syz.4.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 241.573854][ T29] audit: type=1326 audit(241.411:23913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15772 comm="syz.4.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 241.576856][T15782] siw: device registration error -23 [ 241.597358][ T29] audit: type=1326 audit(241.411:23914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15772 comm="syz.4.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 241.626028][ T29] audit: type=1326 audit(241.411:23915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15772 comm="syz.4.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 241.649550][ T29] audit: type=1326 audit(241.411:23916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15772 comm="syz.4.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 241.673092][ T29] audit: type=1326 audit(241.411:23917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15772 comm="syz.4.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 241.696289][ T29] audit: type=1326 audit(241.411:23918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15772 comm="syz.4.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 241.719889][ T29] audit: type=1326 audit(241.411:23919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15772 comm="syz.4.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 241.965313][T10118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.054872][T15796] loop6: detected capacity change from 0 to 512 [ 242.075394][T15796] EXT4-fs: Ignoring removed nobh option [ 242.106005][T15796] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 242.123213][T15796] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #13: comm syz.6.4594: casefold flag without casefold feature [ 242.146153][T15796] EXT4-fs (loop6): Remounting filesystem read-only [ 242.164996][T15796] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.180009][T15796] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.198797][T15806] loop4: detected capacity change from 0 to 128 [ 242.220412][T15802] __nla_validate_parse: 9 callbacks suppressed [ 242.220431][T15802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4597'. [ 242.539374][T15839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.561312][T15839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.712094][T15856] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4619'. [ 242.972386][T15877] FAULT_INJECTION: forcing a failure. [ 242.972386][T15877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.985650][T15877] CPU: 1 UID: 0 PID: 15877 Comm: syz.4.4628 Not tainted syzkaller #0 PREEMPT(voluntary) [ 242.985681][T15877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 242.985752][T15877] Call Trace: [ 242.985776][T15877] [ 242.985786][T15877] __dump_stack+0x1d/0x30 [ 242.985813][T15877] dump_stack_lvl+0xe8/0x140 [ 242.985839][T15877] dump_stack+0x15/0x1b [ 242.985860][T15877] should_fail_ex+0x265/0x280 [ 242.985884][T15877] should_fail+0xb/0x20 [ 242.985923][T15877] should_fail_usercopy+0x1a/0x20 [ 242.985945][T15877] _copy_to_user+0x20/0xa0 [ 242.986020][T15877] do_pipe2+0x89/0x130 [ 242.986058][T15877] __x64_sys_pipe+0x21/0x30 [ 242.986155][T15877] x64_sys_call+0x353/0x2ff0 [ 242.986176][T15877] do_syscall_64+0xd2/0x200 [ 242.986278][T15877] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 242.986331][T15877] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 242.986443][T15877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.986471][T15877] RIP: 0033:0x7f66855febe9 [ 242.986491][T15877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.986590][T15877] RSP: 002b:00007f6684067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 242.986612][T15877] RAX: ffffffffffffffda RBX: 00007f6685835fa0 RCX: 00007f66855febe9 [ 242.986628][T15877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 242.986645][T15877] RBP: 00007f6684067090 R08: 0000000000000000 R09: 0000000000000000 [ 242.986661][T15877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 242.986677][T15877] R13: 00007f6685836038 R14: 00007f6685835fa0 R15: 00007fffbedb81b8 [ 242.986701][T15877] [ 243.207023][T15885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4632'. [ 243.511408][T15908] loop5: detected capacity change from 0 to 1024 [ 243.558454][T15908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.644551][T15908] siw: device registration error -23 [ 243.713743][T14497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.727011][T15930] loop0: detected capacity change from 0 to 128 [ 243.794786][T15939] FAULT_INJECTION: forcing a failure. [ 243.794786][T15939] name failslab, interval 1, probability 0, space 0, times 0 [ 243.807717][T15939] CPU: 0 UID: 0 PID: 15939 Comm: syz.0.4651 Not tainted syzkaller #0 PREEMPT(voluntary) [ 243.807795][T15939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 243.807820][T15939] Call Trace: [ 243.807826][T15939] [ 243.807836][T15939] __dump_stack+0x1d/0x30 [ 243.807863][T15939] dump_stack_lvl+0xe8/0x140 [ 243.807984][T15939] dump_stack+0x15/0x1b [ 243.808005][T15939] should_fail_ex+0x265/0x280 [ 243.808033][T15939] ? ftrace_profile_set_filter+0x96/0x1b0 [ 243.808065][T15939] should_failslab+0x8c/0xb0 [ 243.808098][T15939] __kmalloc_cache_noprof+0x4c/0x320 [ 243.808140][T15939] ftrace_profile_set_filter+0x96/0x1b0 [ 243.808160][T15939] perf_ioctl+0x7b3/0x12e0 [ 243.808197][T15939] ? ioctl_has_perm+0x289/0x2a0 [ 243.808265][T15939] ? do_vfs_ioctl+0x866/0xe10 [ 243.808288][T15939] ? selinux_file_ioctl+0x308/0x3a0 [ 243.808376][T15939] ? __fget_files+0x184/0x1c0 [ 243.808424][T15939] ? __pfx_perf_ioctl+0x10/0x10 [ 243.808531][T15939] __se_sys_ioctl+0xcb/0x140 [ 243.808554][T15939] __x64_sys_ioctl+0x43/0x50 [ 243.808573][T15939] x64_sys_call+0x1816/0x2ff0 [ 243.808599][T15939] do_syscall_64+0xd2/0x200 [ 243.808673][T15939] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 243.808697][T15939] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 243.808774][T15939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.808802][T15939] RIP: 0033:0x7f95b90eebe9 [ 243.808877][T15939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.808901][T15939] RSP: 002b:00007f95b7b57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.808993][T15939] RAX: ffffffffffffffda RBX: 00007f95b9325fa0 RCX: 00007f95b90eebe9 [ 243.809005][T15939] RDX: 00002000000001c0 RSI: 0000000040082406 RDI: 0000000000000003 [ 243.809020][T15939] RBP: 00007f95b7b57090 R08: 0000000000000000 R09: 0000000000000000 [ 243.809036][T15939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.809051][T15939] R13: 00007f95b9326038 R14: 00007f95b9325fa0 R15: 00007ffea5bd88d8 [ 243.809088][T15939] [ 244.131056][T15946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4654'. [ 244.417429][T15959] FAULT_INJECTION: forcing a failure. [ 244.417429][T15959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.430876][T15959] CPU: 1 UID: 0 PID: 15959 Comm: syz.1.4659 Not tainted syzkaller #0 PREEMPT(voluntary) [ 244.430983][T15959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 244.431003][T15959] Call Trace: [ 244.431010][T15959] [ 244.431018][T15959] __dump_stack+0x1d/0x30 [ 244.431082][T15959] dump_stack_lvl+0xe8/0x140 [ 244.431101][T15959] dump_stack+0x15/0x1b [ 244.431117][T15959] should_fail_ex+0x265/0x280 [ 244.431180][T15959] ? __pfx_ppp_ioctl+0x10/0x10 [ 244.431273][T15959] should_fail+0xb/0x20 [ 244.431343][T15959] should_fail_usercopy+0x1a/0x20 [ 244.431371][T15959] _copy_from_user+0x1c/0xb0 [ 244.431402][T15959] memdup_user+0x5e/0xd0 [ 244.431434][T15959] ppp_get_filter+0xdb/0x160 [ 244.431459][T15959] ppp_ioctl+0xb93/0x11c0 [ 244.431594][T15959] ? __fget_files+0x184/0x1c0 [ 244.431623][T15959] ? __pfx_ppp_ioctl+0x10/0x10 [ 244.431661][T15959] __se_sys_ioctl+0xcb/0x140 [ 244.431712][T15959] __x64_sys_ioctl+0x43/0x50 [ 244.431734][T15959] x64_sys_call+0x1816/0x2ff0 [ 244.431820][T15959] do_syscall_64+0xd2/0x200 [ 244.431874][T15959] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 244.431900][T15959] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 244.431935][T15959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.432007][T15959] RIP: 0033:0x7f1e0096ebe9 [ 244.432025][T15959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.432047][T15959] RSP: 002b:00007f1dff3cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.432197][T15959] RAX: ffffffffffffffda RBX: 00007f1e00ba5fa0 RCX: 00007f1e0096ebe9 [ 244.432213][T15959] RDX: 0000200000000180 RSI: 0000000040107447 RDI: 0000000000000003 [ 244.432229][T15959] RBP: 00007f1dff3cf090 R08: 0000000000000000 R09: 0000000000000000 [ 244.432244][T15959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.432260][T15959] R13: 00007f1e00ba6038 R14: 00007f1e00ba5fa0 R15: 00007ffe75381b18 [ 244.432286][T15959] [ 244.660611][T15963] loop0: detected capacity change from 0 to 128 [ 244.731999][T15967] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4663'. [ 244.806880][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4665'. [ 244.919832][T15992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4671'. [ 245.013181][T16001] loop4: detected capacity change from 0 to 128 [ 245.408312][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4680'. [ 245.431514][T16030] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 245.480804][T16032] loop6: detected capacity change from 0 to 128 [ 245.491680][T16014] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4679'. [ 245.499144][T16036] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma? [ 245.607398][T16044] siw: device registration error -23 [ 245.702482][T16047] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4690'. [ 245.808377][T16066] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 245.848565][T16070] loop5: detected capacity change from 0 to 128 [ 245.880107][T16074] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma? [ 245.980516][T16083] siw: device registration error -23 [ 246.314556][T16109] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 246.329808][T16109] loop4: detected capacity change from 0 to 1024 [ 246.349809][T16109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.455367][ T29] kauditd_printk_skb: 3935 callbacks suppressed [ 246.455386][ T29] audit: type=1326 audit(246.411:27855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16115 comm="syz.0.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f95b908adb9 code=0x7ffc0000 [ 246.504532][T16127] siw: device registration error -23 [ 246.571827][ T29] audit: type=1326 audit(246.461:27856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16115 comm="syz.0.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f95b90e5ba7 code=0x7ffc0000 [ 246.595604][ T29] audit: type=1326 audit(246.461:27857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16115 comm="syz.0.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f95b908adb9 code=0x7ffc0000 [ 246.618913][ T29] audit: type=1326 audit(246.461:27858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16115 comm="syz.0.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f95b90e5ba7 code=0x7ffc0000 [ 246.642365][ T29] audit: type=1326 audit(246.461:27859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16115 comm="syz.0.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f95b908adb9 code=0x7ffc0000 [ 246.665405][ T29] audit: type=1326 audit(246.461:27860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16115 comm="syz.0.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f95b90e5ba7 code=0x7ffc0000 [ 246.688632][ T29] audit: type=1326 audit(246.461:27861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16115 comm="syz.0.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f95b908adb9 code=0x7ffc0000 [ 246.711903][ T29] audit: type=1326 audit(246.461:27862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16115 comm="syz.0.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f95b90e5ba7 code=0x7ffc0000 [ 246.735133][ T29] audit: type=1326 audit(246.461:27863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16115 comm="syz.0.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f95b908adb9 code=0x7ffc0000 [ 246.758428][ T29] audit: type=1326 audit(246.461:27864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16115 comm="syz.0.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f95b90e5ba7 code=0x7ffc0000 [ 246.796660][T11184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.810488][T16135] team0 (unregistering): Port device team_slave_0 removed [ 246.825152][T16135] team0 (unregistering): Port device team_slave_1 removed [ 246.843853][ T7397] syz!: Port: 1 Link DOWN [ 246.909052][T16141] loop4: detected capacity change from 0 to 2048 [ 246.965980][T16141] EXT4-fs (loop4): failed to initialize system zone (-117) [ 247.013215][T16141] EXT4-fs (loop4): mount failed [ 247.148107][T16159] loop6: detected capacity change from 0 to 128 [ 247.173032][ T7387] IPVS: starting estimator thread 0... [ 247.208676][T16158] vlan2: left promiscuous mode [ 247.214136][T16158] bridge0: port 3(vlan2) entered disabled state [ 247.225098][T16162] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 247.254776][T16158] bridge_slave_1: left allmulticast mode [ 247.260548][T16158] bridge_slave_1: left promiscuous mode [ 247.266331][T16158] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.273279][T16160] IPVS: using max 2400 ests per chain, 120000 per kthread [ 247.288089][T16162] loop4: detected capacity change from 0 to 1024 [ 247.357046][T16158] bridge_slave_0: left promiscuous mode [ 247.362880][T16158] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.364124][T16162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.413412][T16170] __nla_validate_parse: 4 callbacks suppressed [ 247.413430][T16170] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4734'. [ 247.547066][T16163] siw: device registration error -23 [ 247.654711][T16182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=16182 comm=syz.6.4738 [ 247.679288][T11184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.725654][T16184] FAULT_INJECTION: forcing a failure. [ 247.725654][T16184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.738893][T16184] CPU: 0 UID: 0 PID: 16184 Comm: syz.1.4739 Not tainted syzkaller #0 PREEMPT(voluntary) [ 247.738966][T16184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.738984][T16184] Call Trace: [ 247.738994][T16184] [ 247.739038][T16184] __dump_stack+0x1d/0x30 [ 247.739067][T16184] dump_stack_lvl+0xe8/0x140 [ 247.739094][T16184] dump_stack+0x15/0x1b [ 247.739113][T16184] should_fail_ex+0x265/0x280 [ 247.739134][T16184] should_fail+0xb/0x20 [ 247.739151][T16184] should_fail_usercopy+0x1a/0x20 [ 247.739206][T16184] _copy_from_iter+0xd2/0xe80 [ 247.739240][T16184] ? __build_skb_around+0x1a0/0x200 [ 247.739268][T16184] ? __alloc_skb+0x223/0x320 [ 247.739298][T16184] netlink_sendmsg+0x471/0x6b0 [ 247.739334][T16184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.739397][T16184] __sock_sendmsg+0x145/0x180 [ 247.739429][T16184] __sys_sendto+0x268/0x330 [ 247.739470][T16184] __x64_sys_sendto+0x76/0x90 [ 247.739614][T16184] x64_sys_call+0x2d05/0x2ff0 [ 247.739643][T16184] do_syscall_64+0xd2/0x200 [ 247.739691][T16184] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 247.739724][T16184] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 247.739834][T16184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.739864][T16184] RIP: 0033:0x7f1e0096ebe9 [ 247.739885][T16184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.739918][T16184] RSP: 002b:00007f1dff3cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 247.739943][T16184] RAX: ffffffffffffffda RBX: 00007f1e00ba5fa0 RCX: 00007f1e0096ebe9 [ 247.739979][T16184] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 247.739992][T16184] RBP: 00007f1dff3cf090 R08: 0000000000000000 R09: 0000000000000000 [ 247.740043][T16184] R10: 00000000040040c4 R11: 0000000000000246 R12: 0000000000000001 [ 247.740062][T16184] R13: 00007f1e00ba6038 R14: 00007f1e00ba5fa0 R15: 00007ffe75381b18 [ 247.740089][T16184] [ 248.070713][T16198] FAULT_INJECTION: forcing a failure. [ 248.070713][T16198] name failslab, interval 1, probability 0, space 0, times 0 [ 248.083776][T16198] CPU: 0 UID: 0 PID: 16198 Comm: syz.0.4745 Not tainted syzkaller #0 PREEMPT(voluntary) [ 248.083901][T16198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 248.083918][T16198] Call Trace: [ 248.083927][T16198] [ 248.083938][T16198] __dump_stack+0x1d/0x30 [ 248.083967][T16198] dump_stack_lvl+0xe8/0x140 [ 248.083990][T16198] dump_stack+0x15/0x1b [ 248.084006][T16198] should_fail_ex+0x265/0x280 [ 248.084099][T16198] ? cma_alloc_port+0x3d/0x2f0 [ 248.084130][T16198] should_failslab+0x8c/0xb0 [ 248.084164][T16198] __kmalloc_cache_noprof+0x4c/0x320 [ 248.084208][T16198] cma_alloc_port+0x3d/0x2f0 [ 248.084312][T16198] rdma_bind_addr_dst+0xa7f/0x1cf0 [ 248.084349][T16198] ? mntput_no_expire+0x6f/0x460 [ 248.084402][T16198] rdma_resolve_addr+0x424/0x1340 [ 248.084534][T16198] ? _parse_integer_limit+0x170/0x190 [ 248.084637][T16198] ucma_resolve_ip+0x212/0x2e0 [ 248.084667][T16198] ucma_write+0x1b0/0x250 [ 248.084697][T16198] ? __pfx_ucma_write+0x10/0x10 [ 248.084727][T16198] vfs_write+0x269/0x960 [ 248.084810][T16198] ? __rcu_read_unlock+0x4f/0x70 [ 248.084839][T16198] ? __fget_files+0x184/0x1c0 [ 248.084874][T16198] ksys_write+0xda/0x1a0 [ 248.084966][T16198] __x64_sys_write+0x40/0x50 [ 248.084988][T16198] x64_sys_call+0x27fe/0x2ff0 [ 248.085069][T16198] do_syscall_64+0xd2/0x200 [ 248.085103][T16198] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 248.085126][T16198] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 248.085184][T16198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.085209][T16198] RIP: 0033:0x7f95b90eebe9 [ 248.085224][T16198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.085249][T16198] RSP: 002b:00007f95b7b57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 248.085322][T16198] RAX: ffffffffffffffda RBX: 00007f95b9325fa0 RCX: 00007f95b90eebe9 [ 248.085339][T16198] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000003 [ 248.085356][T16198] RBP: 00007f95b7b57090 R08: 0000000000000000 R09: 0000000000000000 [ 248.085373][T16198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.085389][T16198] R13: 00007f95b9326038 R14: 00007f95b9325fa0 R15: 00007ffea5bd88d8 [ 248.085483][T16198] [ 248.163236][T16201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4746'. [ 248.340326][T16196] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4741'. [ 248.593305][T16228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4757'. [ 248.717319][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4760'. [ 248.759115][T16231] lo speed is unknown, defaulting to 1000 [ 248.766416][T16231] vxcan1 speed is unknown, defaulting to 1000 [ 249.055703][T16261] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4770'. [ 249.642152][T16285] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 250.200932][T16308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4786'. [ 250.395325][ T7489] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.476821][ T7489] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.530763][ T7489] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.587596][ T7489] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.759057][T16337] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4796'. [ 250.995737][ T7489] bond0 (unregistering): Released all slaves [ 251.005304][ T7489] bond1 (unregistering): Released all slaves [ 251.015121][ T7489] bond2 (unregistering): Released all slaves [ 251.024327][ T7489] bond3 (unregistering): Released all slaves [ 251.033676][ T7489] bond4 (unregistering): Released all slaves [ 251.042555][ T7489] bond5 (unregistering): Released all slaves [ 251.054676][T16344] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 251.054835][ T7489] bond6 (unregistering): Released all slaves [ 251.081380][ T7489] bond7 (unregistering): Released all slaves [ 251.091157][ T7489] bond8 (unregistering): Released all slaves [ 251.099618][ T7489] bond9 (unregistering): Released all slaves [ 251.108310][ T7489] bond10 (unregistering): Released all slaves [ 251.118023][ T7489] bond11 (unregistering): Released all slaves [ 251.126978][ T7489] bond12 (unregistering): Released all slaves [ 251.135842][T16323] lo speed is unknown, defaulting to 1000 [ 251.143216][T16323] vxcan1 speed is unknown, defaulting to 1000 [ 251.207057][T16349] loop5: detected capacity change from 0 to 128 [ 251.226066][T16349] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 251.234101][T16349] FAT-fs (loop5): Filesystem has been set read-only [ 251.250967][T16349] bio_check_eod: 9207 callbacks suppressed [ 251.250982][T16349] syz.5.4799: attempt to access beyond end of device [ 251.250982][T16349] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 251.271258][T16349] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 251.279257][T16349] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 251.302295][T16358] syz.5.4799: attempt to access beyond end of device [ 251.302295][T16358] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 251.316055][T16349] syz.5.4799: attempt to access beyond end of device [ 251.316055][T16349] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 251.338858][T16349] syz.5.4799: attempt to access beyond end of device [ 251.338858][T16349] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 251.362890][T16358] syz.5.4799: attempt to access beyond end of device [ 251.362890][T16358] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 251.380380][T16349] syz.5.4799: attempt to access beyond end of device [ 251.380380][T16349] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 251.417929][T16349] syz.5.4799: attempt to access beyond end of device [ 251.417929][T16349] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 251.431711][T16349] syz.5.4799: attempt to access beyond end of device [ 251.431711][T16349] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 251.434879][T16357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4803'. [ 251.449688][T16349] syz.5.4799: attempt to access beyond end of device [ 251.449688][T16349] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 251.475328][ T7489] hsr_slave_0: left promiscuous mode [ 251.484901][ T7489] hsr_slave_1: left promiscuous mode [ 251.486663][T16349] syz.5.4799: attempt to access beyond end of device [ 251.486663][T16349] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 251.509335][ T7489] veth1_macvtap: left promiscuous mode [ 251.523597][ T7489] veth0_macvtap: left promiscuous mode [ 251.532375][ T7489] veth1_vlan: left promiscuous mode [ 251.540761][ T7489] veth0_vlan: left promiscuous mode [ 251.595388][T16377] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4809'. [ 251.679051][ T7489] team0 (unregistering): Port device team_slave_1 removed [ 251.702801][ T7489] team0 (unregistering): Port device team_slave_0 removed [ 251.841729][T16323] chnl_net:caif_netlink_parms(): no params data found [ 251.897458][ T29] kauditd_printk_skb: 4972 callbacks suppressed [ 251.897475][ T29] audit: type=1326 audit(251.861:32837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16383 comm="syz.4.4810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 251.926949][ T29] audit: type=1326 audit(251.861:32838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16383 comm="syz.4.4810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 252.007490][T16368] lo speed is unknown, defaulting to 1000 [ 252.056448][T16368] vxcan1 speed is unknown, defaulting to 1000 [ 252.065146][T16392] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 252.070430][ T29] audit: type=1326 audit(251.921:32839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16383 comm="syz.4.4810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 252.097695][ T29] audit: type=1326 audit(251.921:32840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16383 comm="syz.4.4810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 252.120790][ T29] audit: type=1326 audit(251.921:32841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16383 comm="syz.4.4810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 252.144206][ T29] audit: type=1326 audit(251.921:32842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16383 comm="syz.4.4810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 252.167613][ T29] audit: type=1326 audit(251.921:32843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16383 comm="syz.4.4810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 252.190786][ T29] audit: type=1326 audit(251.921:32844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16383 comm="syz.4.4810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 252.213909][ T29] audit: type=1326 audit(251.921:32845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16383 comm="syz.4.4810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 252.237075][ T29] audit: type=1326 audit(251.921:32846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16383 comm="syz.4.4810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 252.261224][T16393] loop4: detected capacity change from 0 to 1024 [ 252.274827][T16393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.320077][T16323] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.327267][T16323] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.336640][T16323] bridge_slave_0: entered allmulticast mode [ 252.343378][T16323] bridge_slave_0: entered promiscuous mode [ 252.353660][T16323] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.360805][T16323] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.377432][T16323] bridge_slave_1: entered allmulticast mode [ 252.393753][T16323] bridge_slave_1: entered promiscuous mode [ 252.400952][T16404] siw: device registration error -23 [ 252.444265][ T7489] IPVS: stop unused estimator thread 0... [ 252.452428][T16323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.493784][T16323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.564165][T11184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.576224][T16323] team0: Port device team_slave_0 added [ 252.586729][T16323] team0: Port device team_slave_1 added [ 252.605670][T16323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.612726][T16323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.638984][T16323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.651007][T16323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.658311][T16323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.684613][T16323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.718991][T16323] hsr_slave_0: entered promiscuous mode [ 252.725203][T16323] hsr_slave_1: entered promiscuous mode [ 252.731335][T16323] debugfs: 'hsr0' already exists in 'hsr' [ 252.737319][T16323] Cannot create hsr debugfs directory [ 252.813205][T16425] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4819'. [ 252.846324][T16427] loop0: detected capacity change from 0 to 128 [ 252.860119][T16427] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 252.868035][T16427] FAT-fs (loop0): Filesystem has been set read-only [ 252.875494][T16427] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 252.883375][T16427] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 252.887648][T16323] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 252.915550][T16429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4820'. [ 252.951508][T16323] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 253.000001][T16323] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 253.028667][T16323] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 253.139633][T16323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.184612][T16323] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.219326][T12811] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.226502][T12811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.260698][T12827] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.267942][T12827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.328390][T16452] RDS: rds_bind could not find a transport for fe88::106, load rds_tcp or rds_rdma? [ 253.379965][T16452] loop5: detected capacity change from 0 to 1024 [ 253.416546][T16452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.521757][T16462] siw: device registration error -23 [ 253.546918][T16323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.735933][T14497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.758910][T16471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4828'. [ 254.023081][T16323] veth0_vlan: entered promiscuous mode [ 254.042768][T16478] lo speed is unknown, defaulting to 1000 [ 254.057759][T16493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4831'. [ 254.072971][T16323] veth1_vlan: entered promiscuous mode [ 254.099071][T16478] vxcan1 speed is unknown, defaulting to 1000 [ 254.157670][T16323] veth0_macvtap: entered promiscuous mode [ 254.182688][T16323] veth1_macvtap: entered promiscuous mode [ 254.246881][T16323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.280661][T16323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.317752][ T7489] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.340178][ T7489] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.345145][T16505] 9pnet_fd: Insufficient options for proto=fd [ 254.353479][T16497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4832'. [ 254.382210][ T7489] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.404419][ T7489] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.514322][T16516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4838'. [ 254.526023][T16515] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 254.541888][T16515] loop4: detected capacity change from 0 to 1024 [ 254.587407][T16515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.673590][T16532] siw: device registration error -23 [ 254.721502][T16533] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4842'. [ 254.861652][T11184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.926165][T16549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.934012][T16549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.950104][T16551] 9pnet_fd: Insufficient options for proto=fd [ 254.957950][T16540] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4843'. [ 254.987651][T16549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.995531][T16549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.165655][T16570] RDS: rds_bind could not find a transport for fe88::106, load rds_tcp or rds_rdma? [ 255.181825][T16570] loop5: detected capacity change from 0 to 1024 [ 255.191196][T16562] lo speed is unknown, defaulting to 1000 [ 255.200221][T16562] vxcan1 speed is unknown, defaulting to 1000 [ 255.213387][T16570] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.299248][T16569] lo speed is unknown, defaulting to 1000 [ 255.305755][T16569] vxcan1 speed is unknown, defaulting to 1000 [ 255.339518][T16582] siw: device registration error -23 [ 255.385909][T14497] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.427485][T16587] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4857'. [ 255.822767][T16617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4870'. [ 255.935388][T16626] IPv6: NLM_F_CREATE should be specified when creating new route [ 256.125121][T16646] FAULT_INJECTION: forcing a failure. [ 256.125121][T16646] name failslab, interval 1, probability 0, space 0, times 0 [ 256.138116][T16646] CPU: 1 UID: 0 PID: 16646 Comm: syz.4.4882 Not tainted syzkaller #0 PREEMPT(voluntary) [ 256.138143][T16646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 256.138154][T16646] Call Trace: [ 256.138160][T16646] [ 256.138166][T16646] __dump_stack+0x1d/0x30 [ 256.138231][T16646] dump_stack_lvl+0xe8/0x140 [ 256.138249][T16646] dump_stack+0x15/0x1b [ 256.138263][T16646] should_fail_ex+0x265/0x280 [ 256.138283][T16646] should_failslab+0x8c/0xb0 [ 256.138382][T16646] kmem_cache_alloc_noprof+0x50/0x310 [ 256.138406][T16646] ? radix_tree_node_alloc+0x8a/0x1f0 [ 256.138493][T16646] radix_tree_node_alloc+0x8a/0x1f0 [ 256.138519][T16646] radix_tree_extend+0xcf/0x370 [ 256.138554][T16646] idr_get_free+0x12d/0x550 [ 256.138580][T16646] idr_alloc_u32+0xca/0x180 [ 256.138663][T16646] tcf_idr_check_alloc+0x193/0x240 [ 256.138690][T16646] tcf_police_init+0x1ca/0xc70 [ 256.138730][T16646] tcf_action_init_1+0x36a/0x4a0 [ 256.138765][T16646] tcf_action_init+0x267/0x6d0 [ 256.138792][T16646] ? __rcu_read_unlock+0x34/0x70 [ 256.138840][T16646] tc_ctl_action+0x291/0x830 [ 256.138888][T16646] ? __pfx_tc_ctl_action+0x10/0x10 [ 256.138914][T16646] rtnetlink_rcv_msg+0x657/0x6d0 [ 256.138945][T16646] netlink_rcv_skb+0x120/0x220 [ 256.139043][T16646] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 256.139077][T16646] rtnetlink_rcv+0x1c/0x30 [ 256.139101][T16646] netlink_unicast+0x5c0/0x690 [ 256.139122][T16646] netlink_sendmsg+0x58b/0x6b0 [ 256.139182][T16646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.139213][T16646] __sock_sendmsg+0x145/0x180 [ 256.139241][T16646] ____sys_sendmsg+0x31e/0x4e0 [ 256.139267][T16646] ___sys_sendmsg+0x17b/0x1d0 [ 256.139382][T16646] __x64_sys_sendmsg+0xd4/0x160 [ 256.139409][T16646] x64_sys_call+0x191e/0x2ff0 [ 256.139505][T16646] do_syscall_64+0xd2/0x200 [ 256.139577][T16646] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 256.139626][T16646] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 256.139651][T16646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.139670][T16646] RIP: 0033:0x7f66855febe9 [ 256.139684][T16646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.139700][T16646] RSP: 002b:00007f6684067038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.139767][T16646] RAX: ffffffffffffffda RBX: 00007f6685835fa0 RCX: 00007f66855febe9 [ 256.139778][T16646] RDX: 00000000000000c0 RSI: 00002000000037c0 RDI: 0000000000000006 [ 256.139789][T16646] RBP: 00007f6684067090 R08: 0000000000000000 R09: 0000000000000000 [ 256.139800][T16646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.139811][T16646] R13: 00007f6685836038 R14: 00007f6685835fa0 R15: 00007fffbedb81b8 [ 256.139830][T16646] [ 256.477678][T16654] 9pnet_fd: Insufficient options for proto=fd [ 256.625387][T16678] syzkaller0: entered allmulticast mode [ 256.634887][T16663] lo speed is unknown, defaulting to 1000 [ 256.641498][T16678] syzkaller0: entered promiscuous mode [ 256.648254][T16663] vxcan1 speed is unknown, defaulting to 1000 [ 256.684777][T16676] syzkaller0: left promiscuous mode [ 256.690142][T16676] syzkaller0: left allmulticast mode [ 256.800789][T16698] loop4: detected capacity change from 0 to 128 [ 257.741003][T16760] loop7: detected capacity change from 0 to 128 [ 257.843899][T16769] siw: device registration error -23 [ 257.863105][T16770] __nla_validate_parse: 13 callbacks suppressed [ 257.863128][T16770] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4922'. [ 258.202468][T16793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4932'. [ 258.277600][T16796] loop4: detected capacity change from 0 to 128 [ 258.332950][T16800] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 258.347722][T16800] loop4: detected capacity change from 0 to 1024 [ 258.366189][T16800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.410488][T16800] siw: device registration error -23 [ 258.445354][T11184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.526158][T16818] loop0: detected capacity change from 0 to 128 [ 258.535593][T16818] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 258.543627][T16818] FAT-fs (loop0): Filesystem has been set read-only [ 258.547991][T16819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4936'. [ 258.550369][T16818] bio_check_eod: 24017 callbacks suppressed [ 258.550385][T16818] syz.0.4940: attempt to access beyond end of device [ 258.550385][T16818] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 258.580743][T16818] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 258.588870][T16818] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 258.603948][T16820] syz.0.4940: attempt to access beyond end of device [ 258.603948][T16820] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 258.620346][T16818] syz.0.4940: attempt to access beyond end of device [ 258.620346][T16818] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 258.634819][T16820] syz.0.4940: attempt to access beyond end of device [ 258.634819][T16820] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 258.651571][T16818] syz.0.4940: attempt to access beyond end of device [ 258.651571][T16818] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 258.666937][T16818] syz.0.4940: attempt to access beyond end of device [ 258.666937][T16818] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 258.681282][T16818] syz.0.4940: attempt to access beyond end of device [ 258.681282][T16818] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 258.696979][T16818] syz.0.4940: attempt to access beyond end of device [ 258.696979][T16818] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 258.710934][T16818] syz.0.4940: attempt to access beyond end of device [ 258.710934][T16818] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 258.724671][T16818] syz.0.4940: attempt to access beyond end of device [ 258.724671][T16818] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 258.774217][T16828] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4943'. [ 258.910233][T16835] RDS: rds_bind could not find a transport for fe88::107, load rds_tcp or rds_rdma? [ 258.958799][T16835] loop6: detected capacity change from 0 to 1024 [ 258.999211][T16835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.137110][T16842] siw: device registration error -23 [ 259.362844][T10118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.786419][T16873] loop0: detected capacity change from 0 to 512 [ 259.793205][T16873] EXT4-fs: Ignoring removed nobh option [ 259.800262][T16873] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 259.808848][T16873] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #13: comm syz.0.4959: casefold flag without casefold feature [ 259.822142][T16873] EXT4-fs (loop0): Remounting filesystem read-only [ 259.829157][T16873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.842553][T16873] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.890903][T16879] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma? [ 259.916471][T16879] loop0: detected capacity change from 0 to 1024 [ 259.938570][T16879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.018097][T10781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.030185][T16896] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 260.050141][T16898] loop0: detected capacity change from 0 to 128 [ 260.060458][T16898] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 260.068577][T16898] FAT-fs (loop0): Filesystem has been set read-only [ 260.076941][T16898] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 260.085299][T16898] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 260.319829][T16915] loop6: detected capacity change from 0 to 128 [ 260.404989][T16919] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 260.426654][T16919] loop4: detected capacity change from 0 to 1024 [ 260.450807][T16919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.507498][T16919] siw: device registration error -23 [ 260.544609][T11184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.591879][T16931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4980'. [ 260.632850][T16935] loop6: detected capacity change from 0 to 512 [ 260.642666][T16935] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 260.659205][T16935] EXT4-fs (loop6): 1 truncate cleaned up [ 260.665919][T16935] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.685669][ T29] kauditd_printk_skb: 1482 callbacks suppressed [ 260.685686][ T29] audit: type=1400 audit(260.641:34329): avc: denied { create } for pid=16936 comm="syz.4.4982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 260.711878][ T29] audit: type=1400 audit(260.651:34330): avc: denied { sys_admin } for pid=16936 comm="syz.4.4982" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 260.758100][T16937] lo speed is unknown, defaulting to 1000 [ 260.764594][T16937] vxcan1 speed is unknown, defaulting to 1000 [ 260.779500][T10118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.892070][T16947] loop6: detected capacity change from 0 to 512 [ 260.906600][T16947] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 260.914930][T16947] EXT4-fs (loop6): orphan cleanup on readonly fs [ 260.923564][T16947] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.4983: corrupted inode contents [ 260.936263][T16947] EXT4-fs (loop6): Remounting filesystem read-only [ 260.943597][T16947] EXT4-fs (loop6): 1 truncate cleaned up [ 260.949481][T12827] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 260.960674][T12827] Quota error (device loop6): write_blk: dquota write failed [ 260.968196][T12827] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 260.978385][T12827] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 260.989028][T12827] Quota error (device loop6): write_blk: dquota write failed [ 260.996632][T12827] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 261.006949][T12827] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 261.017230][T12827] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 261.029306][T12827] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 261.041301][T16947] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 261.065511][ T29] audit: type=1400 audit(261.031:34331): avc: denied { write } for pid=16951 comm="syz.7.4986" path="socket:[56151]" dev="sockfs" ino=56151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 261.202244][T16953] Falling back ldisc for ttyS3. [ 261.662046][T10118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.684562][T16972] loop6: detected capacity change from 0 to 512 [ 261.692601][T16972] EXT4-fs (loop6): failed to initialize system zone (-117) [ 261.700269][T16972] EXT4-fs (loop6): mount failed [ 261.725466][T16975] loop4: detected capacity change from 0 to 512 [ 261.732185][T16975] EXT4-fs: Ignoring removed nobh option [ 261.739689][T16975] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 261.748966][T16975] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #13: comm syz.4.4995: casefold flag without casefold feature [ 261.762165][T16975] EXT4-fs (loop4): Remounting filesystem read-only [ 261.770854][T16975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.785317][T16975] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.838191][T16987] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4996'. [ 261.934443][T16990] lo speed is unknown, defaulting to 1000 [ 261.940827][T16990] vxcan1 speed is unknown, defaulting to 1000 [ 261.971174][T16993] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5001'. [ 262.073662][T17001] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5002'. [ 262.578443][ T29] audit: type=1326 audit(262.541:34332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17028 comm="syz.0.5011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b90eebe9 code=0x7ffc0000 [ 262.606237][T17023] SELinux: failed to load policy [ 262.611525][T17023] FAULT_INJECTION: forcing a failure. [ 262.611525][T17023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.624730][T17023] CPU: 1 UID: 0 PID: 17023 Comm: syz.7.5009 Not tainted syzkaller #0 PREEMPT(voluntary) [ 262.624760][T17023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.624774][T17023] Call Trace: [ 262.624780][T17023] [ 262.624787][T17023] __dump_stack+0x1d/0x30 [ 262.624832][T17023] dump_stack_lvl+0xe8/0x140 [ 262.624912][T17023] dump_stack+0x15/0x1b [ 262.624927][T17023] should_fail_ex+0x265/0x280 [ 262.624947][T17023] should_fail+0xb/0x20 [ 262.625000][T17023] should_fail_usercopy+0x1a/0x20 [ 262.625063][T17023] _copy_from_user+0x1c/0xb0 [ 262.625153][T17023] ___bpf_copy_key+0xa5/0x110 [ 262.625183][T17023] map_delete_elem+0x115/0x2b0 [ 262.625209][T17023] __sys_bpf+0x40c/0x7b0 [ 262.625247][T17023] __x64_sys_bpf+0x41/0x50 [ 262.625287][T17023] x64_sys_call+0x2aea/0x2ff0 [ 262.625391][T17023] do_syscall_64+0xd2/0x200 [ 262.625425][T17023] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 262.625449][T17023] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 262.625481][T17023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.625537][T17023] RIP: 0033:0x7f728ea2ebe9 [ 262.625556][T17023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.625576][T17023] RSP: 002b:00007f728d497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 262.625599][T17023] RAX: ffffffffffffffda RBX: 00007f728ec65fa0 RCX: 00007f728ea2ebe9 [ 262.625640][T17023] RDX: 0000000000000020 RSI: 00002000000007c0 RDI: 0000000000000003 [ 262.625654][T17023] RBP: 00007f728d497090 R08: 0000000000000000 R09: 0000000000000000 [ 262.625670][T17023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.625685][T17023] R13: 00007f728ec66038 R14: 00007f728ec65fa0 R15: 00007ffc6864ace8 [ 262.625790][T17023] [ 262.724062][T17038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5012'. [ 262.842011][T17041] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 262.857763][T17041] loop4: detected capacity change from 0 to 1024 [ 262.875234][T17041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.894185][T17045] FAULT_INJECTION: forcing a failure. [ 262.894185][T17045] name failslab, interval 1, probability 0, space 0, times 0 [ 262.906961][T17045] CPU: 0 UID: 0 PID: 17045 Comm: syz.0.5016 Not tainted syzkaller #0 PREEMPT(voluntary) [ 262.907022][T17045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.907039][T17045] Call Trace: [ 262.907047][T17045] [ 262.907055][T17045] __dump_stack+0x1d/0x30 [ 262.907077][T17045] dump_stack_lvl+0xe8/0x140 [ 262.907127][T17045] dump_stack+0x15/0x1b [ 262.907145][T17045] should_fail_ex+0x265/0x280 [ 262.907174][T17045] should_failslab+0x8c/0xb0 [ 262.907293][T17045] kmem_cache_alloc_node_noprof+0x57/0x320 [ 262.907407][T17045] ? __alloc_skb+0x101/0x320 [ 262.907433][T17045] __alloc_skb+0x101/0x320 [ 262.907460][T17045] netlink_alloc_large_skb+0xba/0xf0 [ 262.907499][T17045] netlink_sendmsg+0x3cf/0x6b0 [ 262.907601][T17045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.907631][T17045] __sock_sendmsg+0x145/0x180 [ 262.907694][T17045] ____sys_sendmsg+0x31e/0x4e0 [ 262.907733][T17045] ___sys_sendmsg+0x17b/0x1d0 [ 262.907785][T17045] __x64_sys_sendmsg+0xd4/0x160 [ 262.907819][T17045] x64_sys_call+0x191e/0x2ff0 [ 262.907843][T17045] do_syscall_64+0xd2/0x200 [ 262.907901][T17045] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 262.908005][T17045] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 262.908032][T17045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.908108][T17045] RIP: 0033:0x7f95b90eebe9 [ 262.908127][T17045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.908149][T17045] RSP: 002b:00007f95b7b57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.908172][T17045] RAX: ffffffffffffffda RBX: 00007f95b9325fa0 RCX: 00007f95b90eebe9 [ 262.908188][T17045] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 262.908260][T17045] RBP: 00007f95b7b57090 R08: 0000000000000000 R09: 0000000000000000 [ 262.908272][T17045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.908283][T17045] R13: 00007f95b9326038 R14: 00007f95b9325fa0 R15: 00007ffea5bd88d8 [ 262.908303][T17045] [ 263.122052][T17048] siw: device registration error -23 [ 263.183569][T17050] bridge_slave_0: left allmulticast mode [ 263.189335][T17050] bridge_slave_0: left promiscuous mode [ 263.195503][T17050] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.215088][T17058] netlink: 'syz.7.5018': attribute type 10 has an invalid length. [ 263.223052][T17058] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5018'. [ 263.238405][T17050] bridge_slave_1: left allmulticast mode [ 263.244274][T17050] bridge_slave_1: left promiscuous mode [ 263.250185][T17050] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.282377][T17050] bond0: (slave bond_slave_0): Releasing backup interface [ 263.298651][T11184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.309451][T17050] bond0: (slave bond_slave_1): Releasing backup interface [ 263.327230][T17050] team0: Port device team_slave_0 removed [ 263.339749][T17050] team0: Port device team_slave_1 removed [ 263.375276][T17058] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 263.720609][T17088] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 263.789166][T17095] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5036'. [ 263.822868][T17099] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 263.930377][T17108] ALSA: seq fatal error: cannot create timer (-22) [ 263.938734][T17109] loop7: detected capacity change from 0 to 512 [ 263.945756][T17109] ext4: Unknown parameter 'discard"' [ 263.998851][T17113] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5043'. [ 264.027915][T17115] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5044'. [ 264.091497][T17121] RDS: rds_bind could not find a transport for fe88::108, load rds_tcp or rds_rdma? [ 264.106418][T17121] loop7: detected capacity change from 0 to 1024 [ 264.126362][T17121] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.178453][T17121] siw: device registration error -23 [ 264.187821][T17128] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 264.226185][T16323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.313516][T17139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5049'. [ 264.425843][T17144] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5053'. [ 264.519271][T17147] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5054'. [ 264.527679][T17149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5055'. [ 264.598878][T17155] IPv6: NLM_F_CREATE should be specified when creating new route [ 264.619490][T17159] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 264.644825][T17162] loop0: detected capacity change from 0 to 1024 [ 264.652613][T17158] loop7: detected capacity change from 0 to 1024 [ 264.666766][T17158] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 264.677694][T17166] FAULT_INJECTION: forcing a failure. [ 264.677694][T17166] name failslab, interval 1, probability 0, space 0, times 0 [ 264.692425][T17166] CPU: 0 UID: 0 PID: 17166 Comm: syz.4.5062 Not tainted syzkaller #0 PREEMPT(voluntary) [ 264.692501][T17166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 264.692579][T17166] Call Trace: [ 264.692588][T17166] [ 264.692598][T17166] __dump_stack+0x1d/0x30 [ 264.692625][T17166] dump_stack_lvl+0xe8/0x140 [ 264.692702][T17166] dump_stack+0x15/0x1b [ 264.692724][T17166] should_fail_ex+0x265/0x280 [ 264.692753][T17166] should_failslab+0x8c/0xb0 [ 264.692785][T17166] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 264.692825][T17166] ? snd_timer_instance_new+0x31/0x160 [ 264.692888][T17166] ? snd_timer_instance_new+0x4a/0x160 [ 264.692928][T17166] ? should_failslab+0x8c/0xb0 [ 264.693009][T17166] kstrdup+0x3e/0xd0 [ 264.693043][T17166] snd_timer_instance_new+0x4a/0x160 [ 264.693075][T17166] snd_seq_timer_open+0x12b/0x360 [ 264.693100][T17166] ? kfree+0x193/0x320 [ 264.693154][T17166] snd_seq_queue_timer_open+0xaf/0x120 [ 264.693186][T17166] snd_seq_ioctl_set_queue_timer+0x14b/0x170 [ 264.693243][T17166] snd_seq_ioctl+0x17d/0x2e0 [ 264.693289][T17166] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 264.693391][T17166] __se_sys_ioctl+0xcb/0x140 [ 264.693416][T17166] __x64_sys_ioctl+0x43/0x50 [ 264.693515][T17166] x64_sys_call+0x1816/0x2ff0 [ 264.693542][T17166] do_syscall_64+0xd2/0x200 [ 264.693579][T17166] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 264.693609][T17166] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 264.693755][T17166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.693780][T17166] RIP: 0033:0x7f66855febe9 [ 264.693811][T17166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.693832][T17166] RSP: 002b:00007f6684067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.693857][T17166] RAX: ffffffffffffffda RBX: 00007f6685835fa0 RCX: 00007f66855febe9 [ 264.693873][T17166] RDX: 0000200000000280 RSI: 0000000040605346 RDI: 0000000000000006 [ 264.693890][T17166] RBP: 00007f6684067090 R08: 0000000000000000 R09: 0000000000000000 [ 264.693907][T17166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.693922][T17166] R13: 00007f6685836038 R14: 00007f6685835fa0 R15: 00007fffbedb81b8 [ 264.693969][T17166] [ 264.938709][T16323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 265.056856][T17179] random: crng reseeded on system resumption [ 265.066125][T17180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5066'. [ 265.109150][T17183] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5068'. [ 265.144912][T17186] loop0: detected capacity change from 0 to 128 [ 265.155596][T17181] Falling back ldisc for ttyS3. [ 265.170720][T17186] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 265.178978][T17186] FAT-fs (loop0): Filesystem has been set read-only [ 265.187558][T17186] bio_check_eod: 27890 callbacks suppressed [ 265.187578][T17186] syz.0.5069: attempt to access beyond end of device [ 265.187578][T17186] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 265.208028][T17186] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 265.216059][T17186] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 265.231699][T17190] loop4: detected capacity change from 0 to 1024 [ 265.233667][T17191] syz.0.5069: attempt to access beyond end of device [ 265.233667][T17191] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 265.238727][T17190] EXT4-fs: Ignoring removed orlov option [ 265.259809][T17190] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 265.260829][T17186] syz.0.5069: attempt to access beyond end of device [ 265.260829][T17186] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 265.276647][T17193] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 265.283677][T17191] syz.0.5069: attempt to access beyond end of device [ 265.283677][T17191] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 265.306115][T17186] syz.0.5069: attempt to access beyond end of device [ 265.306115][T17186] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 265.320664][T17186] syz.0.5069: attempt to access beyond end of device [ 265.320664][T17186] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 265.334811][T17186] syz.0.5069: attempt to access beyond end of device [ 265.334811][T17186] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 265.348974][T17186] syz.0.5069: attempt to access beyond end of device [ 265.348974][T17186] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 265.349442][T17190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.362784][T17186] syz.0.5069: attempt to access beyond end of device [ 265.362784][T17186] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 265.391405][T17186] syz.0.5069: attempt to access beyond end of device [ 265.391405][T17186] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 265.420656][T17190] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm : missing EA_INODE flag [ 265.432224][T17190] EXT4-fs (loop4): Remounting filesystem read-only [ 265.439090][T17190] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 265.550557][T11184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.153878][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 266.153895][ T29] audit: type=1326 audit(266.121:34409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17210 comm="syz.4.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 266.204169][ T29] audit: type=1326 audit(266.151:34410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17210 comm="syz.4.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66855fd550 code=0x7ffc0000 [ 266.227757][ T29] audit: type=1326 audit(266.151:34411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17210 comm="syz.4.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66855fd550 code=0x7ffc0000 [ 266.251381][ T29] audit: type=1326 audit(266.151:34412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17210 comm="syz.4.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 266.274915][ T29] audit: type=1326 audit(266.151:34413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17210 comm="syz.4.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 266.298043][ T29] audit: type=1326 audit(266.151:34414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17210 comm="syz.4.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 266.320914][ T29] audit: type=1326 audit(266.151:34415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17210 comm="syz.4.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 266.343981][ T29] audit: type=1326 audit(266.151:34416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17210 comm="syz.4.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66855febe9 code=0x7ffc0000 [ 266.492220][T17221] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 266.513385][T17221] loop4: detected capacity change from 0 to 1024 [ 266.534709][T17221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.565926][T17233] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 266.590651][T17221] siw: device registration error -23 [ 266.625131][T11184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.648249][T17238] loop0: detected capacity change from 0 to 512 [ 266.656615][T17238] EXT4-fs (loop0): orphan cleanup on readonly fs [ 266.660871][ T29] audit: type=1400 audit(266.621:34417): avc: denied { create } for pid=17239 comm="syz.4.5088" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=icmp_socket permissive=1 [ 266.683964][T17238] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.5087: bad orphan inode 13 [ 266.695752][T17238] ext4_test_bit(bit=12, block=18) = 1 [ 266.701371][T17238] is_bad_inode(inode)=0 [ 266.705757][T17238] NEXT_ORPHAN(inode)=2130706432 [ 266.710747][T17238] max_ino=32 [ 266.714136][T17238] i_nlink=1 [ 266.717900][T17238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 266.735173][T17238] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 266.758181][T17238] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 266.800830][T17246] loop6: detected capacity change from 0 to 2048 [ 266.810819][T10781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.859355][T17246] loop6: p2 p3 p7 [ 266.888054][T17246] ipvlan2: entered promiscuous mode [ 266.895240][T17246] bridge0: port 3(ipvlan2) entered blocking state [ 266.901829][T17246] bridge0: port 3(ipvlan2) entered disabled state [ 266.908749][T17246] ipvlan2: entered allmulticast mode [ 266.914157][T17246] bridge0: entered allmulticast mode [ 266.942851][T17246] ipvlan2: left allmulticast mode [ 266.948200][T17246] bridge0: left allmulticast mode [ 266.953072][ T29] audit: type=1400 audit(266.911:34418): avc: denied { cmd } for pid=17245 comm="syz.6.5089" path="socket:[58587]" dev="sockfs" ino=58587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 267.037487][T17252] loop0: detected capacity change from 0 to 128 [ 267.048519][T17252] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 267.056654][T17252] FAT-fs (loop0): Filesystem has been set read-only [ 267.063637][T17252] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 267.071620][T17252] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 267.488088][T17271] loop7: detected capacity change from 0 to 512 [ 267.497276][T17271] EXT4-fs: Ignoring removed nobh option [ 267.504584][T17271] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 267.513701][T17271] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #13: comm syz.7.5098: casefold flag without casefold feature [ 267.526895][T17271] EXT4-fs (loop7): Remounting filesystem read-only [ 267.534379][T17271] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.547939][T17271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.257726][T17287] __nla_validate_parse: 3 callbacks suppressed [ 268.257741][T17287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5103'. [ 268.353715][T17289] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5104'. [ 268.465626][ T7489] failed while handling packet from 1:16385 [ 268.465716][ T7489] failed while handling packet from 1:16385 [ 268.492235][ T7489] failed while handling packet from 1:16385 [ 268.500913][ T7489] failed while handling packet from 1:16385 [ 268.507623][ T7489] failed while handling packet from 1:16385 [ 268.514920][ T7489] failed while handling packet from 1:16385 [ 268.521051][ T7489] failed while handling packet from 1:16385 [ 268.527901][ T7489] failed while handling packet from 1:16385 [ 268.534313][ T7489] failed while handling packet from 1:16385 [ 268.540274][ T7489] failed while handling packet from 1:16385 [ 268.546337][ T7489] failed while handling packet from 1:16385 [ 268.552307][ T7489] failed while handling packet from 1:16385 [ 268.576586][ T7489] failed while handling packet from 1:16385 [ 268.582627][ T7489] failed while handling packet from 1:16385 [ 268.588566][ T7489] failed while handling packet from 1:16385 [ 268.596078][ T7489] failed while handling packet from 1:16385 [ 268.602592][ T7489] failed while handling packet from 1:16385 [ 268.613718][ T7489] failed while handling packet from 1:16385 [ 268.626538][T17293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5106'. [ 269.248204][T17327] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5116'. [ 269.407684][ T7489] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.446478][ T7489] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.495992][ T7489] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.547679][ T7489] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.615441][ T7489] bridge_slave_1: left allmulticast mode [ 269.621170][ T7489] bridge_slave_1: left promiscuous mode [ 269.627055][ T7489] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.636207][ T7489] bridge_slave_0: left allmulticast mode [ 269.641966][ T7489] bridge_slave_0: left promiscuous mode [ 269.647897][ T7489] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.659802][ T7489] tipc: Resetting bearer [ 269.765335][T17359] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma? [ 269.777452][ T7489] tipc: Disabling bearer [ 269.831537][T17360] loop0: detected capacity change from 0 to 1024 [ 269.845741][T17360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.067201][ T7489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.077415][ T7489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.087689][ T7489] bond0 (unregistering): Released all slaves [ 270.097444][ T7489] bond1 (unregistering): Released all slaves [ 270.106348][ T7489] bond2 (unregistering): Released all slaves [ 270.115346][ T7489] bond3 (unregistering): Released all slaves [ 270.124430][ T7489] bond4 (unregistering): Released all slaves [ 270.133222][ T7489] bond5 (unregistering): Released all slaves [ 270.141781][ T7489] bond6 (unregistering): Released all slaves [ 270.159815][ T7489] bond7 (unregistering): (slave veth3): Releasing active interface [ 270.167819][ T7489] vlan2: entered promiscuous mode [ 270.175593][ T7489] bond7 (unregistering): (slave vlan2): Releasing active interface [ 270.185238][ T7489] bond7 (unregistering): Released all slaves [ 270.195860][ T7489] bond8 (unregistering): Released all slaves [ 270.204945][ T7489] bond9 (unregistering): Released all slaves [ 270.213549][ T7489] bond10 (unregistering): Released all slaves [ 270.222274][ T7489] bond11 (unregistering): Released all slaves [ 270.231455][T17332] lo speed is unknown, defaulting to 1000 [ 270.243066][T17332] vxcan1 speed is unknown, defaulting to 1000 [ 270.256267][ T7489] tipc: Left network mode [ 270.272532][T10781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.409158][ T7489] veth1_macvtap: left promiscuous mode [ 270.431338][ T7489] veth0_macvtap: left promiscuous mode [ 270.437600][ T7489] veth1_vlan: left promiscuous mode [ 270.443360][ T7489] veth0_vlan: left promiscuous mode [ 270.461953][T17377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5132'. [ 270.518329][T17381] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5134'. [ 270.540192][T12875] smc: removing ib device syz! [ 270.562530][T12827] smc: removing ib device syz2 [ 270.622634][ T7400] vxcan1 speed is unknown, defaulting to 1000 [ 270.628896][ T7400] syz2: Port: 1 Link DOWN [ 270.749503][T17332] chnl_net:caif_netlink_parms(): no params data found [ 270.778224][T17393] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma? [ 270.861290][T17393] loop0: detected capacity change from 0 to 1024 [ 270.906648][T17393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.084934][T17332] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.092258][T17332] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.124779][T10781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.146241][T17332] bridge_slave_0: entered allmulticast mode [ 271.160406][T17332] bridge_slave_0: entered promiscuous mode [ 271.178057][T17332] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.185512][T17332] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.220804][T17332] bridge_slave_1: entered allmulticast mode [ 271.239035][T17332] bridge_slave_1: entered promiscuous mode [ 271.249884][T17416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5139'. [ 271.301981][T17332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.311648][T17395] lo speed is unknown, defaulting to 1000 [ 271.324979][T17332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.366505][T17332] team0: Port device team_slave_0 added [ 271.389951][T17332] team0: Port device team_slave_1 added [ 271.433745][T17332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.440856][T17332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.468266][T17332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.503986][T17332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.510986][T17332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.537555][T17332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.556467][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 271.556484][ T29] audit: type=1400 audit(271.521:34424): avc: denied { setattr } for pid=17426 comm="syz.0.5142" name="cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 271.591051][T17395] chnl_net:caif_netlink_parms(): no params data found [ 271.635965][T17332] hsr_slave_0: entered promiscuous mode [ 271.642344][T17332] hsr_slave_1: entered promiscuous mode [ 271.648519][T17332] debugfs: 'hsr0' already exists in 'hsr' [ 271.654445][T17332] Cannot create hsr debugfs directory [ 271.693958][ T29] audit: type=1326 audit(271.661:34425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17435 comm="syz.7.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728ea2ebe9 code=0x7ffc0000 [ 271.717635][ T29] audit: type=1326 audit(271.661:34426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17435 comm="syz.7.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728ea2ebe9 code=0x7ffc0000 [ 271.777780][T17442] FAULT_INJECTION: forcing a failure. [ 271.777780][T17442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.791045][T17442] CPU: 1 UID: 0 PID: 17442 Comm: syz.4.5146 Not tainted syzkaller #0 PREEMPT(voluntary) [ 271.791136][T17442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 271.791149][T17442] Call Trace: [ 271.791155][T17442] [ 271.791163][T17442] __dump_stack+0x1d/0x30 [ 271.791184][T17442] dump_stack_lvl+0xe8/0x140 [ 271.791204][T17442] dump_stack+0x15/0x1b [ 271.791249][T17442] should_fail_ex+0x265/0x280 [ 271.791272][T17442] should_fail+0xb/0x20 [ 271.791289][T17442] should_fail_usercopy+0x1a/0x20 [ 271.791312][T17442] strncpy_from_user+0x25/0x230 [ 271.791489][T17442] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 271.791578][T17442] path_removexattrat+0x82/0x570 [ 271.791623][T17442] __x64_sys_removexattr+0x38/0x50 [ 271.791651][T17442] x64_sys_call+0x242f/0x2ff0 [ 271.791673][T17442] do_syscall_64+0xd2/0x200 [ 271.791754][T17442] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 271.791784][T17442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.791806][T17442] RIP: 0033:0x7f66855febe9 [ 271.791822][T17442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.791840][T17442] RSP: 002b:00007f6684067038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 271.791860][T17442] RAX: ffffffffffffffda RBX: 00007f6685835fa0 RCX: 00007f66855febe9 [ 271.791922][T17442] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 00002000000002c0 [ 271.791935][T17442] RBP: 00007f6684067090 R08: 0000000000000000 R09: 0000000000000000 [ 271.791947][T17442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.791959][T17442] R13: 00007f6685836038 R14: 00007f6685835fa0 R15: 00007fffbedb81b8 [ 271.791979][T17442] [ 271.794805][T17395] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.816636][ T29] audit: type=1326 audit(271.711:34427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17435 comm="syz.7.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f728ea2ebe9 code=0x7ffc0000 [ 271.816758][T17395] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.819672][ T29] audit: type=1326 audit(271.711:34428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17435 comm="syz.7.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728ea2ebe9 code=0x7ffc0000 [ 271.826149][T17395] bridge_slave_0: entered allmulticast mode [ 271.828806][ T29] audit: type=1326 audit(271.711:34429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17435 comm="syz.7.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728ea2ebe9 code=0x7ffc0000 [ 271.833790][T17395] bridge_slave_0: entered promiscuous mode [ 271.837794][ T29] audit: type=1326 audit(271.711:34430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17435 comm="syz.7.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f728ea2ebe9 code=0x7ffc0000 [ 271.866248][T17395] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.868632][ T29] audit: type=1326 audit(271.711:34431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17435 comm="syz.7.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728ea2ebe9 code=0x7ffc0000 [ 271.873411][T17395] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.877871][ T29] audit: type=1326 audit(271.711:34432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17435 comm="syz.7.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728ea2ebe9 code=0x7ffc0000 [ 271.885044][T17395] bridge_slave_1: entered allmulticast mode [ 271.889607][ T29] audit: type=1326 audit(271.721:34433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17435 comm="syz.7.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f728ea2ebe9 code=0x7ffc0000 [ 271.895184][T17395] bridge_slave_1: entered promiscuous mode [ 272.212694][T17395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.226406][T17395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.256703][T17395] team0: Port device team_slave_0 added [ 272.266368][T17395] team0: Port device team_slave_1 added [ 272.281001][T17332] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 272.296039][T17332] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 272.305716][T17395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.313278][T17395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.339531][T17395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.351353][T17395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.358436][T17395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.384822][T17395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.396293][T17332] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 272.408902][T17332] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 272.438698][T17395] hsr_slave_0: entered promiscuous mode [ 272.445849][T17395] hsr_slave_1: entered promiscuous mode [ 272.451879][T17395] debugfs: 'hsr0' already exists in 'hsr' [ 272.457881][T17395] Cannot create hsr debugfs directory [ 272.457942][T17458] loop0: detected capacity change from 0 to 2048 [ 272.508782][T17458] Alternate GPT is invalid, using primary GPT. [ 272.515196][T17458] loop0: p1 p2 p3 [ 272.551820][T17332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.574600][T17395] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 272.584681][T17395] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 272.594483][T17395] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 272.613221][T17395] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 272.636043][T17332] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.653923][ T7489] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.661044][ T7489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.671961][ T7489] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.679142][ T7489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.812013][T17395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.822370][T17478] netlink: 'syz.4.5153': attribute type 10 has an invalid length. [ 272.837534][T17478] team0: Port device dummy0 added [ 272.846435][T17478] netlink: 'syz.4.5153': attribute type 10 has an invalid length. [ 272.854170][T17395] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.863954][T17478] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 272.875029][T17478] team0: Failed to send options change via netlink (err -105) [ 272.882867][T17478] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 272.892562][T17478] team0: Port device dummy0 removed [ 272.900552][T17478] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 272.915259][T12812] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.922390][T12812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.936650][T17332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.949911][T12812] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.957263][T12812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.989807][T17395] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 273.000479][T17395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.034722][T17488] loop4: detected capacity change from 0 to 128 [ 273.072323][T17488] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 273.080555][T17488] FAT-fs (loop4): Filesystem has been set read-only [ 273.090580][T17488] bio_check_eod: 37202 callbacks suppressed [ 273.090601][T17488] syz.4.5156: attempt to access beyond end of device [ 273.090601][T17488] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 273.111939][T17488] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 273.119956][T17488] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 273.130460][T17498] syz.4.5156: attempt to access beyond end of device [ 273.130460][T17498] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 273.145260][T17498] syz.4.5156: attempt to access beyond end of device [ 273.145260][T17498] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 273.160195][T17488] syz.4.5156: attempt to access beyond end of device [ 273.160195][T17488] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 273.173231][T17395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.177503][T17488] syz.4.5156: attempt to access beyond end of device [ 273.177503][T17488] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 273.196314][T17488] syz.4.5156: attempt to access beyond end of device [ 273.196314][T17488] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 273.210076][T17488] syz.4.5156: attempt to access beyond end of device [ 273.210076][T17488] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 273.226453][T17488] syz.4.5156: attempt to access beyond end of device [ 273.226453][T17488] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 273.240637][T17488] syz.4.5156: attempt to access beyond end of device [ 273.240637][T17488] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 273.264305][T17488] syz.4.5156: attempt to access beyond end of device [ 273.264305][T17488] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 273.286206][T17332] veth0_vlan: entered promiscuous mode [ 273.302483][T17332] veth1_vlan: entered promiscuous mode [ 273.327503][T17332] veth0_macvtap: entered promiscuous mode [ 273.345756][T17332] veth1_macvtap: entered promiscuous mode [ 273.369781][T17332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.402233][T17332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.430064][T12811] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.472521][T12811] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.498621][T12811] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.530652][T12811] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.601654][T17395] veth0_vlan: entered promiscuous mode [ 273.622743][T17395] veth1_vlan: entered promiscuous mode [ 273.678833][T17395] veth0_macvtap: entered promiscuous mode [ 273.713161][T17395] veth1_macvtap: entered promiscuous mode [ 273.765035][T17395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.792153][T17395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.818368][T12811] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.860828][T12811] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.913372][T12811] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.931726][T12811] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.083286][T17535] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5136'. [ 274.160210][T17542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5163'. [ 274.192749][T17546] lo speed is unknown, defaulting to 1000 [ 274.370115][T17565] lo speed is unknown, defaulting to 1000 [ 274.444726][T17569] bridge_slave_0: left allmulticast mode [ 274.450464][T17569] bridge_slave_0: left promiscuous mode [ 274.456293][T17569] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.477503][T17569] bridge_slave_1: left allmulticast mode [ 274.483290][T17569] bridge_slave_1: left promiscuous mode [ 274.489161][T17569] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.508179][T17569] bond0: (slave bond_slave_0): Releasing backup interface [ 274.534734][T17569] bond0: (slave bond_slave_1): Releasing backup interface [ 274.546056][T17580] loop4: detected capacity change from 0 to 128 [ 274.558078][T17580] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 274.566445][T17580] FAT-fs (loop4): Filesystem has been set read-only [ 274.579018][T17569] team0: Port device team_slave_0 removed [ 274.587557][T17580] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 274.595561][T17580] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 274.606984][T17569] team0: Port device team_slave_1 removed [ 274.654655][ T7389] lo speed is unknown, defaulting to 1000 [ 274.677368][T17577] lo speed is unknown, defaulting to 1000 [ 274.737818][T17582] lo speed is unknown, defaulting to 1000 [ 275.021092][T17595] loop8: detected capacity change from 0 to 512 [ 275.101968][T17595] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 275.110145][T17595] System zones: 0-2, 18-18, 34-35 [ 275.124501][T17595] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.318569][T17612] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5183'. [ 275.345028][T17332] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.615681][T17637] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5193'. [ 275.702782][T17645] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5198'. [ 275.795552][T17659] loop4: detected capacity change from 0 to 128 [ 275.807255][T17659] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 275.815243][T17659] FAT-fs (loop4): Filesystem has been set read-only [ 275.824486][T17659] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 275.832942][T17659] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 275.843740][T17662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5201'. [ 276.081206][T17677] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5207'. [ 276.173860][T17683] loop7: detected capacity change from 0 to 512 [ 276.180864][T17683] EXT4-fs: Ignoring removed nobh option [ 276.190510][T17683] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 276.211889][T17683] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #13: comm syz.7.5212: casefold flag without casefold feature [ 276.241060][T17683] EXT4-fs (loop7): Remounting filesystem read-only [ 276.255853][T17683] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.282317][T17683] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.470072][T17697] netlink: 'syz.9.5217': attribute type 10 has an invalid length. [ 276.484076][T17697] team0: Port device dummy0 added [ 276.495891][T17697] netlink: 'syz.9.5217': attribute type 10 has an invalid length. [ 276.507770][T17697] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 276.519531][T17697] team0: Failed to send options change via netlink (err -105) [ 276.527760][T17697] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 276.536927][T17697] team0: Port device dummy0 removed [ 276.551808][T17697] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 276.566391][T17701] netlink: 'syz.0.5218': attribute type 13 has an invalid length. [ 276.606523][T17699] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5216'. [ 276.661889][T17701] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.753062][T17719] ================================================================== [ 276.761203][T17719] BUG: KCSAN: data-race in memcpy_and_pad / rcu_tasks_trace_pregp_step [ 276.769490][T17719] [ 276.771829][T17719] write to 0xffff88810a9e56dc of 4 bytes by task 28 on cpu 0: [ 276.779294][T17719] rcu_tasks_trace_pregp_step+0x1ac/0x920 [ 276.785070][T17719] rcu_tasks_wait_gp+0x8b/0x530 [ 276.790045][T17719] rcu_tasks_one_gp+0x7f6/0x8e0 [ 276.794903][T17719] rcu_tasks_kthread+0xf7/0x110 [ 276.799772][T17719] kthread+0x486/0x510 [ 276.803866][T17719] ret_from_fork+0xda/0x150 [ 276.808499][T17719] ret_from_fork_asm+0x1a/0x30 [ 276.813465][T17719] [ 276.815808][T17719] read to 0xffff88810a9e5280 of 3264 bytes by task 17719 on cpu 1: [ 276.823879][T17719] memcpy_and_pad+0x48/0x80 [ 276.828392][T17719] arch_dup_task_struct+0x2c/0x40 [ 276.833427][T17719] dup_task_struct+0x83/0x6a0 [ 276.838233][T17719] copy_process+0x399/0x2000 [ 276.842944][T17719] kernel_clone+0x16c/0x5c0 [ 276.847506][T17719] __se_sys_clone3+0x1c2/0x200 [ 276.852478][T17719] __x64_sys_clone3+0x31/0x40 [ 276.857308][T17719] x64_sys_call+0x1fc9/0x2ff0 [ 276.861997][T17719] do_syscall_64+0xd2/0x200 [ 276.866621][T17719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.872537][T17719] [ 276.874863][T17719] Reported by Kernel Concurrency Sanitizer on: [ 276.881130][T17719] CPU: 1 UID: 0 PID: 17719 Comm: syz.8.5224 Not tainted syzkaller #0 PREEMPT(voluntary) [ 276.891035][T17719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.901122][T17719] ================================================================== [ 276.937844][T17717] loop7: detected capacity change from 0 to 8192