last executing test programs: 12.486009512s ago: executing program 0 (id=28): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108fdffffff0000000000000000630003"], 0x2cc}}, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000008181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 12.435720013s ago: executing program 0 (id=30): ioperm(0x453, 0x7ff, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x158) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x5302209, &(0x7f00000006c0)=ANY=[@ANYBLOB="6d706f6cbb22e426da3a6762e0f54289b537f72fa307000000000000002d2b51a2dce85f02506191ec3758721a31fe23d38c077d6806ca2f7d65323a2e45c6c5fdfe60f91d4806c38184a29384d7bc71ae9e5e2ab0fd9ad1e2845a3e4edb843d2a7d57b962c9cdef656d7a7957012d1d24c0216644c888b62f6db93ea8733a7b6cffb375a950001d6c151acf0d0cbcbd595a204f2b79e1122a1c279d2798f7e52a37806bb274d4fbbb768ed9eb65465ba17f77cff9868b80c358eb9d687713ff89fe9ec2ba7cc6541310baccad7785fb7023be9910de44e02c3151831f2b9376307ee7b992569c961531e2996a4cf731ed203db26fac41b639c1483a9e831551c1d112fb3714"]) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x88c1, &(0x7f0000000080)={0xa, 0x4e22, 0x1000001, @ipv4={'\x00', '\xff\xff', @empty}, 0x801}, 0x1c) sendto$inet6(r2, &(0x7f0000000440)='\r', 0x1, 0x4000080, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) unlink(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x4c18, 0x10000, 0x0, 0x9, 0x4, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) write$sndseq(r4, &(0x7f0000002200)=[{0x84, 0x77, 0x0, 0x0, @time={0x1, 0xfffffffe}, {0xfd}, {0x5}, @raw32={[0x2, 0xfffffffd, 0x8000400]}}, {0x0, 0x0, 0x6, 0x83, @time={0x4, 0x2}, {0xfd, 0x3}, {0x0, 0xfe}, @raw8={"52efcf58120e1b4294b525e2"}}, {0xb, 0x4, 0x0, 0x1, @tick=0x6, {}, {0x0, 0x93}, @ext={0x0, 0x0}}], 0x54) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r8, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time={0xfffffffe}, {}, {}, @result}], 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 11.298572321s ago: executing program 0 (id=41): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x9, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) gettid() r2 = epoll_create1(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x40000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200)={0xa000000a}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x403, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x3, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x2000000000000005}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r5) close(r4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xffffffff}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x7, @private0, 0x8}, @in={0x2, 0x4e20, @private=0xa010100}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x5c) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) close(r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00'}) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 10.610365202s ago: executing program 0 (id=48): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f00000012c0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@quota}, {@errors_continue}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000200)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x3, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r3 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0x33, 0x14, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d225780820d1cbf7db71038259ca131ce1a311ef97e4298d1e84ef01060000e9009600fdff00000000000000000000000000000000000400004000", "d300e6d6ae9ef30bea2a004000"}) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") r4 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000700)=0xe9, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0x0, 0x200019, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x3501, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r10, 0x4}}]}, 0x144}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) dup2(r4, r11) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r13, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) 10.022860901s ago: executing program 0 (id=54): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0xfffffff6}}, @typedef={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x4e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x84}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r6, 0x0, 0x8}, 0x18) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f00000003c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r5}}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688", 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) 9.184273155s ago: executing program 0 (id=63): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) close(r2) socket$netlink(0x10, 0x3, 0x0) preadv(r3, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/124, 0x7c}], 0x1, 0x0, 0x6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='wbt_lat\x00', r1}, 0x18) iopl(0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f00000003c0)={0x0, 0x0, 0x80, 0xfe8}) fcntl$lock(r5, 0x25, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x80000000}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0xc, &(0x7f0000000400)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=0x0, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095", @ANYRES64=r4, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) 9.184031725s ago: executing program 32 (id=63): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) close(r2) socket$netlink(0x10, 0x3, 0x0) preadv(r3, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/124, 0x7c}], 0x1, 0x0, 0x6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='wbt_lat\x00', r1}, 0x18) iopl(0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f00000003c0)={0x0, 0x0, 0x80, 0xfe8}) fcntl$lock(r5, 0x25, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x80000000}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0xc, &(0x7f0000000400)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=0x0, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095", @ANYRES64=r4, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) 3.83595893s ago: executing program 2 (id=128): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfff) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf251b00eb0008009a"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x80) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) syz_open_pts(r1, 0x141601) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000240)={0x1, 0x77ab, 0x97, 0x5495cb6e, 0x4, "00000080000000000000000200", 0x0, 0xd}) ioperm(0x0, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, r5, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 16) 3.447154895s ago: executing program 2 (id=130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000001000000000000000010000850000002100000000020000000000000100000000da"], 0x0, 0x52, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x1, 0x4000004}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r3, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0x1b, 0x4e24, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 3.390205787s ago: executing program 2 (id=131): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f0000001080)='net/igmp\x00') preadv(r1, &(0x7f0000002240)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1, 0x29d3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mm_page_alloc\x00', r0}, 0x10) unshare(0x42000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0x0, 0x1}, 0x115428, 0x0, 0x0, 0x0, 0x5f4d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="1c26b3d1ba05b7c14f4716f2d8ec794de1a110a0a88e923d43182406b775afe70000000000000000000000000000000000fdaf49cda699f0ac46dd31118d418b14d6c1dc532fe9c7d78d0bf2a4b44c72ac8f4934972159b064541e0022552fba694ae3", @ANYRES64=0x0], 0x20) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000000)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier_val={'barrier', 0x3d, 0xcc}}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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") close_range(r6, 0xffffffffffffffff, 0x0) 1.818413001s ago: executing program 3 (id=159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'rose0\x00', 0x112}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000008c0)="8ac1deee42cc0fa2f915072f03f1685fa29e331701a0b9a7347abb0ebc582f67143653701ba2aff7a19654347d97ab5e16c983329be79df2cde5ddf9f484c42d1f99165f0bde9a9960c9289ff34a8e70675f321889ff000000000000006683792ed7d5ff0e5f71e938e7be129d8b246f73564065d6dc63df71243f104e2e067cbf8de9f6d544fee6360addf6426799406440c0eb0fdeb3cdcc9bd683d83774688599b0f9e346854e32a5e53fc8abeb341c38aea436b95c4453e62f21ee4aa1f07557fa71c392dc0e", &(0x7f0000000400), 0xa, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x11, 0xa, 0x300) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="dbf7db31ad851bbc0000000000ee000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000180)='X\x00\x00', 0x3}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r9 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r9, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}, {&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="5825be57aff9352b356be67ca2746357d1787935", 0x14}], 0x1}}], 0x2, 0x0) vmsplice(r4, &(0x7f0000000440)=[{&(0x7f0000000200)=':', 0x1}], 0x1, 0x2) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x74, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x22}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xcc}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x90) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011000500000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000000c001a8008"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000005000000030000000500000001000000", @ANYRES64=r4, @ANYBLOB="0000000000040000100020000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff00"/28], 0x50) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r10) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 1.553120916s ago: executing program 4 (id=161): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRES64], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x22020600) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x103500, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000000000850000005600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = getuid() mkdir(&(0x7f0000000400)='./file0\x00', 0x101) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setgid(0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000200)=0xfffffffd, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r9}, 0x10) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) r10 = syz_open_dev$ttys(0xc, 0x2, 0x1) fsetxattr$security_capability(r10, &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x1000, 0x7}, {0x1, 0xc}], r4}, 0x18, 0x1) read$eventfd(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff95000000000000001d51c18e506bc8cd143154fc013e53c0699f6ab4d71265171f195a0305272b929074dd847ace3420a5746b1929098aff954635d4b9003b3545e06e02e2f4df7087d3b0b1f3e1709427ea9bc430aaedeb1e0c9ca982f907912ce0779a5e6756513fcea4492b16ec88f93326f849c1f2849e2a923bd552dd94"], 0x0, 0x0, 0xfffffffffffffea1, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="4c72599e14d19ffb13ca34ef44deffdaa631518cc194597c30000ace58a1703375fd26b5e151c7857aff5c9fcaea4f605d6c95f05bc2b352a8ab8747daf912fea879e9ad717489820b0f3ec5bfc2c1de8604d9d792dfc5470bd66033565b18bcbe8841c43db83f0745d893abe3bcc35369b9f31f8f118b4b88970360326b29598320626640ed70faf0149985b5a661fdedaa9eae70df821cd6a1a8b9e8dbf490a65122d128456e71652fed79ab38451336e5eff3d3f632d8b028e0cee476d233f495643d65d96ca8a7154b8899915e4131"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.206221011s ago: executing program 1 (id=163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000040000000000080000100850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000016c0)=ANY=[@ANYBLOB="5c000000150001000000000000000000fe880000000000000000000000000001fe800000000000000000000000000000000000000000000000000000000007c1e7fae80000fc74a59a63b9c675"], 0x5c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000079800200304a42d7adb5df1768f036677265746170000000ae0042800800040004110000000e00"], 0x50}}, 0x0) mq_notify(r1, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/251}], 0x59) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000a80)='kfree\x00'}, 0x18) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@fadd={0x58, 0x114, 0x6, {{0x9, 0x80}, &(0x7f0000000400)=0x6, 0x0, 0x1, 0x10001, 0x2, 0x9, 0x8, 0xb}}], 0x58}, 0x0) 1.192302661s ago: executing program 4 (id=164): r0 = perf_event_open(&(0x7f0000001700)={0x1, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x806, 0x3, 0xa, 0x0, 0x2, 0x1, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x2000000}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000206050000000000000000000000000004000780000600000005000500020000000500040f000000000900020073797a310000000013000300686173683a6e65742c69666163650000"], 0x50}}, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080)={[{@errors_remount}, {@noload}, {@nogrpid}, {@noquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x51f, &(0x7f00000007c0)="$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") ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x2}}, './bus\x00'}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) dup3(r6, r5, 0x0) readv(r5, &(0x7f00000003c0)=[{&(0x7f0000000e00)=""/4096, 0x1000}], 0x1) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x8, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}}}]}]}]}}]}, 0x50}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @empty}, 0x44, r9}) lseek(r1, 0x8000000000000001, 0x4) 1.041505044s ago: executing program 1 (id=165): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa, 0x0, 0x0, 0x10, &(0x7f0000000780), 0x0, 0x0, 0x54, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2040400) r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)}], 0x1, 0xe7b, 0x0, 0x1) syz_open_dev$sg(0x0, 0x0, 0x401) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007220000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000b87f000000000000000000000000000000000000000000000000070000002e0b0000090000000000000001000000000000000100000000000000ff00eaffffff0000000000000000000000000000000000000000000000000000ff0100006a6800000900000000000000040000000000000007000000000000000400"/248]) ptrace(0x10, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 922.653876ms ago: executing program 5 (id=167): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x8, 0x122c42) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000000)={0x800}) setns(r1, 0x24020000) setresuid(0x0, 0x0, 0xee00) r3 = syz_clone(0x12000000, 0x0, 0xffffffffffffff55, 0x0, 0x0, 0x0) kcmp(r3, r3, 0xee, 0xffffffffffffffff, 0xffffffffffffffff) 885.522426ms ago: executing program 3 (id=168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001640)=ANY=[@ANYBLOB="1c0000000203010400000000000000000000000108000100010000002f8ee78c2667bf4053fabdbb4a7fb08c75dc8bd5e75e5df2c3825393cfc6c47c639a4e91439e0c2aeec5b1f6f23faed088d282b77f493901022902174e6a7a53c6de31638c58444aeb17823bc1096bf7012cf8c37ba3bd9a70e097f1e1af4e1f01ca6aa0c950ae04ffe98db7e7a278e502e5e04200e97ddd5f0a8e69c1"], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket(0x10, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 862.802347ms ago: executing program 3 (id=169): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000959800001801000020207025000000000000000000000007010000f0ffffffb702000005000000b70300000000000085001d82bfa600009500"/81], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8e40) cachestat(r2, &(0x7f0000000480)={0x103, 0x3}, &(0x7f0000000500), 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f0000001c0007800c000400002e0000000000000c0003005f"], 0x30}}, 0x20000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000180)=@abs={0xd8148c2164b80e1a, 0x0, 0x4e23}, 0x6e) listen(r0, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x2c060000) unshare(0x2c020400) 837.424097ms ago: executing program 5 (id=170): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=ANY=[], 0x38) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r1, 0xffffffffffffffff, 0x0) 835.259627ms ago: executing program 1 (id=171): syz_usb_connect$cdc_ncm(0x5, 0x9c, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x2, 0x1, 0xff, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "e8"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x5, 0x1}, {0x6, 0x24, 0x1a, 0x0, 0x32}, [@dmm={0x7, 0x24, 0x14, 0x7ff, 0x2}, @acm={0x4, 0x24, 0x2, 0x18}, @acm={0x4, 0x24, 0x2, 0x5}, @country_functional={0x12, 0x24, 0x7, 0xfa, 0xb, [0x1, 0x10, 0xc6c, 0x5, 0x4, 0x4c]}, @dmm={0x7, 0x24, 0x14, 0x3, 0x8}, @obex={0x5, 0x24, 0x15, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x618, 0x1, 0x6, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xff, 0x3, 0xf8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8, 0x4, 0x7}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x81, 0xe, 0x4, 0x10, 0xa}, 0x28, &(0x7f0000000100)={0x5, 0xf, 0x28, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0x9, 0x3ff}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x8, 0x84, 0x2, 0xb5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x9, 0x9, 0x2, 0x3}]}, 0x5, [{0x75, &(0x7f0000000140)=@string={0x75, 0x3, "74bc76bc1e073a7decf2bb165d598dcb8e57da0ee270c25ee7817978db02c3fa422ce0c1f588595125e4725c380379bc08464d0cb53f147563d751602c08dddcd7ae495e0cf181fe72ebd2e37d3016446a9e071af79eb5e060b651a1920b0d546d7226d9afc9455921496c4943ecf7a2599f18"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xfe218cf16bec3747}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2c21}}]}) syz_usb_connect$cdc_ecm(0x3, 0x8c, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x1, 0x1, 0xf, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x7, 0x24, 0x6, 0x0, 0x0, "9682"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x2, 0x8, 0x3}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @obex={0x5, 0x24, 0x15, 0x40}, @country_functional={0xe, 0x24, 0x7, 0x1, 0xce4, [0x6, 0x2, 0x2, 0xfffe]}, @mbim={0xc, 0x24, 0x1b, 0x23f7, 0xfffb, 0xf8, 0xc8, 0x5, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x3, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x6, 0x2, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x0, 0x2}}}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x201, 0xfe, 0x47, 0x8, 0x8}, 0x5, &(0x7f0000000440)={0x5, 0xf, 0x5}, 0x9, [{0x3c, &(0x7f0000000480)=@string={0x3c, 0x3, "905c66320c4f2008a26c44531eab0d5eb3066c7b556d9920402011c9a4a634822b33d20e4231ecd1b55418214a1c745515f0ddfca230b7248332"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x422}}, {0xd0, &(0x7f0000000580)=@string={0xd0, 0x3, "14d18953c634ee99618be63e5d06dfb8494e9a413da40bb1db2a6f422fd9352282b2790662c306ed50fcba5c5e4e031e2030cd9a64939aee891d6eafb2ab7042eb7230b771ba2a504978e1cbf19ae09a932a86c0021e465ea24cddcb8dc81d8aceadae4b237fa8baa9900ab231311e91c99a6c077afa22a9fb804eb0efe43b4e6833944b1db91e839bffa682c05ca3d935e4642cc608b76000a96b6016b3813dcfed7200546fbf89ab5e3ad7f052c1587c061dbb503cfe1b546e5426bd4bac66024838168a80364c0d0a4b6e1649"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x852}}, {0x87, &(0x7f00000006c0)=@string={0x87, 0x3, "dc4c7d3e57851de4730ef3307a36b4655cb3b8efd95845fb8c3715a137f07b7a515e8ae3d79e69b0ed2bbbd3f673d1e144975306d7cac6fe18b942c5e32e2bb12efbcce4209cd3b523093cf0c204d6dd5b7c8f9d0440821ea7a73fea2bb6802dd33cb6b2ac546e78a7aa897651f34d5209c1a23b99729989575b1e7b27efe75541298002ea"}}, {0xc1, &(0x7f0000000780)=@string={0xc1, 0x3, "334c1be1fcf6874b97bdb63686a922c01a82a9d17333aa3f38859b361cf2cf0337f06498960f479b6bb7b529bd638532299cc19e312e8f71fcdbae82ca5860b24ae0bc0c12dfe35aa89309aaf1a18f962006ec2971f8918180c57959c2c2c2f3483f30278ec7ed3f370898a7428ddd1881e8374f9197252ac8a7c3114e3623004db362cb401a83dcef99aa9d53c0fc61d92d442719ce95270fdb23fa97c2bb96ffc6fb63580bd7b7909733f8a60c1c327fd97e04d184e8b112a87471eb071f"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x44c}}]}) (async) syz_usb_connect$uac1(0x5, 0xc8, &(0x7f0000000980)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0x1, 0xd0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xa}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x305, 0x3, 0x5, 0x44}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x2, 0x1, [0x3], 0xfc}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x3, "5b7ecbc2ba"}, @processing_unit={0xa, 0x24, 0x7, 0x5, 0x1, 0x6, "ac4a1f"}, @feature_unit={0xb, 0x24, 0x6, 0x4, 0x3, 0x2, [0x1, 0x2], 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x90, 0x5}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xff, 0x3, 0x5, 0x7, "2aeb", "0fbf0e"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1, 0x1, 0x7, "a56f"}, @as_header={0x7, 0x24, 0x1, 0x6d, 0x1d, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x3, 0x7, {0x7, 0x25, 0x1, 0x1, 0xae, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x1, 0x1, {0x7, 0x25, 0x1, 0x1, 0x2, 0x6}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x110, 0x9, 0x2, 0xea, 0x8, 0x3}, 0x19, &(0x7f0000000ac0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xbd, "793be476b0bff443bce2e20d2fdfa22e"}]}, 0x2, [{0xe1, &(0x7f0000000b00)=@string={0xe1, 0x3, "e8454ebf293d32756c65a24aa4ab51f242fab089be5c664a6ff534a691c524aa789bd889ade3b54bf8517980a1d9c281dbc9e63d773824286182ae28b9dcf431d793045899dfbaec738c6289db8f8e79f3cb61be24ed22bba65e6a1b4c120ffdff4628884f64410c0b9b10b43c815eed3a604c3241df233b600266c4f27bf7146a92fbe9ffe8f4ee43712bb0cdd78f32ddae614b4c21d473883c2dfcb664fc0ac40fb6a5bab603a27318725bf532cbea26c0625593acd0eba46e13143c3c5bc4fea67a89f1cc9c4d8f16013ee2d43c9fab1439a48444a9ea4236557e5fe982"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x457}}]}) (async) r0 = syz_open_dev$sg(&(0x7f0000000c80), 0xce, 0x220000) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000cc0)=0xe8) r1 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) connect(r1, &(0x7f0000000d00)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x80) mq_open(&(0x7f0000000d80)='(\x00', 0x800, 0x14, &(0x7f0000000dc0)={0xffffffffffffffbf, 0x2, 0x0, 0x10001}) (async) pipe2(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, r5, 0x400, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x21}, 0xc000) socket$qrtr(0x2a, 0x2, 0x0) (async) syz_usb_connect$uac1(0x4, 0xee, &(0x7f0000000f80)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0x4, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x78, 0x2}, [@selector_unit={0x8, 0x24, 0x5, 0x5, 0xf, "bac29c"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x200, 0x2, 0x7, 0x8f8, 0x5, 0xa}, @processing_unit={0x9, 0x24, 0x7, 0x4, 0x4, 0x2, "99c7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x57, 0x4, 0x1001}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x30, 0x1, 0x68, 0x9, "6123bb624a"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x8, 0xe, 0x8, "d0"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x4, 0x1, 0x4}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2e, 0x3, 0x1, 0x3, "6d8804ca88ca"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xa, 0x4, 0x52, 0x1, '??', "bb"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x0, 0xf, {0x7, 0x25, 0x1, 0x82, 0xf, 0xfffa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x3, 0x8, 0xdf, "8a", "981c"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x1, 0xeb, 0x81, "9f11", "ca"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7, 0x401, 0xa, '}\"'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x84, 0xa1, {0x7, 0x25, 0x1, 0x7, 0x6, 0xd}}}}}}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x310, 0x81, 0x0, 0x5, 0x8, 0x7f}, 0xd2, &(0x7f00000010c0)={0x5, 0xf, 0xd2, 0x4, [@generic={0xa7, 0x10, 0x2, "f03a3834a5c8c3cc67f0120c2966be121ad0c7bef43edf6a808a0412cbf7b8754e33862f8205eb76c770c669a81dec30811e7ff0dd51c84d623b65d864470e16881be5753fdcbbb234ec62450970dddf4cf4aba891997dde34019ff91d363da20dd08b1d8b81e869fc013fb985ab2a1700ea6b3194724183606624a613ddbe98ea78d8096ff98f4896f2ef3004dbe59a8f93c41008ab21371941828d91ab6276a794714e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x1, 0x7f, 0xff, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x1, 0xf00, 0x100, [0x3f00, 0x10100cf, 0xc0c0]}, @ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000001200)=@lang_id={0x4}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x1401}}, {0x6a, &(0x7f00000013c0)=@string={0x6a, 0x3, "4357136b3dba41ce84c2a1343f204ce569bb2152dea8e7fcc78b10cae4f71ea3798e5074fc996259918ea500b77f44e7f84589bfa8a4c8d4e810c5e6f923063ea2cb3e7d60b0dddd897825de020abb4f714fa77c934c67f07863b16040802bf7547cb2c37c986734"}}]}) (async) syz_usb_connect$cdc_ncm(0x5, 0xd8, &(0x7f0000001500)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x2, 0x1, 0xc, 0x10, 0x86, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "f623"}, {0x5, 0x24, 0x0, 0xcf}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x9d, 0x5, 0x4}, {0x6, 0x24, 0x1a, 0xe3, 0x3b}, [@mdlm_detail={0x4e, 0x24, 0x13, 0x95, "453e35f6372ba907434b0d49e800f2423b098280de6246f5965ff88395a867ab05e4bcc7e60d48f01f3feeaf34a50b9c8a2ad6c9d20e891eb5d7c18c3502f526e156633cd1fccd5c9f4c"}, @call_mgmt={0x5, 0x24, 0x1, 0x5, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0x7, 0xeb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x1, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6a, 0x3, 0xb}}}}}}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x201, 0x6, 0x9, 0xb, 0xff, 0xc0}, 0x41, &(0x7f0000001640)={0x5, 0xf, 0x41, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "4f546ba0f65a8d98fb3154b991079c9d"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0xe, 0x2, 0x5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0xfa, 0x50, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0xf, 0x3}]}, 0x4, [{0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x412}}, {0x3d, &(0x7f0000001740)=@string={0x3d, 0x3, "f4c9b8343159ddd63bc52e82a61a913d704f03300d15eb736961d8c46552aa7263266d9acdb600d1ce653400cb64b5490832d0d20041f5c4b92b47"}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0xc09}}]}) (async) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000001840)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0x621, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0xffff, 0x2, 0x1, {0x22, 0xc7b}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xdd, 0x80, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xe, 0x5, 0x2}}]}}}]}}]}}, &(0x7f0000001a00)={0xa, &(0x7f0000001880)={0xa, 0x6, 0x200, 0x80, 0x6, 0x40, 0x8, 0x1}, 0x28, &(0x7f00000018c0)={0x5, 0xf, 0x28, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0xf, 0xff}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x5, 0xf00, 0x81, [0x3f00, 0xc0, 0x0, 0xff3f]}]}, 0x1, [{0xe6, &(0x7f0000001900)=@string={0xe6, 0x3, "9ab6795274460bac14397479fda63b89dc2dc0c2a2ac0c2eef63056d03e87ff11e5af58f1addff12150f67279b0ea91591b1d9dbd5e3e32bbaa75b89a844c0bc4500a7c14802c532ce662df7697b6b330e1d8365b10e7f9cd25b08664ea852a9a1188dc2c58bcf86ed8fd52313c896d9bc39f94a0d948fd44aef982d8881a61343eb55e89b6c502b25dd5aabd6e6f0bf04c31d86bf6b7f02a00357f9ccd7db217491074a541b5c3f80258c7363c1da5fdea39824b2cb751c56b98f3eba528bf4c0945dea247c10691ba6c93c934ef955428ec692c743915d389a06271a1c9f073b6918ce"}}]}) (async) ioctl$VT_WAITACTIVE(r2, 0x5607) r6 = dup(r1) syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f0000001a40)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x6, 0x24, 0x6, 0x0, 0x0, "15"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xd6, 0x6, 0x8}, [@acm={0x4, 0x24, 0x2, 0xb}, @dmm={0x7, 0x24, 0x14, 0x9, 0x8}, @ncm={0x6, 0x24, 0x1a, 0xa148, 0x22}, @dmm={0x7, 0x24, 0x14, 0x1ff, 0xfb}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x0, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0xb, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x92, 0x6, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xc6, 0x7f, 0x2}}}}}]}}]}}, &(0x7f0000001b80)={0xa, &(0x7f0000001ac0)={0xa, 0x6, 0x300, 0xc, 0x0, 0x8, 0xf210bba1f8f5f8b3, 0xfc}, 0x5, &(0x7f0000001b00)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x82c}}]}) (async) ioctl$EVIOCRMFF(r6, 0x40044581, &(0x7f0000001bc0)=0xffff) (async) syz_usb_connect$cdc_ncm(0x5, 0xf4, &(0x7f0000001c00)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2, 0x2, 0x1, 0x3, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "d7c30be62df5"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1, 0x0, 0x5}, {0x6, 0x24, 0x1a, 0x5, 0x2a}, [@mdlm_detail={0x80, 0x24, 0x13, 0xd, "84ca6f63832f3b20b791c90ae93f5a5a3f430c08922695e582589f86d26c41f71fe56ea546625b4c0fb1594eca4ad9488c3b508dfd859a5177474d9cc8caeeda5d5bd2fc72eeefc05ff1243297598c21d197f52d2afb4296108c515b072cdadec6fc1c1b0ceb9654bf19a4311b373fcf0bc81df777e558f06f46ae35"}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xe5, 0x3, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x40, 0x6, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x420, 0x0, 0x6, 0xd}}}}}}}]}}, &(0x7f00000020c0)={0xa, &(0x7f0000001d00)={0xa, 0x6, 0x310, 0x8, 0x2, 0x40, 0x10, 0x2}, 0x23, &(0x7f0000001d40)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xf, 0xff, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "b7deb73fa90650433775199e9c13323f"}]}, 0x8, [{0x4c, &(0x7f0000001d80)=@string={0x4c, 0x3, "17e135af877ddd7f19cfc83ecbc36fb446fb590f1dd06d0bd2865c5a515100cda6449def99e5b6743756596666f4319ddf6eebfc1e0cd7fe2500c196a3d0ad98286c9127569041176e3e"}}, {0x4, &(0x7f0000001e00)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0x41c}}, {0x49, &(0x7f0000001e80)=@string={0x49, 0x3, "3b9c61c2abed5cd23ad40bdbcecb1bf846e34aee4675fafdc6f881228fe6ea228526d93e80f55fd54280e2d0ac3c87c9676fa4ce2bd8cfef3e4d9b1eef4ba6138e463552a2fcad"}}, {0x2f, &(0x7f0000001f00)=@string={0x2f, 0x3, "a808c92c051124adc5374f0bcfdd7bd39e72eebf720bb79acc4cf41a533a77a07bfc7a8b59a9184d6a44e83c67"}}, {0x4, &(0x7f0000001f40)=@lang_id={0x4, 0x3, 0x860}}, {0xf4, &(0x7f0000001f80)=@string={0xf4, 0x3, "8b9c24182a583272af808b9aec7da63f39649f1fd59f59a461612e5eea17efc0b21a318fa684610e58df0a02201c88daae1c4ebb9f620e9d3c1012320bc9338ae92b0bc135e6d82983174e2eacebc94555aa69d0c980e24f84723c82d69328622c22a9dd4e7f4d48f7b6b7c9cb80e22b08d76b799aba7c252799c7ddb4b6c0abe74d2155617a6235d1aef1a10e05e73a0b3728ad60375aa52c451368940ead38c9a3d1cdf938e771e2efd80e551d7f665f518d55036d7b2567bcc9d9246e9b7eacf2d5eb0b4a393273ae654b45aa7e7421adc5caa6aee087ac184f7762d5333620d31fe7727bfe08c617e16220d4a56aee10"}}, {0x4, &(0x7f0000002080)=@lang_id={0x4, 0x3, 0x587d}}]}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002180)={&(0x7f0000002140)='mctp_key_release\x00', r6, 0x0, 0xfffffffffffffffb}, 0x18) syz_usb_connect$cdc_ecm(0x4, 0xa4, &(0x7f00000021c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x60, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x1, 0x1, 0xb4, 0xa0, 0xc, [{{0x9, 0x4, 0x0, 0xf2, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "6f591ef6ec"}, {0x5, 0x24, 0x0, 0xf31c}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3, 0xb3, 0x6b}, [@ncm={0x6, 0x24, 0x1a, 0x8, 0x20}, @mdlm_detail={0x4c, 0x24, 0x13, 0x9, "9e7ace88404a17388ecdeb060fe597e2b06fb126ca188ecce3b4ab93af9293a5eaad2d8d5ec9bb93ad09ebe5d0d872ba6ea0e8a76d29627e80ff9fb28aae52c710955bacc479ac1b"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x7, 0x39}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x8, 0xf8, 0xa5}}}}}]}}]}}, &(0x7f0000002440)={0xa, &(0x7f0000002280)={0xa, 0x6, 0x201, 0x0, 0x6, 0x6, 0x10, 0xa3}, 0x49, &(0x7f00000022c0)={0x5, 0xf, 0x49, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xfd, 0x4, 0x3}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x7, 0xf000, 0xfff, [0xc00f, 0x0, 0xff0037, 0x3fcf, 0xc00f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xfb, "4d394f079b4eac7cef9451d3f0f9467d"}]}, 0x2, [{0x3f, &(0x7f0000002340)=@string={0x3f, 0x3, "829e64ed384517dde80e844e1ba187645c7ca6cfe178618a2be036f957b6f4662fa5a408e58e1d7de9c91ec765807dc7be9083085f7377eda3ea80c5ee"}}, {0xac, &(0x7f0000002380)=@string={0xac, 0x3, "18b937c8efc041f86b4e11635e65e3f7a60311f59301faeb5f70e2dd78d74097539967d470e3510f9daeafa5333fad5a0bdd797b1233892591f25ea49e20bb903bffa14be91d242c978899bbcb7fc245ce064740d521c5df4c7737ea501a374a0a63e6a933a7ab29aeb29b72a4158a6f066840a016d5e86582053a8d64d40ab0638da3fed930cb5f80baffe461cef82d8182e90eaa4c662854af6db20f9d643907a1acdd3b2ce0750f61"}}]}) (async) setxattr$trusted_overlay_redirect(&(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x8, 0x1) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002580), r3) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000002680)={'gretap0\x00', &(0x7f00000025c0)={'syztnl0\x00', 0x0, 0x40, 0x8, 0x2, 0x200, {{0x20, 0x4, 0x3, 0x4, 0x80, 0x65, 0x0, 0x2, 0x0, 0x0, @empty, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0xd3, 0x1, 0x8, [{@local, 0xf}, {@local, 0x7}, {@multicast2, 0x7}]}, @noop, @timestamp_addr={0x44, 0x4c, 0xf5, 0x1, 0x1, [{@local, 0x5}, {@rand_addr=0x64010101, 0x8}, {@local, 0x63bf}, {@loopback, 0x8}, {@local, 0x3}, {@rand_addr=0x64010101, 0x7}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x3}, {@loopback, 0x7fffffff}, {@multicast1, 0x8}]}]}}}}}) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000026c0)=0x0, &(0x7f0000002700)=0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002a00)={r6, 0xe0, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002740)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000002780)=[0x0, 0x0], &(0x7f00000027c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x85, &(0x7f0000002800)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000002840), &(0x7f0000002880), 0x8, 0x7b, 0x8, 0x8, &(0x7f00000028c0)}}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r7, &(0x7f0000002e00)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002bc0)={0x1dc, r8, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) 784.024078ms ago: executing program 2 (id=172): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x6, 0xff}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = socket$rds(0x15, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c000000021401"], 0x3c}}, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0xed, 0x10001}, 0x115428, 0x1, 0x0, 0x0, 0x5f4d, 0x10000001}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000002c0)={0x800, 0x7, 0x7, 0x1800000, 0xe, "1bd704c0f928deda01141a0ec87ef67312ad85"}) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x400008, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x3}}, {@gid={'gid', 0x3d, r8}}]}) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r9, 0x10001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757818"], 0x65) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x48}}], 0x30, 0x40014}, 0x0) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000000080)={0x0, 0x8, 0x40000}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) 685.951959ms ago: executing program 4 (id=173): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000008000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000305000000000000000001000000", @ANYRES32=r2, @ANYBLOB="0000000040000200280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 685.323729ms ago: executing program 3 (id=174): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r1 = gettid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') tkill(r1, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x23, &(0x7f0000000000), 0x4) recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0x3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 684.959379ms ago: executing program 5 (id=175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="02000000040000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000640)='kfree\x00', r1}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/pm_wakeup_irq', 0x301800, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_gettime(0x1, &(0x7f0000000500)={0x0, 0x0}) clock_settime(0x0, &(0x7f00000009c0)={r7, r8+60000000}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x14, r10, 0x400, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000040}, 0x2) r11 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r11) 569.896401ms ago: executing program 4 (id=176): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xff, 0x7ffc0002}]}) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/196, 0xc4}], 0x1, 0x200000, 0x1) listen(r0, 0x80080400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000900)='kmem_cache_free\x00', r4}, 0x10) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) 569.521471ms ago: executing program 1 (id=177): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) write(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffb, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18) syncfs(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_page_free\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0xe, &(0x7f0000000200)={[{@data_journal}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f0000000a00)="$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") r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) syz_clone(0x10018080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)="faca31ffd69f36923157fa17154320a479cf6bc1d570062ec644b13eb47a3e844afa6519e2f1e74bfeeb75e8a29a198d67b959a7e01a64f43cd4cc94b2ca10505027e6648c330d3d8c0083ac3e0f3aaf") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000950000000000000094b509750d141185864e0e0fe825233ead3bdac90b608c8d1b9e4c632a8f7d822c83663fc1706a346bf45ef2dadbe1eb1345538d1a77ef97d15bcfbba2e14b948e84a9d4220af8fde88afe946e5c4cb3de0d6611504f720f981884bda7b5875efba47bc8b36fc285061bd4126a52adb9d89f97c75a"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd308001c0600fe8000000000000000000000000000aafe8000000000000000000000000000aa000040017582a1a03e16f1440456c3e236bea060396c645ce0d68689cf307517c7ba3c84fe4e07f712109a8e49fcca77ff3295542c1ac1fd50159be565481d5de64e9d3b4945ad4018dedf1db637019ee399790181369e37cb0b6712f824e868b801e7", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002fffd90780008fe08f9897dd40000"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendfile(r4, r4, 0x0, 0x800000009) fstatfs(r0, &(0x7f00000002c0)=""/100) 550.160272ms ago: executing program 3 (id=178): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f00000012c0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@quota}, {@errors_continue}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000200)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x3, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r3 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0x33, 0x14, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d225780820d1cbf7db71038259ca131ce1a311ef97e4298d1e84ef01060000e9009600fdff00000000000000000000000000000000000400004000", "d300e6d6ae9ef30bea2a004000"}) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") r4 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000700)=0xe9, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff14"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0x0, 0x200019, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x3501, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r9, 0x4}}]}, 0x144}}, 0x0) 541.039551ms ago: executing program 5 (id=179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001640)=ANY=[@ANYBLOB="1c0000000203010400000000000000000000000108000100010000002f8ee78c2667bf4053fabdbb4a7fb08c75dc8bd5e75e5df2c3825393cfc6c47c639a4e91439e0c2aeec5b1f6f23faed088d282b77f493901022902174e6a7a53c6de31638c58444aeb17823bc1096bf7012cf8c37ba3bd9a70e097f1e1af4e1f01ca6aa0c950ae04ffe98db7e7a278e502e5e04200e97ddd5f0a8e69c1"], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket(0x10, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 494.491092ms ago: executing program 4 (id=180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="f3d1ecbc7ef3854f01f96448e06fbcfbc0520400", @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000000000000000800090001000000"], 0x34}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000000}]}}]}, 0x48}}, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r12}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB="2c7665727369f46e3d3970323030302c00"]) listen(r3, 0x0) futex(0x0, 0x3, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x80, &(0x7f00000000c0)=ANY=[], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) tee(r11, r5, 0x4, 0x4) 411.900093ms ago: executing program 5 (id=181): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa, 0x0, 0x0, 0x10, &(0x7f0000000780), 0x0, 0x0, 0x54, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2040400) r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)}], 0x1, 0xe7b, 0x0, 0x1) syz_open_dev$sg(0x0, 0x0, 0x401) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000b87f000000000000000000000000000000000000000000000000070000002e0b0000090000000000000001000000000000000100000000000000ff00eaffffff0000000000000000000000000000000000000000000000000000ff0100006a6800000900000000000000040000000000000007000000000000000400"/248]) ptrace(0x10, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 268.135486ms ago: executing program 2 (id=182): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001000000000000073000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xffffcca6}, [@generic={0x9, 0xc, 0x3, 0x4, 0x40}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000400)='GPL\x00', 0x5, 0xfa, &(0x7f0000000440)=""/250, 0x41000, 0x25, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xf, 0x0, 0x2}, 0x10, 0x1188c, 0xffffffffffffffff, 0x1, &(0x7f00000005c0)=[r0, r2, r2], &(0x7f0000000600)=[{0x5, 0x2, 0x10, 0xb}], 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40010) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) faccessat2(r10, &(0x7f0000001400)='\x00', 0x0, 0x1100) r11 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in=@private=0xa010102, 0x4e24, 0x0, 0x4e21, 0x3, 0xa, 0xa0, 0x20, 0x0, 0x0, r11}, {0x7, 0x3, 0xfffffffffffff0d3, 0xffffffffffffffff, 0x8, 0xc, 0x9, 0xbb}, {0xffffffffffffc52d, 0x8, 0x1ff, 0x63}, 0x9, 0x6e6bb2, 0x2, 0x1, 0x1, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3500, 0x0, 0x3, 0x0, 0xc, 0x1, 0x6}}, 0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r13) sendmsg$nl_xfrm(r10, &(0x7f0000000440)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000b40)=ANY=[@ANYBLOB="440300001b0020002abd7000fddbdf25fe880000000000000000000000000001000000000000000000000000000000004e21c6e84e2300000a00a08000000000", @ANYRES8=r13, @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="00000000000027856193637d85de0000ffffffff00000000ffffffffffffffff050b000000000000df00000000000000a755163ee89f0500000000000000050000000000000080c300d7060618b07d3ed2000000000000001000000000000032db000000000000400000000000000008000000bd6b6e00020101030000000028001700030000002dbd700028bd70002bbd700025bd7000ff0000000101000000f8fffffffeffff0800180001000000e9d360df06bd7a8be85fe75b7a5b26e51a7220d593bf2d53c686a6ef6607fb67014cf39084068e4b48254d9b3a0ac8d020e6eeb1e61f448095ed3ee3d0d24d70989354a6cfe7ee"], 0x344}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r14 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_generic(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r15}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x4000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_user}, {@directio}, {@aname={'aname', 0x3d, ')\\*.0^\'*($^!@'}}], [{@euid_lt={'euid<', r8}}, {@measure}, {@dont_hash}, {@euid_lt={'euid<', r9}}, {@uid_lt={'uid<', r11}}, {@fowner_eq={'fowner', 0x3d, r15}}]}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x5, &(0x7f0000000180)=@raw=[@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000000200)='GPL\x00', 0x8, 0xb7, &(0x7f0000000240)=""/183, 0x41000, 0x10, '\x00', 0x0, @fallback=0x29, r4, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r5, 0x3, &(0x7f00000007c0)=[r7, r0, r16, r0, r0], &(0x7f0000000800)=[{0x3, 0x4, 0x9, 0x6}, {0x0, 0x5, 0xe, 0x7}, {0x2, 0x4, 0x2}], 0x10, 0x5, @void, @value}, 0x94) 217.877057ms ago: executing program 2 (id=183): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_config_ext={0x7}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0x3) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800fd1b26bd7000ffdbdf250200010004000000080001000100000004000400"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, 0x0, 0x8000000003f, &(0x7f0000000480)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63de05df6ab2e1fc8efb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b302eafd9cdf36d6c8fcd69571ac1b74e053") ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) listen(r2, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) 216.957907ms ago: executing program 3 (id=184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) pselect6(0xfe0b, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2000000}, 0x0, &(0x7f00000006c0)={0x77359400}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x30, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x40) 173.025498ms ago: executing program 1 (id=185): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=ANY=[], 0x38) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r1, 0xffffffffffffffff, 0x0) 102.634419ms ago: executing program 4 (id=186): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400000045"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x4) fcntl$notify(r5, 0x402, 0x300) setns(r5, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090829bd7000030000000100000008000100", @ANYRES32=r6, @ANYBLOB="440002804000010024000a650fa791e4cbe08879000006000000000000000000000000000000000000000000050003000e000000080004000400000008"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4004004) 55.625499ms ago: executing program 1 (id=187): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@quota}]}, 0x3, 0x438, &(0x7f0000000d80)="$eJzs28tvG0UYAPBv10lLXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1C3QU2QaBVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m7iOHbimCRO8e8nbTKzO87M592xZ3ayAfSsoexHErE/In6PiIFadmWBodqvO4vzE38vzk8kUam89VdSLXd7cX6iKFq8bl+R6YtIP0viaJN6Z69euzheLk9dyfMjc5feH5m9eu256UvjF6YuTF0eO3v29KnRF86MPb8pcWZx3T7y0cyxw6+9c+ONiXM33v3526SIvyGO9SR9bRUbWuvgk5VKu9XdFQ7Updt8f9gBSrVuGv3V/j8QpVg+eQPx6qddbRywpSqVSuWB1ocXKsD/WBLdbgHQHcUXfTb/LbZtGnrsCLdeqk2Asrjv5FvtSF+keZn+hvntZhqKiHML/3yVbbHB+xAAAJ34Phv/PNts/JdG/X2he/M1lMGIuC8iDkbEmYg4FBH3R1TLPhgRD22w/sZFktXjn/RmR4G1KRv/vZivba0c/xWjvxgs5bkD1fj7k/PT5amT+XtyIvp3Z/nRNer44ZXfvmh1rH78l21Z/cVYMG/Hzb7dK18zOT43/l9irnfrk4gjfc3iT5ZWApKIOBwRR5r9gXT9Oqaf/uZYq2Prx7+GTVhnqnwd8VTt/C9EQ/yFZO31yZF7ojx1cqS4Klb75dfrb7aqv+P4N2mNLTv/e5te/0vxDyb167WzG6/j+h+ft5zTdHr970reXrHvw/G5uSujEbuS12uNrt8/1lBubLl8Fv+J4837/8FYfieORkR2ET8cEY9ExKN52x+LiMcj4vga8f/08hPvdR7/1srin9zQ+V9O7IrGPc0TpYs/frei0sGNxJ+d/9PV1Il8Tzuff+20q7OrGQAAAO4+aUTsjyQdXkqn6fBw7X/4D8XetDwzO/fM+ZkPLk/WnhEYjP60uNM1UHc/dDSf1hf5sYb8qfy+8ZelPdX88MRMebLbwUOP29ei/2f+LHW7dcCW87wW9C79H3qX/g+9S/+H3tWk/+/pRjuA7dfs+//jLrQD2H4N/d+yH/QQ83/oXfo/9C79H3rS7J5Y/yF5CYlViUh3RDMktijR7U8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzfFvAAAA//9xT+bg") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="09000000150000010000000080001700000000ed", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) unlink(&(0x7f0000000180)='./file1\x00') 0s ago: executing program 5 (id=188): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80400, 0x0) close(r1) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) (async) fcntl$lock(r2, 0x25, &(0x7f00000003c0)={0x0, 0x0, 0x80, 0x7}) (async) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x80000000}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x100000004}, 0x16) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r9}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async) r11 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) pwritev(r11, &(0x7f0000000800)=[{&(0x7f0000000280)="ebcadc6e7535e427cf9730b6f3ca21b2a12c03a279932fd3a0e91c09d5527badb6cf55adc3a2380bd50dabe43f1822d31a4cb9615404f0450b1189a197ba344d2decdafbb96d99bd99a999d37e064e85d24610358d77014d3df1e4e9403a7ce20907", 0x62}, {0x0}, {&(0x7f00000003c0)="4c55f2a90ceab58bdcb365c92ea1b77163356ab4ba28e8f50b7a10e94f66776222fd3b5396ee4fbc059d201611002f3b33614d2f406e3c34666ef0faf2e69c27810d1866b961a3e36f65d97995c30491248b2b88283ac6be4e5723dba8936ba653982d353d4efd180a88433ae4b16e87bcba11d107e20c70f2650d440eac96b31005b6ae6bef62176b5c5b7b89db036d152a5f757185873b98e1999af2e0747e1e062dfbfaa835", 0xa7}, {&(0x7f0000000480)="1f421e9d68d5a5bc60c0246f83be96e5ead3622e397a6f72507d7a3148713a3fae6b96750bfff887ce04434ba7971546e0c218dddfd99110e2057c7b1b4a0c42a1fe43473fc73f6180757a7b157efe52dcf7d1cac48855c24225bd74af", 0x5d}, {0x0}, {&(0x7f0000000700)="adc48a164199e5d1138b4b7084101b0e2c7ca080e8040f5173bc7543494f4544375fedba0e9694494df1c8b875f25e2656a45b5c015316a0092ebc38d9cd78e86f5d7960c2ce7b98b70e810b180ecf4f659538c877d3b1e873d4ed69ae659f256ea65e669215be80d4aced432d7e0cc8f36e3abad51831d5d86aa7efe150159557443c2146e2bd115596404afaa89276c5f31225f64abfdbb9ac4716c456222ec3d8138c898e87c3ec69faa04f545f758ee8479401f5b7bf0de61bf2", 0xbc}], 0x6, 0x3, 0x569) (async) splice(r10, &(0x7f0000000880)=0x77, r10, &(0x7f00000008c0)=0xe, 0x8, 0x3) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r12, 0x0, 0x2}, 0x18) (async) unshare(0x2040400) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 17.871591][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 17.871608][ T29] audit: type=1400 audit(1745062321.466:76): avc: denied { transition } for pid=3180 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.876141][ T29] audit: type=1400 audit(1745062321.466:77): avc: denied { noatsecure } for pid=3180 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.878912][ T29] audit: type=1400 audit(1745062321.466:78): avc: denied { write } for pid=3180 comm="sh" path="pipe:[536]" dev="pipefs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 17.882368][ T29] audit: type=1400 audit(1745062321.466:79): avc: denied { rlimitinh } for pid=3180 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.885200][ T29] audit: type=1400 audit(1745062321.466:80): avc: denied { siginh } for pid=3180 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.858818][ T29] audit: type=1400 audit(1745062325.456:81): avc: denied { read } for pid=2987 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.160' (ED25519) to the list of known hosts. [ 25.881997][ T29] audit: type=1400 audit(1745062329.476:82): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.883063][ T3289] cgroup: Unknown subsys name 'net' [ 25.905023][ T29] audit: type=1400 audit(1745062329.476:83): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.932427][ T29] audit: type=1400 audit(1745062329.506:84): avc: denied { unmount } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.065796][ T3289] cgroup: Unknown subsys name 'cpuset' [ 26.071979][ T3289] cgroup: Unknown subsys name 'rlimit' [ 26.164138][ T29] audit: type=1400 audit(1745062329.756:85): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.187528][ T29] audit: type=1400 audit(1745062329.766:86): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.208095][ T29] audit: type=1400 audit(1745062329.766:87): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.228494][ T29] audit: type=1400 audit(1745062329.766:88): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.235703][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.248796][ T29] audit: type=1400 audit(1745062329.766:89): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.282223][ T29] audit: type=1400 audit(1745062329.766:90): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.305513][ T29] audit: type=1400 audit(1745062329.856:91): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.335156][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.467177][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 27.507613][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 27.563024][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.570200][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.577361][ T3302] bridge_slave_0: entered allmulticast mode [ 27.583841][ T3302] bridge_slave_0: entered promiscuous mode [ 27.597633][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 27.606610][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.613741][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.620947][ T3302] bridge_slave_1: entered allmulticast mode [ 27.627330][ T3302] bridge_slave_1: entered promiscuous mode [ 27.653824][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.679104][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.711950][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.719145][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.726372][ T3301] bridge_slave_0: entered allmulticast mode [ 27.732869][ T3301] bridge_slave_0: entered promiscuous mode [ 27.741805][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.748910][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.756184][ T3301] bridge_slave_1: entered allmulticast mode [ 27.762556][ T3301] bridge_slave_1: entered promiscuous mode [ 27.771961][ T3302] team0: Port device team_slave_0 added [ 27.792162][ T3302] team0: Port device team_slave_1 added [ 27.805418][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 27.849079][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.856429][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.863606][ T3317] bridge_slave_0: entered allmulticast mode [ 27.870141][ T3317] bridge_slave_0: entered promiscuous mode [ 27.877518][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.886650][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.893730][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.900968][ T3317] bridge_slave_1: entered allmulticast mode [ 27.907435][ T3317] bridge_slave_1: entered promiscuous mode [ 27.913822][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.920873][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.946836][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.966370][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.980277][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.987357][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.013338][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.055540][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.065585][ T3301] team0: Port device team_slave_0 added [ 28.071908][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 28.080466][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.087574][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.095344][ T3304] bridge_slave_0: entered allmulticast mode [ 28.101724][ T3304] bridge_slave_0: entered promiscuous mode [ 28.109373][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.123711][ T3301] team0: Port device team_slave_1 added [ 28.144305][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.151457][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.158741][ T3304] bridge_slave_1: entered allmulticast mode [ 28.165352][ T3304] bridge_slave_1: entered promiscuous mode [ 28.177329][ T3317] team0: Port device team_slave_0 added [ 28.189634][ T3302] hsr_slave_0: entered promiscuous mode [ 28.195753][ T3302] hsr_slave_1: entered promiscuous mode [ 28.213535][ T3317] team0: Port device team_slave_1 added [ 28.229451][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.236507][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.262433][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.287812][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.294811][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.320934][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.332314][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.339346][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.365256][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.376320][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.383264][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.409271][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.425587][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.452133][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.473136][ T3304] team0: Port device team_slave_0 added [ 28.483855][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.491001][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.498250][ T3309] bridge_slave_0: entered allmulticast mode [ 28.504588][ T3309] bridge_slave_0: entered promiscuous mode [ 28.522618][ T3304] team0: Port device team_slave_1 added [ 28.544232][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.551373][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.558638][ T3309] bridge_slave_1: entered allmulticast mode [ 28.566963][ T3309] bridge_slave_1: entered promiscuous mode [ 28.575222][ T3317] hsr_slave_0: entered promiscuous mode [ 28.581256][ T3317] hsr_slave_1: entered promiscuous mode [ 28.587220][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.594788][ T3317] Cannot create hsr debugfs directory [ 28.624344][ T3301] hsr_slave_0: entered promiscuous mode [ 28.630394][ T3301] hsr_slave_1: entered promiscuous mode [ 28.636377][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.643950][ T3301] Cannot create hsr debugfs directory [ 28.652417][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.659494][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.685514][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.717080][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.724070][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.750132][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.762307][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.787834][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.830278][ T3309] team0: Port device team_slave_0 added [ 28.856122][ T3309] team0: Port device team_slave_1 added [ 28.866764][ T3304] hsr_slave_0: entered promiscuous mode [ 28.872740][ T3304] hsr_slave_1: entered promiscuous mode [ 28.878660][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.886256][ T3304] Cannot create hsr debugfs directory [ 28.928791][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.935868][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.961883][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.987281][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.994281][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.020293][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.081622][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.092155][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.108065][ T3309] hsr_slave_0: entered promiscuous mode [ 29.113970][ T3309] hsr_slave_1: entered promiscuous mode [ 29.120075][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.127679][ T3309] Cannot create hsr debugfs directory [ 29.135551][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.144278][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.174777][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.195293][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.204245][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.223980][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.264950][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.287048][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.296843][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.305922][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.342188][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.355345][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.364167][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.373367][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.388763][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.398084][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.414074][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.443928][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.451068][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.467881][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.475004][ T388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.485135][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.493993][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.503276][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.514488][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.527684][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.542101][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.552588][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.568885][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.576051][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.586800][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.593867][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.617227][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.627649][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.684141][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.717918][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.731968][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.743146][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.752515][ T268] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.759733][ T268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.771597][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.785643][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.796199][ T268] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.803818][ T268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.812889][ T268] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.819992][ T268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.839412][ T268] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.846523][ T268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.875956][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.902404][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.920558][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.947443][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.954607][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.967968][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.975073][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.990035][ T3302] veth0_vlan: entered promiscuous mode [ 30.000035][ T3301] veth0_vlan: entered promiscuous mode [ 30.039108][ T3302] veth1_vlan: entered promiscuous mode [ 30.049401][ T3301] veth1_vlan: entered promiscuous mode [ 30.067084][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.080243][ T3301] veth0_macvtap: entered promiscuous mode [ 30.088118][ T3301] veth1_macvtap: entered promiscuous mode [ 30.112812][ T3302] veth0_macvtap: entered promiscuous mode [ 30.125947][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.136594][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.145849][ T3302] veth1_macvtap: entered promiscuous mode [ 30.165696][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.178501][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.189045][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.202932][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.211680][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.222220][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.232692][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.241162][ T3301] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.250015][ T3301] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.258894][ T3301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.267711][ T3301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.288570][ T3302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.297444][ T3302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.306299][ T3302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.315104][ T3302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.352441][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.394769][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.419413][ T3304] veth0_vlan: entered promiscuous mode [ 30.428900][ T3317] veth0_vlan: entered promiscuous mode [ 30.442575][ T3304] veth1_vlan: entered promiscuous mode [ 30.466172][ T3317] veth1_vlan: entered promiscuous mode [ 30.480333][ T3437] loop1: detected capacity change from 0 to 1024 [ 30.480585][ T3304] veth0_macvtap: entered promiscuous mode [ 30.493647][ T3437] EXT4-fs: Mount option(s) incompatible with ext2 [ 30.537145][ T3304] veth1_macvtap: entered promiscuous mode [ 30.551728][ T3440] loop3: detected capacity change from 0 to 2048 [ 30.552639][ T3437] tap0: tun_chr_ioctl cmd 35111 [ 30.584508][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.595075][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.604945][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.615583][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.639465][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.649534][ T3317] veth0_macvtap: entered promiscuous mode [ 30.657649][ T3317] veth1_macvtap: entered promiscuous mode [ 30.678192][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.688685][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.698537][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.709001][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.720628][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.728062][ T3309] veth0_vlan: entered promiscuous mode [ 30.736108][ T3309] veth1_vlan: entered promiscuous mode [ 30.748980][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.759486][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.769456][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.779985][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.789884][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.800439][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.821281][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.829971][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.840497][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.850370][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.860822][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.870660][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.881229][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.891726][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.897761][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 30.897779][ T29] audit: type=1400 audit(1745062334.486:134): avc: denied { create } for pid=3444 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.913162][ T3317] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.924396][ T29] audit: type=1400 audit(1745062334.486:135): avc: denied { ioctl } for pid=3444 comm="syz.3.6" path="socket:[3809]" dev="sockfs" ino=3809 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.933119][ T3317] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.966565][ T3317] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.975321][ T3317] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.998151][ T3304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.006957][ T3304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.018189][ T3304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.027033][ T3304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.066863][ T3309] veth0_macvtap: entered promiscuous mode [ 31.105261][ T3309] veth1_macvtap: entered promiscuous mode [ 31.139511][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.150124][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.160055][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.170523][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.180446][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.191012][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.201062][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.211674][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.224897][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.277855][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.277849][ T29] audit: type=1326 audit(1745062334.866:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3453 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b51fe169 code=0x7ffc0000 [ 31.277891][ T29] audit: type=1326 audit(1745062334.866:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3453 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b51fe169 code=0x7ffc0000 [ 31.288442][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.288457][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.288471][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.288479][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.288505][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.311641][ T29] audit: type=1326 audit(1745062334.866:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3453 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc5b51fe169 code=0x7ffc0000 [ 31.334570][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.334590][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.336480][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.440654][ T3456] tmpfs: Unknown parameter 'úÿÿÿÿÿÿÿks' [ 31.471910][ T3461] netlink: 'syz.4.5': attribute type 3 has an invalid length. [ 31.497360][ T3309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.505418][ T29] audit: type=1326 audit(1745062334.956:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3453 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b51fe169 code=0x7ffc0000 [ 31.506843][ T3309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.529941][ T29] audit: type=1326 audit(1745062334.956:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3453 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b51fe169 code=0x7ffc0000 [ 31.529985][ T29] audit: type=1326 audit(1745062334.956:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3458 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc5b5230a25 code=0x7ffc0000 [ 31.538767][ T3309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.561727][ T29] audit: type=1326 audit(1745062334.956:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3453 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5b51fe169 code=0x7ffc0000 [ 31.584778][ T3309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.625976][ T29] audit: type=1326 audit(1745062334.956:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3453 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b51fe169 code=0x7ffc0000 [ 31.763179][ T9] kernel write not supported for file /uhid (pid: 9 comm: kworker/0:0) [ 31.795167][ T3470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8'. [ 31.833684][ T3474] netlink: 596 bytes leftover after parsing attributes in process `syz.1.10'. [ 31.865037][ T3474] futex_wake_op: syz.1.10 tries to shift op by -1; fix this program [ 31.891560][ T3477] netlink: 596 bytes leftover after parsing attributes in process `syz.2.11'. [ 31.903603][ T3477] futex_wake_op: syz.2.11 tries to shift op by -1; fix this program [ 31.928027][ T3482] capability: warning: `syz.0.12' uses deprecated v2 capabilities in a way that may be insecure [ 31.963103][ T3482] loop0: detected capacity change from 0 to 764 [ 31.977206][ T3482] iso9660: Unknown parameter 'r¨ïŽÍ„ÎQi— 7ÙŠÿã' [ 32.003628][ T3485] loop2: detected capacity change from 0 to 1764 [ 32.091811][ T3485] loop2: detected capacity change from 0 to 1764 [ 32.098793][ T3490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3490 comm=syz.3.16 [ 32.201758][ T3496] syz.1.18 uses obsolete (PF_INET,SOCK_PACKET) [ 32.209446][ T3495] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 32.209446][ T3495] program syz.2.17 not setting count and/or reply_len properly [ 32.392781][ T3516] SELinux: policydb version 2115402537 does not match my version range 15-34 [ 32.418904][ T3516] SELinux: failed to load policy [ 32.744065][ T3528] loop3: detected capacity change from 0 to 1764 [ 32.798849][ T3528] loop3: detected capacity change from 0 to 1764 [ 32.813648][ T3532] loop0: detected capacity change from 0 to 1764 [ 32.875851][ T3532] loop0: detected capacity change from 0 to 1764 [ 32.879851][ T3536] loop3: detected capacity change from 0 to 512 [ 32.882301][ T3534] netlink: 596 bytes leftover after parsing attributes in process `syz.2.26'. [ 32.903018][ T3536] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 32.912496][ T3536] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 32.929885][ T3536] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 32.947790][ T3540] netlink: 596 bytes leftover after parsing attributes in process `syz.0.28'. [ 32.966406][ T3540] futex_wake_op: syz.0.28 tries to shift op by -1; fix this program [ 32.968650][ T3536] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 33.000024][ T3534] futex_wake_op: syz.2.26 tries to shift op by -1; fix this program [ 33.009006][ T3536] System zones: 0-2, 18-18, 34-34 [ 33.048248][ T3536] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 33.074348][ T3536] EXT4-fs (loop3): 1 truncate cleaned up [ 33.082636][ T3536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.116004][ T3547] loop2: detected capacity change from 0 to 1024 [ 33.151911][ T3547] EXT4-fs: Mount option(s) incompatible with ext2 [ 33.226305][ T3547] tap0: tun_chr_ioctl cmd 35111 [ 33.243484][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.353443][ T3554] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 33.353443][ T3554] program syz.4.33 not setting count and/or reply_len properly [ 33.836092][ T3563] loop3: detected capacity change from 0 to 512 [ 33.859218][ T3563] ======================================================= [ 33.859218][ T3563] WARNING: The mand mount option has been deprecated and [ 33.859218][ T3563] and is ignored by this kernel. Remove the mand [ 33.859218][ T3563] option from the mount to silence this warning. [ 33.859218][ T3563] ======================================================= [ 33.939014][ T3566] tipc: Started in network mode [ 33.943926][ T3566] tipc: Node identity _, cluster identity 4711 [ 33.953850][ T3563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.966763][ T3563] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.987712][ T3563] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.36: corrupted inode contents [ 34.009705][ T3563] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.36: mark_inode_dirty error [ 34.026628][ T3563] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.36: corrupted inode contents [ 34.040943][ T3570] batadv_slave_0: entered promiscuous mode [ 34.057387][ T3570] batadv_slave_0: left promiscuous mode [ 34.063601][ T3563] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.36: mark_inode_dirty error [ 34.114879][ T3578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'. [ 34.123884][ T3544] syz.0.30 (3544) used greatest stack depth: 6736 bytes left [ 34.134049][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.143383][ T3578] bond0: (slave bond_slave_0): Releasing backup interface [ 34.547778][ T3589] loop1: detected capacity change from 0 to 164 [ 34.595518][ T3589] process 'syz.1.43' launched '/dev/fd/4' with NULL argv: empty string added [ 34.667255][ T3589] syz.1.43: attempt to access beyond end of device [ 34.667255][ T3589] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 34.708405][ T3589] syz.1.43: attempt to access beyond end of device [ 34.708405][ T3589] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 34.760992][ T3600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.47'. [ 34.779253][ T3600] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 34.785812][ T3600] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 34.793313][ T3600] vhci_hcd vhci_hcd.0: Device attached [ 34.802313][ T3601] loop1: detected capacity change from 0 to 128 [ 34.809183][ T3603] loop0: detected capacity change from 0 to 1024 [ 34.854463][ T3607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.49'. [ 34.854822][ T3603] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.863403][ T3607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.49'. [ 34.881240][ T3601] syz.1.46: attempt to access beyond end of device [ 34.881240][ T3601] loop1: rw=0, sector=121, nr_sectors = 120 limit=128 [ 34.903831][ T58] kworker/u8:4: attempt to access beyond end of device [ 34.903831][ T58] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 34.929369][ T3603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.974139][ T3603] netem: change failed [ 34.994443][ T3615] FAULT_INJECTION: forcing a failure. [ 34.994443][ T3615] name failslab, interval 1, probability 0, space 0, times 0 [ 35.007169][ T3615] CPU: 1 UID: 0 PID: 3615 Comm: syz.1.50 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 35.007252][ T3615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 35.007271][ T3615] Call Trace: [ 35.007280][ T3615] [ 35.007289][ T3615] dump_stack_lvl+0xf6/0x150 [ 35.007322][ T3615] dump_stack+0x15/0x1a [ 35.007339][ T3615] should_fail_ex+0x261/0x270 [ 35.007403][ T3615] should_failslab+0x8f/0xb0 [ 35.007424][ T3615] kmem_cache_alloc_noprof+0x59/0x340 [ 35.007450][ T3615] ? skb_clone+0x154/0x1f0 [ 35.007474][ T3615] skb_clone+0x154/0x1f0 [ 35.007519][ T3615] __netlink_deliver_tap+0x2bd/0x4f0 [ 35.007549][ T3615] netlink_sendskb+0x12c/0x150 [ 35.007587][ T3615] netlink_unicast+0x296/0x6c0 [ 35.007674][ T3615] netlink_ack+0x4b9/0x4f0 [ 35.007700][ T3615] netlink_rcv_skb+0x19f/0x230 [ 35.007797][ T3615] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 35.007838][ T3615] rtnetlink_rcv+0x1c/0x30 [ 35.007863][ T3615] netlink_unicast+0x605/0x6c0 [ 35.007972][ T3615] netlink_sendmsg+0x609/0x720 [ 35.008009][ T3615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 35.008053][ T3615] __sock_sendmsg+0x140/0x180 [ 35.008081][ T3615] ____sys_sendmsg+0x350/0x4e0 [ 35.008105][ T3615] __sys_sendmsg+0x1a0/0x240 [ 35.008176][ T3615] __x64_sys_sendmsg+0x46/0x50 [ 35.008197][ T3615] x64_sys_call+0x26f3/0x2e10 [ 35.008218][ T3615] do_syscall_64+0xc9/0x1a0 [ 35.008312][ T3615] ? clear_bhb_loop+0x25/0x80 [ 35.008338][ T3615] ? clear_bhb_loop+0x25/0x80 [ 35.008449][ T3615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.008474][ T3615] RIP: 0033:0x7f057260e169 [ 35.008495][ T3615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.008511][ T3615] RSP: 002b:00007f0570c77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.008528][ T3615] RAX: ffffffffffffffda RBX: 00007f0572835fa0 RCX: 00007f057260e169 [ 35.008540][ T3615] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 35.008550][ T3615] RBP: 00007f0570c77090 R08: 0000000000000000 R09: 0000000000000000 [ 35.008563][ T3615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.008590][ T3615] R13: 0000000000000000 R14: 00007f0572835fa0 R15: 00007ffdfefc70a8 [ 35.008608][ T3615] [ 35.014882][ T1049] vhci_hcd: vhci_device speed not set [ 35.255230][ T3612] loop2: detected capacity change from 0 to 8192 [ 35.301366][ T3285] loop2: p1 p3 p4 [ 35.311272][ T3285] loop2: p1 size 8390912 extends beyond EOD, truncated [ 35.374497][ T3285] loop2: p3 size 589824 extends beyond EOD, truncated [ 35.380640][ T3619] loop1: detected capacity change from 0 to 8192 [ 35.407951][ T3304] EXT4-fs warning (device loop0): empty_inline_dir:1774: bad inline directory (dir #12) - no `..' [ 35.434381][ T3304] EXT4-fs warning (device loop0): empty_inline_dir:1774: bad inline directory (dir #12) - no `..' [ 35.443771][ T3623] loop3: detected capacity change from 0 to 1024 [ 35.456134][ T3612] loop2: p1 p3 p4 [ 35.460113][ T3612] loop2: p1 size 8390912 extends beyond EOD, truncated [ 35.487527][ T3623] EXT4-fs: Mount option(s) incompatible with ext2 [ 35.502038][ T3623] tap0: tun_chr_ioctl cmd 35111 [ 35.516496][ T3304] EXT4-fs warning (device loop0): empty_inline_dir:1774: bad inline directory (dir #12) - no `..' [ 35.528214][ T3627] futex_wake_op: syz.1.55 tries to shift op by -1; fix this program [ 35.529679][ T3612] loop2: p3 size 589824 extends beyond EOD, truncated [ 35.565009][ T3304] EXT4-fs warning (device loop0): empty_inline_dir:1774: bad inline directory (dir #12) - no `..' [ 35.611592][ T3304] EXT4-fs warning (device loop0): empty_inline_dir:1774: bad inline directory (dir #12) - no `..' [ 35.626428][ T1049] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 35.637421][ T3304] EXT4-fs warning (device loop0): empty_inline_dir:1774: bad inline directory (dir #12) - no `..' [ 35.675444][ T3631] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 35.675444][ T3631] program syz.2.57 not setting count and/or reply_len properly [ 35.693028][ T3304] EXT4-fs warning (device loop0): empty_inline_dir:1774: bad inline directory (dir #12) - no `..' [ 35.712522][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 35.715492][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 35.724025][ T3442] udevd[3442]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 35.742614][ T3304] EXT4-fs warning (device loop0): empty_inline_dir:1774: bad inline directory (dir #12) - no `..' [ 35.754267][ T3304] EXT4-fs warning (device loop0): empty_inline_dir:1774: bad inline directory (dir #12) - no `..' [ 35.776735][ T3304] EXT4-fs warning (device loop0): empty_inline_dir:1774: bad inline directory (dir #12) - no `..' [ 35.919982][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 35.953482][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 35.963871][ T3639] netlink: 'syz.2.59': attribute type 16 has an invalid length. [ 35.971631][ T3639] netlink: 'syz.2.59': attribute type 17 has an invalid length. [ 35.983865][ T3604] vhci_hcd: connection reset by peer [ 35.986547][ T3442] udevd[3442]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 35.990826][ T37] vhci_hcd: stop threads [ 36.003216][ T37] vhci_hcd: release socket [ 36.007813][ T37] vhci_hcd: disconnect device [ 36.037694][ T3639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 36.156778][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.170136][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.203371][ T3644] loop3: detected capacity change from 0 to 512 [ 36.213189][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 36.213206][ T29] audit: type=1400 audit(1745062339.806:421): avc: denied { mounton } for pid=3643 comm="+}[@" path="/13/file0" dev="tmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 36.232060][ T3648] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 36.232060][ T3648] program syz.1.62 not setting count and/or reply_len properly [ 36.262060][ T3644] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 288: padding at end of block bitmap is not set [ 36.272292][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.287733][ T3644] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 36.306339][ T3644] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm +}[@: attempt to clear invalid blocks 1024 len 1 [ 36.323679][ T29] audit: type=1400 audit(1745062339.916:422): avc: denied { mounton } for pid=3652 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 36.347296][ T3644] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm +}[@: invalid indirect mapped block 1819239214 (level 0) [ 36.372074][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.375384][ T3656] loop2: detected capacity change from 0 to 512 [ 36.383796][ T3657] loop1: detected capacity change from 0 to 764 [ 36.388895][ T3644] EXT4-fs (loop3): 1 truncate cleaned up [ 36.402766][ T3656] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 36.407463][ T3644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.425300][ T3644] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.442915][ T3657] Cannot find set identified by id 0 to match [ 36.443638][ T29] audit: type=1400 audit(1745062340.026:423): avc: denied { getopt } for pid=3653 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.468860][ T29] audit: type=1400 audit(1745062340.036:424): avc: denied { read } for pid=3655 comm="syz.1.65" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 36.491800][ T29] audit: type=1400 audit(1745062340.036:425): avc: denied { open } for pid=3655 comm="syz.1.65" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 36.492544][ T3662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 36.515240][ T29] audit: type=1400 audit(1745062340.036:426): avc: denied { create } for pid=3655 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.543151][ T29] audit: type=1400 audit(1745062340.036:427): avc: denied { setopt } for pid=3655 comm="syz.1.65" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.593660][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.614300][ T3662] mmap: syz.2.67 (3662) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.630448][ T3667] loop3: detected capacity change from 0 to 256 [ 36.639403][ T29] audit: type=1400 audit(1745062340.226:428): avc: denied { ioctl } for pid=3655 comm="syz.1.65" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 36.695573][ T3657] loop1: detected capacity change from 0 to 512 [ 36.711950][ T29] audit: type=1400 audit(1745062340.306:429): avc: denied { create } for pid=3666 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 36.731352][ T29] audit: type=1400 audit(1745062340.306:430): avc: denied { setopt } for pid=3666 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 36.764647][ T3657] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 36.774916][ T3657] EXT4-fs (loop1): orphan cleanup on readonly fs [ 36.781901][ T3657] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.65: Failed to acquire dquot type 1 [ 36.799111][ T3657] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.65: bg 0: block 40: padding at end of block bitmap is not set [ 36.832509][ T37] bridge_slave_1: left allmulticast mode [ 36.838387][ T37] bridge_slave_1: left promiscuous mode [ 36.844293][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.852600][ T3657] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 36.873730][ T3657] EXT4-fs (loop1): 1 truncate cleaned up [ 36.879979][ T37] bridge_slave_0: left allmulticast mode [ 36.885856][ T37] bridge_slave_0: left promiscuous mode [ 36.891747][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.897789][ T3657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.946086][ T1032] IPVS: starting estimator thread 0... [ 36.953052][ T3692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.72'. [ 37.038783][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.048380][ T3696] IPVS: using max 2448 ests per chain, 122400 per kthread [ 37.076145][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.097216][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.108214][ T37] bond0 (unregistering): Released all slaves [ 37.138064][ T3715] veth0_vlan: entered allmulticast mode [ 37.189186][ T37] hsr_slave_0: left promiscuous mode [ 37.199277][ T37] hsr_slave_1: left promiscuous mode [ 37.215365][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.222875][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.255674][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.263455][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.291226][ T37] veth1_macvtap: left promiscuous mode [ 37.306422][ T37] veth0_macvtap: left promiscuous mode [ 37.315190][ T37] veth1_vlan: left promiscuous mode [ 37.320523][ T37] veth0_vlan: left promiscuous mode [ 37.481242][ T37] team0 (unregistering): Port device team_slave_1 removed [ 37.501798][ T37] team0 (unregistering): Port device team_slave_0 removed [ 37.601621][ T3740] loop3: detected capacity change from 0 to 1024 [ 37.645732][ T3748] FAULT_INJECTION: forcing a failure. [ 37.645732][ T3748] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 37.654879][ T3652] chnl_net:caif_netlink_parms(): no params data found [ 37.658850][ T3748] CPU: 0 UID: 0 PID: 3748 Comm: syz.4.85 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 37.658881][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 37.658895][ T3748] Call Trace: [ 37.658902][ T3748] [ 37.658911][ T3748] dump_stack_lvl+0xf6/0x150 [ 37.658943][ T3748] dump_stack+0x15/0x1a [ 37.659023][ T3748] should_fail_ex+0x261/0x270 [ 37.659054][ T3748] should_fail+0xb/0x10 [ 37.659080][ T3748] should_fail_usercopy+0x1a/0x20 [ 37.659142][ T3748] _copy_to_user+0x20/0xa0 [ 37.659180][ T3748] simple_read_from_buffer+0xb2/0x130 [ 37.659221][ T3748] proc_fail_nth_read+0x103/0x140 [ 37.659265][ T3748] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 37.659381][ T3748] vfs_read+0x1b2/0x710 [ 37.659402][ T3748] ? __rcu_read_unlock+0x4e/0x70 [ 37.659428][ T3748] ? __fget_files+0x186/0x1c0 [ 37.659457][ T3748] ksys_read+0xeb/0x1b0 [ 37.659481][ T3748] __x64_sys_read+0x42/0x50 [ 37.659504][ T3748] x64_sys_call+0x2a3b/0x2e10 [ 37.659565][ T3748] do_syscall_64+0xc9/0x1a0 [ 37.659597][ T3748] ? clear_bhb_loop+0x25/0x80 [ 37.659623][ T3748] ? clear_bhb_loop+0x25/0x80 [ 37.659681][ T3748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.659709][ T3748] RIP: 0033:0x7f2a3774cb7c [ 37.659728][ T3748] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 37.659750][ T3748] RSP: 002b:00007f2a35db7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 37.659773][ T3748] RAX: ffffffffffffffda RBX: 00007f2a37975fa0 RCX: 00007f2a3774cb7c [ 37.659788][ T3748] RDX: 000000000000000f RSI: 00007f2a35db70a0 RDI: 0000000000000004 [ 37.659803][ T3748] RBP: 00007f2a35db7090 R08: 0000000000000000 R09: 0000000000000000 [ 37.659818][ T3748] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 37.659879][ T3748] R13: 0000000000000000 R14: 00007f2a37975fa0 R15: 00007ffc025c4f58 [ 37.659902][ T3748] [ 37.780229][ T3740] EXT4-fs: Mount option(s) incompatible with ext2 [ 37.794402][ T3760] loop4: detected capacity change from 0 to 764 [ 37.898640][ T3760] Cannot find set identified by id 0 to match [ 37.948075][ T3760] loop4: detected capacity change from 0 to 512 [ 37.954961][ T3740] tap0: tun_chr_ioctl cmd 35111 [ 37.998701][ T3760] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 38.049466][ T3760] EXT4-fs (loop4): orphan cleanup on readonly fs [ 38.083545][ T3760] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.86: Failed to acquire dquot type 1 [ 38.101889][ T3652] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.109146][ T3652] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.116464][ T3652] bridge_slave_0: entered allmulticast mode [ 38.123077][ T3652] bridge_slave_0: entered promiscuous mode [ 38.136614][ T3760] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.86: bg 0: block 40: padding at end of block bitmap is not set [ 38.137310][ T3652] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.157904][ T3652] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.191934][ T3760] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 38.204783][ T3760] EXT4-fs (loop4): 1 truncate cleaned up [ 38.214478][ T3760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.230957][ T3652] bridge_slave_1: entered allmulticast mode [ 38.237849][ T3652] bridge_slave_1: entered promiscuous mode [ 38.281038][ T3652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.296308][ T3652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.335780][ T3795] loop1: detected capacity change from 0 to 512 [ 38.350560][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.357216][ T3795] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.372939][ T3652] team0: Port device team_slave_0 added [ 38.392596][ T3652] team0: Port device team_slave_1 added [ 38.416591][ T3795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.528187][ T3795] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.560119][ T3795] FAULT_INJECTION: forcing a failure. [ 38.560119][ T3795] name failslab, interval 1, probability 0, space 0, times 0 [ 38.572884][ T3795] CPU: 0 UID: 0 PID: 3795 Comm: syz.1.93 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 38.572989][ T3795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 38.573003][ T3795] Call Trace: [ 38.573010][ T3795] [ 38.573020][ T3795] dump_stack_lvl+0xf6/0x150 [ 38.573094][ T3795] dump_stack+0x15/0x1a [ 38.573133][ T3795] should_fail_ex+0x261/0x270 [ 38.573159][ T3795] should_failslab+0x8f/0xb0 [ 38.573189][ T3795] kmem_cache_alloc_noprof+0x59/0x340 [ 38.573278][ T3795] ? __es_insert_extent+0x563/0xed0 [ 38.573300][ T3795] __es_insert_extent+0x563/0xed0 [ 38.573324][ T3795] ext4_es_insert_extent+0x45d/0x1c60 [ 38.573351][ T3795] ext4_map_query_blocks+0x107/0x180 [ 38.573388][ T3795] ext4_map_blocks+0x246/0xd00 [ 38.573420][ T3795] ? selinux_file_open+0x356/0x3c0 [ 38.573443][ T3795] ? __rcu_read_unlock+0x4e/0x70 [ 38.573465][ T3795] ? avc_has_perm_noaudit+0x1cc/0x210 [ 38.573492][ T3795] ext4_getblk+0x121/0x550 [ 38.573534][ T3795] ext4_bread_batch+0x5b/0x360 [ 38.573584][ T3795] __ext4_find_entry+0x85b/0xf40 [ 38.573621][ T3795] ? kmem_cache_alloc_lru_noprof+0x236/0x330 [ 38.573654][ T3795] ? __d_alloc+0x3d/0x350 [ 38.573678][ T3795] ? d_set_d_op+0xa0/0x1f0 [ 38.573705][ T3795] ext4_lookup+0xbd/0x3a0 [ 38.573777][ T3795] lookup_one_qstr_excl+0xca/0x250 [ 38.573884][ T3795] do_unlinkat+0x148/0x4b0 [ 38.573920][ T3795] __x64_sys_unlink+0x2e/0x40 [ 38.574008][ T3795] x64_sys_call+0x2358/0x2e10 [ 38.574030][ T3795] do_syscall_64+0xc9/0x1a0 [ 38.574055][ T3795] ? clear_bhb_loop+0x25/0x80 [ 38.574077][ T3795] ? clear_bhb_loop+0x25/0x80 [ 38.574109][ T3795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.574131][ T3795] RIP: 0033:0x7f057260e169 [ 38.574148][ T3795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.574216][ T3795] RSP: 002b:00007f0570c77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 38.574237][ T3795] RAX: ffffffffffffffda RBX: 00007f0572835fa0 RCX: 00007f057260e169 [ 38.574250][ T3795] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 38.574262][ T3795] RBP: 00007f0570c77090 R08: 0000000000000000 R09: 0000000000000000 [ 38.574314][ T3795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.574326][ T3795] R13: 0000000000000000 R14: 00007f0572835fa0 R15: 00007ffdfefc70a8 [ 38.574346][ T3795] [ 38.597464][ T3795] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 38.844425][ T3652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.851455][ T3652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.877527][ T3652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.889477][ T3652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.896607][ T3652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.898292][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.922568][ T3652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.965260][ T3810] FAULT_INJECTION: forcing a failure. [ 38.965260][ T3810] name failslab, interval 1, probability 0, space 0, times 0 [ 38.977974][ T3810] CPU: 0 UID: 0 PID: 3810 Comm: syz.4.99 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 38.978072][ T3810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 38.978083][ T3810] Call Trace: [ 38.978090][ T3810] [ 38.978097][ T3810] dump_stack_lvl+0xf6/0x150 [ 38.978122][ T3810] dump_stack+0x15/0x1a [ 38.978176][ T3810] should_fail_ex+0x261/0x270 [ 38.978272][ T3810] should_failslab+0x8f/0xb0 [ 38.978297][ T3810] kmem_cache_alloc_noprof+0x59/0x340 [ 38.978405][ T3810] ? audit_log_start+0x37f/0x6e0 [ 38.978435][ T3810] audit_log_start+0x37f/0x6e0 [ 38.978474][ T3810] ? kstrtouint+0x7b/0xc0 [ 38.978501][ T3810] audit_seccomp+0x49/0x100 [ 38.978606][ T3810] __seccomp_filter+0x694/0x10e0 [ 38.978627][ T3810] ? vfs_write+0x669/0x950 [ 38.978667][ T3810] ? putname+0xe1/0x100 [ 38.978700][ T3810] __secure_computing+0x7e/0x150 [ 38.978724][ T3810] syscall_trace_enter+0xcf/0x1f0 [ 38.978752][ T3810] ? fpregs_assert_state_consistent+0x83/0xa0 [ 38.978788][ T3810] do_syscall_64+0xaa/0x1a0 [ 38.978812][ T3810] ? clear_bhb_loop+0x25/0x80 [ 38.978837][ T3810] ? clear_bhb_loop+0x25/0x80 [ 38.978925][ T3810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.978944][ T3810] RIP: 0033:0x7f2a3774e169 [ 38.978995][ T3810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.979095][ T3810] RSP: 002b:00007f2a35db7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 38.979143][ T3810] RAX: ffffffffffffffda RBX: 00007f2a37975fa0 RCX: 00007f2a3774e169 [ 38.979154][ T3810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.979209][ T3810] RBP: 00007f2a35db7090 R08: 0000000000000000 R09: 0000000000000000 [ 38.979220][ T3810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.979235][ T3810] R13: 0000000000000000 R14: 00007f2a37975fa0 R15: 00007ffc025c4f58 [ 38.979252][ T3810] [ 39.218233][ T3652] hsr_slave_0: entered promiscuous mode [ 39.224281][ T3652] hsr_slave_1: entered promiscuous mode [ 39.261583][ T3652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.270436][ T3652] Cannot create hsr debugfs directory [ 39.304904][ T3819] FAULT_INJECTION: forcing a failure. [ 39.304904][ T3819] name failslab, interval 1, probability 0, space 0, times 0 [ 39.317623][ T3819] CPU: 1 UID: 0 PID: 3819 Comm: syz.2.101 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 39.317655][ T3819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 39.317727][ T3819] Call Trace: [ 39.317735][ T3819] [ 39.317743][ T3819] dump_stack_lvl+0xf6/0x150 [ 39.317772][ T3819] dump_stack+0x15/0x1a [ 39.317839][ T3819] should_fail_ex+0x261/0x270 [ 39.317869][ T3819] should_failslab+0x8f/0xb0 [ 39.317897][ T3819] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 39.317996][ T3819] ? __d_alloc+0x3d/0x350 [ 39.318023][ T3819] __d_alloc+0x3d/0x350 [ 39.318046][ T3819] d_alloc_parallel+0x57/0xcb0 [ 39.318125][ T3819] ? selinux_inode_permission+0x358/0x430 [ 39.318167][ T3819] ? lockref_get_not_dead+0x120/0x1c0 [ 39.318204][ T3819] ? down_read+0x173/0x4c0 [ 39.318232][ T3819] __lookup_slow+0x8f/0x280 [ 39.318334][ T3819] lookup_slow+0x3c/0x60 [ 39.318362][ T3819] walk_component+0x204/0x240 [ 39.318536][ T3819] ? path_lookupat+0xf6/0x2a0 [ 39.318566][ T3819] path_lookupat+0x103/0x2a0 [ 39.318592][ T3819] filename_lookup+0x14b/0x340 [ 39.318772][ T3819] kern_path+0x39/0x130 [ 39.318805][ T3819] create_local_trace_uprobe+0x57/0x300 [ 39.318837][ T3819] perf_uprobe_init+0xc2/0x140 [ 39.318912][ T3819] perf_uprobe_event_init+0xe2/0x140 [ 39.318979][ T3819] perf_try_init_event+0xcd/0x530 [ 39.319001][ T3819] ? perf_event_alloc+0xaa0/0x1660 [ 39.319091][ T3819] perf_event_alloc+0xaab/0x1660 [ 39.319193][ T3819] __se_sys_perf_event_open+0x7f8/0x2220 [ 39.319224][ T3819] ? vfs_write+0x601/0x950 [ 39.319307][ T3819] ? putname+0xe1/0x100 [ 39.319343][ T3819] __x64_sys_perf_event_open+0x67/0x80 [ 39.319372][ T3819] x64_sys_call+0x27bb/0x2e10 [ 39.319403][ T3819] do_syscall_64+0xc9/0x1a0 [ 39.319506][ T3819] ? clear_bhb_loop+0x25/0x80 [ 39.319580][ T3819] ? clear_bhb_loop+0x25/0x80 [ 39.319606][ T3819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.319632][ T3819] RIP: 0033:0x7faf59bbe169 [ 39.319650][ T3819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.319666][ T3819] RSP: 002b:00007faf58227038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 39.319743][ T3819] RAX: ffffffffffffffda RBX: 00007faf59de5fa0 RCX: 00007faf59bbe169 [ 39.319757][ T3819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 39.319771][ T3819] RBP: 00007faf58227090 R08: 0000000000000000 R09: 0000000000000000 [ 39.319846][ T3819] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 39.319861][ T3819] R13: 0000000000000000 R14: 00007faf59de5fa0 R15: 00007ffc299ec7e8 [ 39.319897][ T3819] [ 39.588089][ T3815] loop3: detected capacity change from 0 to 2048 [ 39.608608][ T3815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.622066][ T3816] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 39.651025][ T3816] syzkaller1: entered promiscuous mode [ 39.656609][ T3816] syzkaller1: entered allmulticast mode [ 39.694133][ T3816] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 39.723010][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.809101][ T3856] loop2: detected capacity change from 0 to 512 [ 39.818856][ T3856] EXT4-fs: Ignoring removed orlov option [ 39.829332][ T3856] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.106: corrupted in-inode xattr: invalid ea_ino [ 39.844057][ T3858] FAULT_INJECTION: forcing a failure. [ 39.844057][ T3858] name failslab, interval 1, probability 0, space 0, times 0 [ 39.857264][ T3858] CPU: 1 UID: 0 PID: 3858 Comm: syz.1.98 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 39.857298][ T3858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 39.857310][ T3858] Call Trace: [ 39.857316][ T3858] [ 39.857324][ T3858] dump_stack_lvl+0xf6/0x150 [ 39.857348][ T3858] dump_stack+0x15/0x1a [ 39.857363][ T3858] should_fail_ex+0x261/0x270 [ 39.857466][ T3858] should_failslab+0x8f/0xb0 [ 39.857487][ T3858] __kmalloc_cache_noprof+0x55/0x320 [ 39.857516][ T3858] ? tcf_block_get_ext+0x408/0xbb0 [ 39.857576][ T3858] tcf_block_get_ext+0x408/0xbb0 [ 39.857649][ T3858] ? stack_depot_save_flags+0x7d0/0x8b0 [ 39.857671][ T3858] tcf_block_get+0x6b/0xa0 [ 39.857746][ T3858] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 39.857784][ T3858] sfq_init+0x83/0x1230 [ 39.857810][ T3858] ? netlink_rcv_skb+0x12f/0x230 [ 39.857831][ T3858] ? rtnetlink_rcv+0x1c/0x30 [ 39.857917][ T3858] ? netlink_unicast+0x605/0x6c0 [ 39.857946][ T3858] ? netlink_sendmsg+0x609/0x720 [ 39.857966][ T3858] ? __sock_sendmsg+0x140/0x180 [ 39.858000][ T3858] ? ____sys_sendmsg+0x350/0x4e0 [ 39.858025][ T3858] ? __sys_sendmsg+0x1a0/0x240 [ 39.858098][ T3858] ? __x64_sys_sendmsg+0x46/0x50 [ 39.858173][ T3858] ? x64_sys_call+0x26f3/0x2e10 [ 39.858201][ T3858] ? do_syscall_64+0xc9/0x1a0 [ 39.858228][ T3858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.858253][ T3858] ? qdisc_alloc+0x3d1/0x450 [ 39.858269][ T3858] ? __pfx_sfq_init+0x10/0x10 [ 39.858300][ T3858] qdisc_create+0x541/0x930 [ 39.858335][ T3858] tc_modify_qdisc+0xe13/0x14d0 [ 39.858404][ T3858] ? ns_capable+0x7d/0xb0 [ 39.858456][ T3858] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 39.858536][ T3858] rtnetlink_rcv_msg+0x6b7/0x740 [ 39.858592][ T3858] ? ref_tracker_free+0x3b8/0x420 [ 39.858615][ T3858] netlink_rcv_skb+0x12f/0x230 [ 39.858634][ T3858] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 39.858677][ T3858] rtnetlink_rcv+0x1c/0x30 [ 39.858709][ T3858] netlink_unicast+0x605/0x6c0 [ 39.858777][ T3858] netlink_sendmsg+0x609/0x720 [ 39.858879][ T3858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 39.858905][ T3858] __sock_sendmsg+0x140/0x180 [ 39.858954][ T3858] ____sys_sendmsg+0x350/0x4e0 [ 39.859034][ T3858] __sys_sendmsg+0x1a0/0x240 [ 39.859069][ T3858] __x64_sys_sendmsg+0x46/0x50 [ 39.859171][ T3858] x64_sys_call+0x26f3/0x2e10 [ 39.859194][ T3858] do_syscall_64+0xc9/0x1a0 [ 39.859223][ T3858] ? clear_bhb_loop+0x25/0x80 [ 39.859249][ T3858] ? clear_bhb_loop+0x25/0x80 [ 39.859336][ T3858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.859356][ T3858] RIP: 0033:0x7f057260e169 [ 39.859373][ T3858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.859392][ T3858] RSP: 002b:00007f0570c35038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.859437][ T3858] RAX: ffffffffffffffda RBX: 00007f0572836160 RCX: 00007f057260e169 [ 39.859452][ T3858] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 39.859466][ T3858] RBP: 00007f0570c35090 R08: 0000000000000000 R09: 0000000000000000 [ 39.859480][ T3858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.859494][ T3858] R13: 0000000000000000 R14: 00007f0572836160 R15: 00007ffdfefc70a8 [ 39.859514][ T3858] [ 39.860614][ T3856] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.106: couldn't read orphan inode 15 (err -117) [ 39.933424][ T3861] loop3: detected capacity change from 0 to 1024 [ 39.943332][ T3652] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 40.145434][ T3856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.150698][ T3861] EXT4-fs: dax option not supported [ 40.243903][ T3856] FAULT_INJECTION: forcing a failure. [ 40.243903][ T3856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.257229][ T3856] CPU: 0 UID: 0 PID: 3856 Comm: syz.2.106 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 40.257325][ T3856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 40.257341][ T3856] Call Trace: [ 40.257349][ T3856] [ 40.257358][ T3856] dump_stack_lvl+0xf6/0x150 [ 40.257387][ T3856] dump_stack+0x15/0x1a [ 40.257407][ T3856] should_fail_ex+0x261/0x270 [ 40.257436][ T3856] should_fail+0xb/0x10 [ 40.257460][ T3856] should_fail_usercopy+0x1a/0x20 [ 40.257513][ T3856] _copy_from_user+0x1c/0xa0 [ 40.257546][ T3856] move_addr_to_kernel+0x8c/0x130 [ 40.257581][ T3856] copy_msghdr_from_user+0x280/0x2b0 [ 40.257620][ T3856] __sys_sendmsg+0x141/0x240 [ 40.257666][ T3856] __x64_sys_sendmsg+0x46/0x50 [ 40.257688][ T3856] x64_sys_call+0x26f3/0x2e10 [ 40.257746][ T3856] do_syscall_64+0xc9/0x1a0 [ 40.257776][ T3856] ? clear_bhb_loop+0x25/0x80 [ 40.257808][ T3856] ? clear_bhb_loop+0x25/0x80 [ 40.257832][ T3856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.257913][ T3856] RIP: 0033:0x7faf59bbe169 [ 40.257975][ T3856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.257992][ T3856] RSP: 002b:00007faf58227038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.258010][ T3856] RAX: ffffffffffffffda RBX: 00007faf59de5fa0 RCX: 00007faf59bbe169 [ 40.258021][ T3856] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000004 [ 40.258032][ T3856] RBP: 00007faf58227090 R08: 0000000000000000 R09: 0000000000000000 [ 40.258096][ T3856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.258110][ T3856] R13: 0000000000000000 R14: 00007faf59de5fa0 R15: 00007ffc299ec7e8 [ 40.258129][ T3856] [ 40.264848][ T3652] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.360244][ T3871] Zero length message leads to an empty skb [ 40.473464][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.492605][ T3652] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.524654][ T3652] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 40.558874][ T3877] loop2: detected capacity change from 0 to 512 [ 40.575409][ T3878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.111'. [ 40.622469][ T3877] EXT4-fs: Ignoring removed orlov option [ 40.628839][ T3890] syz.3.111 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 40.647730][ T3877] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.110: corrupted in-inode xattr: invalid ea_ino [ 40.669980][ T3652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.671275][ T3878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.111'. [ 40.685366][ T3652] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.703225][ T3652] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.713801][ T3652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.727679][ T3877] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.110: couldn't read orphan inode 15 (err -117) [ 40.728476][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.746549][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.764698][ T1049] usb 9-1: enqueue for inactive port 0 [ 40.771619][ T3877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.784465][ T1049] usb 9-1: enqueue for inactive port 0 [ 40.806707][ T3878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.111'. [ 40.812080][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.822763][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.865220][ T1049] vhci_hcd: vhci_device speed not set [ 40.922287][ C1] hrtimer: interrupt took 47303 ns [ 40.926912][ T3652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.945853][ T3920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59752 sclass=netlink_route_socket pid=3920 comm=syz.4.119 [ 40.960215][ T3920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23656 sclass=netlink_route_socket pid=3920 comm=syz.4.119 [ 40.977338][ T3922] netlink: 'syz.3.117': attribute type 58 has an invalid length. [ 40.985295][ T3922] netlink: 20 bytes leftover after parsing attributes in process `syz.3.117'. [ 40.994699][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.004692][ T3920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.119'. [ 41.077496][ T3931] FAULT_INJECTION: forcing a failure. [ 41.077496][ T3931] name failslab, interval 1, probability 0, space 0, times 0 [ 41.090284][ T3931] CPU: 0 UID: 0 PID: 3931 Comm: syz.2.120 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 41.090315][ T3931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 41.090351][ T3931] Call Trace: [ 41.090357][ T3931] [ 41.090365][ T3931] dump_stack_lvl+0xf6/0x150 [ 41.090393][ T3931] dump_stack+0x15/0x1a [ 41.090413][ T3931] should_fail_ex+0x261/0x270 [ 41.090437][ T3931] should_failslab+0x8f/0xb0 [ 41.090457][ T3931] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 41.090572][ T3931] ? __alloc_skb+0x10d/0x320 [ 41.090598][ T3931] __alloc_skb+0x10d/0x320 [ 41.090620][ T3931] netlink_alloc_large_skb+0xad/0xe0 [ 41.090659][ T3931] netlink_sendmsg+0x3da/0x720 [ 41.090689][ T3931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 41.090718][ T3931] __sock_sendmsg+0x140/0x180 [ 41.090754][ T3931] ____sys_sendmsg+0x350/0x4e0 [ 41.090797][ T3931] __sys_sendmsg+0x1a0/0x240 [ 41.090874][ T3931] __x64_sys_sendmsg+0x46/0x50 [ 41.090897][ T3931] x64_sys_call+0x26f3/0x2e10 [ 41.090918][ T3931] do_syscall_64+0xc9/0x1a0 [ 41.090949][ T3931] ? clear_bhb_loop+0x25/0x80 [ 41.090980][ T3931] ? clear_bhb_loop+0x25/0x80 [ 41.091007][ T3931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.091032][ T3931] RIP: 0033:0x7faf59bbe169 [ 41.091050][ T3931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.091072][ T3931] RSP: 002b:00007faf58227038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.091095][ T3931] RAX: ffffffffffffffda RBX: 00007faf59de5fa0 RCX: 00007faf59bbe169 [ 41.091120][ T3931] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 41.091182][ T3931] RBP: 00007faf58227090 R08: 0000000000000000 R09: 0000000000000000 [ 41.091196][ T3931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.091209][ T3931] R13: 0000000000000000 R14: 00007faf59de5fa0 R15: 00007ffc299ec7e8 [ 41.091232][ T3931] [ 41.456051][ T3959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.464893][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 41.464908][ T29] audit: type=1400 audit(1745062345.056:638): avc: denied { read write } for pid=3958 comm="syz.1.126" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.494891][ T29] audit: type=1400 audit(1745062345.056:639): avc: denied { open } for pid=3958 comm="syz.1.126" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.518203][ T3959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.526046][ T29] audit: type=1400 audit(1745062345.056:640): avc: denied { ioctl } for pid=3958 comm="syz.1.126" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.557056][ T3380] kernel write not supported for file /uhid (pid: 3380 comm: kworker/1:5) [ 41.566062][ T3652] veth0_vlan: entered promiscuous mode [ 41.574565][ T3962] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 41.583433][ T3652] veth1_vlan: entered promiscuous mode [ 41.591575][ T3380] IPVS: starting estimator thread 0... [ 41.597507][ T29] audit: type=1400 audit(1745062345.166:641): avc: denied { ioctl } for pid=3958 comm="syz.1.126" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 41.622869][ T29] audit: type=1400 audit(1745062345.166:642): avc: denied { write } for pid=3958 comm="syz.1.126" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.642967][ T29] audit: type=1400 audit(1745062345.166:643): avc: denied { read } for pid=3958 comm="syz.1.126" path="socket:[6540]" dev="sockfs" ino=6540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.677360][ T3652] veth0_macvtap: entered promiscuous mode [ 41.688963][ T3652] veth1_macvtap: entered promiscuous mode [ 41.695094][ T3968] IPVS: using max 2448 ests per chain, 122400 per kthread [ 41.704919][ T3652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.715485][ T3652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.725390][ T3652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.735945][ T3652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.745829][ T3652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.756370][ T3652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.766532][ T3652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.777150][ T3652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.847102][ T3652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.866965][ T3652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.877534][ T3652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.887414][ T3652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.897873][ T3652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.907715][ T3652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.918204][ T3652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.928445][ T3652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.938904][ T3652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.958660][ T29] audit: type=1400 audit(1745062345.556:644): avc: denied { connect } for pid=3979 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.045715][ T3652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.073360][ T3985] netlink: 60 bytes leftover after parsing attributes in process `syz.4.132'. [ 42.105646][ T29] audit: type=1326 audit(1745062345.706:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3984 comm="syz.4.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3774e169 code=0x7ffc0000 [ 42.116830][ T3652] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.137777][ T3652] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.146528][ T3652] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.155257][ T3652] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.164100][ T29] audit: type=1326 audit(1745062345.706:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3984 comm="syz.4.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f2a3774e169 code=0x7ffc0000 [ 42.187332][ T29] audit: type=1326 audit(1745062345.706:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3984 comm="syz.4.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a3774e169 code=0x7ffc0000 [ 42.242696][ T1032] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.265287][ T1032] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 42.338046][ T3997] loop4: detected capacity change from 0 to 2048 [ 42.592874][ T4009] loop5: detected capacity change from 0 to 8192 [ 42.699804][ T4017] loop4: detected capacity change from 0 to 8192 [ 42.781227][ T4029] tipc: Started in network mode [ 42.786285][ T4029] tipc: Node identity _, cluster identity 4711 [ 42.829646][ T4031] IPv6: Can't replace route, no match found [ 42.884084][ T4035] tipc: New replicast peer: 10.1.1.2 [ 42.889806][ T4035] tipc: Enabled bearer , priority 10 [ 42.952011][ T4041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.143'. [ 43.116777][ T4044] tipc: Started in network mode [ 43.121699][ T4044] tipc: Node identity ac14140f, cluster identity 4711 [ 43.141712][ T4044] tipc: New replicast peer: 10.1.1.2 [ 43.147205][ T4044] tipc: Enabled bearer , priority 10 [ 43.239051][ T4050] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 43.279358][ T4050] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 43.314029][ T3982] loop2: detected capacity change from 0 to 1024 [ 43.368390][ T3982] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.379211][ T4062] netlink: 'syz.1.152': attribute type 3 has an invalid length. [ 43.395111][ T4062] netlink: 'syz.1.152': attribute type 3 has an invalid length. [ 43.429557][ T3982] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.448314][ T4056] loop5: detected capacity change from 0 to 8192 [ 43.485807][ T4066] tipc: Cannot configure node identity twice [ 43.492355][ T3982] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 43.527348][ T3982] EXT4-fs (loop2): orphan cleanup on readonly fs [ 43.534537][ T3982] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 43.575900][ T4075] loop1: detected capacity change from 0 to 512 [ 43.592593][ T4075] journal_path: Non-blockdev passed as './bus' [ 43.598865][ T4075] EXT4-fs: error: could not find journal device path [ 43.623674][ T3982] EXT4-fs (loop2): Remounting filesystem read-only [ 43.627859][ T4075] loop1: detected capacity change from 0 to 512 [ 43.641905][ T4086] netlink: 12 bytes leftover after parsing attributes in process `syz.5.160'. [ 43.653696][ T4075] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.662371][ T4076] FAULT_INJECTION: forcing a failure. [ 43.662371][ T4076] name failslab, interval 1, probability 0, space 0, times 0 [ 43.672408][ T4084] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.675161][ T4076] CPU: 1 UID: 0 PID: 4076 Comm: syz.4.157 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 43.675196][ T4076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 43.675212][ T4076] Call Trace: [ 43.675220][ T4076] [ 43.675228][ T4076] dump_stack_lvl+0xf6/0x150 [ 43.675259][ T4076] dump_stack+0x15/0x1a [ 43.675280][ T4076] should_fail_ex+0x261/0x270 [ 43.675311][ T4076] should_failslab+0x8f/0xb0 [ 43.675405][ T4076] __kmalloc_cache_noprof+0x55/0x320 [ 43.675504][ T4076] ? sctp_add_bind_addr+0x6f/0x1f0 [ 43.675538][ T4076] sctp_add_bind_addr+0x6f/0x1f0 [ 43.675658][ T4076] sctp_copy_local_addr_list+0x19d/0x220 [ 43.675695][ T4076] sctp_copy_one_addr+0x82/0x270 [ 43.675728][ T4076] sctp_bind_addr_copy+0x81/0x2b0 [ 43.675761][ T4076] sctp_assoc_set_bind_addr_from_ep+0xc0/0xd0 [ 43.675802][ T4076] sctp_connect_new_asoc+0x1df/0x3c0 [ 43.675903][ T4076] __sctp_connect+0x43e/0x7c0 [ 43.675949][ T4076] sctp_getsockopt_connectx3+0x22a/0x310 [ 43.675986][ T4076] sctp_getsockopt+0x805/0xab0 [ 43.676080][ T4076] sock_common_getsockopt+0x5b/0x70 [ 43.676120][ T4076] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 43.676161][ T4076] do_sock_getsockopt+0x1fc/0x290 [ 43.676193][ T4076] __x64_sys_getsockopt+0x13f/0x1c0 [ 43.676290][ T4076] x64_sys_call+0x128f/0x2e10 [ 43.676310][ T4076] do_syscall_64+0xc9/0x1a0 [ 43.676341][ T4076] ? clear_bhb_loop+0x25/0x80 [ 43.676369][ T4076] ? clear_bhb_loop+0x25/0x80 [ 43.676395][ T4076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.676453][ T4076] RIP: 0033:0x7f2a3774e169 [ 43.676473][ T4076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.676495][ T4076] RSP: 002b:00007f2a35db7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 43.676518][ T4076] RAX: ffffffffffffffda RBX: 00007f2a37975fa0 RCX: 00007f2a3774e169 [ 43.676534][ T4076] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000007 [ 43.676550][ T4076] RBP: 00007f2a35db7090 R08: 0000200000000240 R09: 0000000000000000 [ 43.676565][ T4076] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 43.676627][ T4076] R13: 0000000000000000 R14: 00007f2a37975fa0 R15: 00007ffc025c4f58 [ 43.676652][ T4076] [ 43.692060][ T4086] netlink: 48 bytes leftover after parsing attributes in process `syz.5.160'. [ 43.701633][ T3982] EXT4-fs (loop2): 1 orphan inode deleted [ 43.711681][ T4075] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.813808][ T3982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 43.817988][ T4075] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.818768][ T4075] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 32769)! [ 43.896297][ T4086] FAULT_INJECTION: forcing a failure. [ 43.896297][ T4086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.896980][ T4075] EXT4-fs (loop1): group descriptors corrupted! [ 43.904958][ T4086] CPU: 0 UID: 0 PID: 4086 Comm: syz.5.160 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 43.904991][ T4086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 43.905085][ T4086] Call Trace: [ 43.905095][ T4086] [ 43.905107][ T4086] dump_stack_lvl+0xf6/0x150 [ 43.905139][ T4086] dump_stack+0x15/0x1a [ 43.905160][ T4086] should_fail_ex+0x261/0x270 [ 43.905191][ T4086] should_fail+0xb/0x10 [ 43.905307][ T4086] should_fail_usercopy+0x1a/0x20 [ 43.905338][ T4086] _copy_from_user+0x1c/0xa0 [ 43.905376][ T4086] move_addr_to_kernel+0x8c/0x130 [ 43.905480][ T4086] copy_msghdr_from_user+0x280/0x2b0 [ 43.905524][ T4086] __sys_sendmsg+0x141/0x240 [ 43.905576][ T4086] __x64_sys_sendmsg+0x46/0x50 [ 43.905611][ T4086] x64_sys_call+0x26f3/0x2e10 [ 43.905676][ T4086] do_syscall_64+0xc9/0x1a0 [ 43.905710][ T4086] ? clear_bhb_loop+0x25/0x80 [ 43.905738][ T4086] ? clear_bhb_loop+0x25/0x80 [ 43.905771][ T4086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.905798][ T4086] RIP: 0033:0x7fc14580e169 [ 43.905818][ T4086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.905922][ T4086] RSP: 002b:00007fc143e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.905945][ T4086] RAX: ffffffffffffffda RBX: 00007fc145a35fa0 RCX: 00007fc14580e169 [ 43.905960][ T4086] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000009 [ 43.905975][ T4086] RBP: 00007fc143e77090 R08: 0000000000000000 R09: 0000000000000000 [ 43.905989][ T4086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.906004][ T4086] R13: 0000000000000000 R14: 00007fc145a35fa0 R15: 00007ffe0a406ce8 [ 43.906028][ T4086] [ 44.016930][ T1032] tipc: Node number set to 1596850176 [ 44.177238][ T10] tipc: Node number set to 2886997007 [ 44.210477][ T4090] 9pnet_fd: Insufficient options for proto=fd [ 44.241276][ T4098] netlink: 56 bytes leftover after parsing attributes in process `syz.4.164'. [ 44.241471][ T4096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'. [ 44.266571][ T4099] loop5: detected capacity change from 0 to 1024 [ 44.285912][ T4098] loop4: detected capacity change from 0 to 512 [ 44.290342][ T4096] netlink: 48 bytes leftover after parsing attributes in process `syz.1.163'. [ 44.306905][ T4099] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 44.317893][ T4099] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 44.329592][ T4096] atomic_op ffff8881177c0528 conn xmit_atomic 0000000000000000 [ 44.347650][ T4098] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.358740][ T4098] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 44.371424][ T4099] JBD2: no valid journal superblock found [ 44.377267][ T4099] EXT4-fs (loop5): Could not load journal inode [ 44.390814][ T4098] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 44.412730][ T4098] EXT4-fs (loop4): orphan cleanup on readonly fs [ 44.432906][ T4098] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.164: Invalid block bitmap block 0 in block_group 0 [ 44.466504][ T4098] EXT4-fs (loop4): Remounting filesystem read-only [ 44.481836][ T4104] loop1: detected capacity change from 0 to 8192 [ 44.492841][ T4098] EXT4-fs (loop4): 1 orphan inode deleted [ 44.528426][ T4098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.612673][ T4115] tipc: Started in network mode [ 44.617756][ T4115] tipc: Node identity _, cluster identity 4711 [ 44.642406][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.660982][ T4121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.670964][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.694497][ T4121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.707719][ T4122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.744843][ T4122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.816860][ T4132] netlink: 44 bytes leftover after parsing attributes in process `syz.2.172'. [ 44.849103][ T4137] loop1: detected capacity change from 0 to 512 [ 44.863463][ T4137] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.901269][ T4139] loop3: detected capacity change from 0 to 1024 [ 44.909387][ T4137] EXT4-fs (loop1): 1 truncate cleaned up [ 44.918456][ T4137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.933314][ T4139] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.951753][ T4132] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 44.967704][ T4139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.996405][ T4132] SELinux: failed to load policy [ 45.075179][ T4139] netem: change failed [ 45.165296][ T4155] sd 0:0:1:0: device reset [ 45.170761][ T4155] SELinux: Context Ü is not valid (left unmapped). [ 45.216261][ T3302] EXT4-fs warning (device loop3): empty_inline_dir:1774: bad inline directory (dir #12) - no `..' [ 45.230879][ T3302] EXT4-fs warning (device loop3): empty_inline_dir:1774: bad inline directory (dir #12) - no `..' [ 45.253486][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.265328][ T3302] EXT4-fs warning (device loop3): empty_inline_dir:1774: bad inline directory (dir #12) - no `..' [ 45.281593][ T3302] EXT4-fs warning (device loop3): empty_inline_dir:1774: bad inline directory (dir #12) - no `..' [ 45.289279][ T4151] loop5: detected capacity change from 0 to 8192 [ 45.380347][ T3302] EXT4-fs warning (device loop3): empty_inline_dir:1774: bad inline directory (dir #12) - no `..' [ 45.388583][ T4165] loop1: detected capacity change from 0 to 512 [ 45.431633][ T4165] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.435566][ T3302] EXT4-fs warning (device loop3): empty_inline_dir:1774: bad inline directory (dir #12) - no `..' [ 45.475913][ T4165] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.489184][ T3302] EXT4-fs warning (device loop3): empty_inline_dir:1774: bad inline directory (dir #12) - no `..' [ 45.515145][ T4165] EXT4-fs (loop1): 1 truncate cleaned up [ 45.527078][ T4171] ================================================================== [ 45.528343][ T4165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.535193][ T4171] BUG: KCSAN: data-race in mas_wmb_replace / mtree_range_walk [ 45.555106][ T4171] [ 45.557460][ T4171] write to 0xffff88810322be00 of 8 bytes by task 4168 on cpu 1: [ 45.565118][ T4171] mas_wmb_replace+0xebb/0x1510 [ 45.570013][ T4171] mas_wr_store_entry+0x158c/0x2460 [ 45.575241][ T4171] mas_store_prealloc+0x6d5/0x960 [ 45.577014][ T3302] EXT4-fs warning (device loop3): empty_inline_dir:1774: bad inline directory (dir #12) - no `..' [ 45.580271][ T4171] vma_iter_store_new+0x1d3/0x210 [ 45.580303][ T4171] vma_complete+0x12b/0x570 [ 45.580327][ T4171] __split_vma+0x56c/0x630 [ 45.580355][ T4171] vma_modify+0x105/0x200 [ 45.609254][ T4171] vma_modify_flags+0x10a/0x140 [ 45.614134][ T4171] mprotect_fixup+0x30f/0x5d0 [ 45.618828][ T4171] do_mprotect_pkey+0x6ce/0x9a0 [ 45.619632][ T3302] EXT4-fs warning (device loop3): empty_inline_dir:1774: bad inline directory (dir #12) - no `..' [ 45.623699][ T4171] __x64_sys_mprotect+0x48/0x60 [ 45.639176][ T4171] x64_sys_call+0x272f/0x2e10 [ 45.643907][ T4171] do_syscall_64+0xc9/0x1a0 [ 45.648441][ T4171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.654537][ T4171] [ 45.656877][ T4171] read to 0xffff88810322be00 of 8 bytes by task 4171 on cpu 0: [ 45.664437][ T4171] mtree_range_walk+0x347/0x460 [ 45.669303][ T4171] mas_walk+0x16e/0x320 [ 45.673470][ T4171] lock_vma_under_rcu+0xa7/0x340 [ 45.678421][ T4171] exc_page_fault+0x150/0x6a0 [ 45.683106][ T4171] asm_exc_page_fault+0x26/0x30 [ 45.687967][ T4171] [ 45.690294][ T4171] value changed: 0xffff888106e95c06 -> 0xffff88810322be00 [ 45.697400][ T4171] [ 45.699723][ T4171] Reported by Kernel Concurrency Sanitizer on: [ 45.705879][ T4171] CPU: 0 UID: 0 PID: 4171 Comm: syz.5.188 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(voluntary) [ 45.718211][ T4171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.728275][ T4171] ================================================================== [ 45.740862][ T3302] EXT4-fs warning (device loop3): empty_inline_dir:1774: bad inline directory (dir #12) - no `..' [ 45.752625][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.999656][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.012326][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.089018][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.170572][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.228684][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.311077][ T51] bridge_slave_1: left allmulticast mode [ 46.316859][ T51] bridge_slave_1: left promiscuous mode [ 46.322589][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.332055][ T51] bridge_slave_0: left allmulticast mode [ 46.337826][ T51] bridge_slave_0: left promiscuous mode [ 46.343473][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.457484][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.468544][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.478035][ T51] bond0 (unregistering): Released all slaves [ 46.526141][ T51] tipc: Left network mode [ 46.539305][ T51] hsr_slave_0: left promiscuous mode [ 46.555303][ T51] hsr_slave_1: left promiscuous mode [ 46.561062][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.568862][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.593136][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.600659][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.612089][ T51] veth1_macvtap: left promiscuous mode [ 46.619373][ T51] veth0_macvtap: left promiscuous mode [ 46.624897][ T51] veth1_vlan: left promiscuous mode [ 46.631320][ T51] veth0_vlan: left promiscuous mode [ 46.702690][ T51] team0 (unregistering): Port device team_slave_1 removed [ 46.713549][ T51] team0 (unregistering): Port device team_slave_0 removed